Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: +YZBi51FjRyn+Xd3tP6sDXoGb+4b9LQOi2B5JBZtCDs=
Subject key identifier: DB:09:F0:DB:3C:FB:06:1C:DC:9C:62:8F:63:7C:77:13:A9:98:B7:7F
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 0199FFC78D6FD46A6FEA209D76A62E6BB10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0BC1
Signing time: Mon 20 Oct 2025 04:01:31 +0000
Manifest this update: Mon 20 Oct 2025 04:01:31 +0000
Manifest next update: Tue 21 Oct 2025 04:01:31 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: rfyzEqh/Ws1chI6cyBId0HvFTKq9e5V3y2V7UMGhpV4=)
2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:8d:6f:d4:6a:6f:ea:20:9d:76:a6:2e:6b:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Oct 20 04:01:31 2025 GMT
Not After : Oct 21 04:01:31 2025 GMT
Subject: CN=db09f0db3cfb061cdc9c628f637c7713a998b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:00:bd:23:9c:30:06:79:5d:7b:9c:4f:7f:
29:1c:7b:f4:90:73:10:86:87:6c:fb:b6:5d:3a:30:
c4:3a:36:45:c8:d6:38:0e:7e:1d:86:75:4d:2f:7a:
c0:2a:fb:f7:ba:02:3b:fc:0f:ae:7d:78:bf:53:2d:
21:ed:f4:d3:95:8e:c9:ac:f8:87:5b:ec:57:37:08:
2b:4e:42:9b:28:aa:8c:c1:b3:e0:b7:0d:9b:ee:61:
69:63:85:d0:ff:56:83:19:51:13:80:d1:c1:48:52:
59:d4:83:0d:1f:dd:7f:31:b3:72:05:af:22:3e:34:
18:06:f3:44:fb:7b:3d:58:f7:e5:21:c4:9a:d4:18:
8f:1e:34:dd:55:ac:2d:0c:2f:3f:ea:11:fc:f2:49:
18:31:47:f5:e0:e4:f1:99:2a:27:28:bd:39:17:66:
8c:5b:04:a8:fe:71:0d:1e:f1:c2:2a:bf:11:ce:90:
b1:16:93:6d:3e:03:1d:77:e1:82:3e:00:7a:ab:ec:
8f:63:b1:8e:28:31:8c:3b:d6:80:95:43:7f:d1:92:
e9:ae:b5:c0:54:56:10:52:eb:94:48:18:dd:1b:f4:
29:55:a0:1b:09:07:09:a4:2f:d4:0b:06:ec:1e:d0:
b5:27:a7:50:31:67:23:30:d1:b8:f6:4b:b6:a9:70:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:F0:DB:3C:FB:06:1C:DC:9C:62:8F:63:7C:77:13:A9:98:B7:7F
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:57:97:c0:bd:fe:31:b7:1e:6b:c9:6b:87:67:4e:28:83:6c:
f0:a8:34:d8:47:8a:fa:82:90:05:4f:0d:b3:b2:56:70:a2:53:
2d:51:fb:7b:bf:f4:13:63:1d:57:8f:11:da:d9:b8:8e:7d:b2:
07:f7:73:19:fa:70:b5:71:de:ff:ee:df:3b:b1:d7:82:41:21:
db:a9:c4:0e:70:6b:61:6a:b9:26:65:5a:ed:67:9c:68:ea:b7:
26:54:32:29:ff:20:54:8a:47:85:5a:c8:fd:51:89:f8:da:1d:
e4:e3:f1:08:0d:10:68:c4:58:bd:90:2c:d3:1c:85:f9:2a:51:
f5:b8:f0:dd:ca:de:2d:33:79:90:9b:93:d1:08:79:28:27:30:
24:df:f6:b0:93:38:f6:ae:d0:c1:ec:7f:ef:57:42:9b:cd:c2:
e3:b5:0f:d3:50:8f:e5:4b:5a:5b:94:2f:bb:34:35:1e:07:7e:
75:c6:a6:96:9e:31:9c:38:a2:ac:31:81:88:3b:80:92:c6:37:
a0:35:f4:a1:fb:08:6e:aa:2f:3c:83:09:f4:1f:5a:7c:57:4a:
91:54:12:38:01:0e:80:75:99:19:0c:6d:92:1a:17:58:1f:ad:
f4:69:6b:d3:77:54:15:98:b9:c6:e4:b6:92:79:f2:9b:06:44:
73:81:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:47 2025 by rpki-client