Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: cWjVDNchdgwkeiYN7oHBX60eUEmJITKjS0Hayay2oHQ=
Subject key identifier: EE:7F:97:26:A1:9C:09:AF:F1:FE:42:89:95:5C:06:94:2B:9F:78:A0
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 0199FB7C81DA383C986D0C7186454B9DE2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 07BC
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: f6PJKATaQwrmP9jEEYOJZ2G3H3gym483Sty6RNJcSgU=)
3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:81:da:38:3c:98:6d:0c:71:86:45:4b:9d:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=ee7f9726a19c09aff1fe4289955c06942b9f78a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:15:32:a9:d3:1b:bd:08:9f:a4:c2:0a:ce:
2a:dd:35:4c:b2:0a:f0:55:90:8d:11:87:5c:c5:1a:
11:f5:52:5e:79:5f:0e:c2:48:44:67:c5:39:1f:90:
f5:ba:6e:a4:0e:92:e0:9d:1f:b9:06:d2:f8:32:51:
30:48:eb:4a:7a:dc:43:cc:af:79:71:a9:7a:03:33:
e5:54:ee:70:3f:b7:94:09:0e:85:cf:4a:42:42:27:
09:4e:4d:4e:71:b3:c6:59:6e:b1:11:2b:05:8d:b1:
48:81:14:e2:ed:48:82:84:f3:1e:b7:e4:81:1c:59:
c3:34:48:41:81:53:e3:d2:ac:97:38:a3:f6:a9:9d:
32:73:87:17:bc:55:49:6a:f0:b0:1c:06:78:ba:3e:
5c:68:b3:2e:5a:fa:8d:e5:c1:2d:79:0b:fa:6b:51:
b5:a8:1c:10:96:8e:74:79:d0:35:5f:92:b1:a5:64:
8b:12:2b:1c:8c:02:d1:4f:65:79:b4:01:37:e9:c4:
d1:01:60:cd:92:d1:54:8a:29:8f:2a:4f:1a:e4:01:
91:cd:49:42:f4:0b:69:41:5c:ce:13:80:c7:6c:06:
cf:0c:1c:1d:a4:9f:28:26:04:f5:b0:c2:27:c4:9c:
d5:0f:b8:07:8b:d9:6d:23:49:df:53:7f:4d:a3:a3:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:97:26:A1:9C:09:AF:F1:FE:42:89:95:5C:06:94:2B:9F:78:A0
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ad:3c:e3:1d:95:a8:03:2b:63:9f:5a:59:cc:e9:51:90:72:
b3:81:5c:69:b5:6e:7e:53:6a:03:fb:2f:bd:b7:30:3c:5c:51:
43:f6:9f:3c:09:21:8f:56:ac:1f:db:24:f2:74:59:fe:2f:dd:
2e:bf:37:70:e5:03:9f:2d:f4:28:1d:d1:f2:3f:89:06:b7:be:
6b:76:95:07:13:83:5a:a9:db:51:db:cc:06:c1:8f:bd:0b:5d:
8c:9b:86:d4:a3:e1:25:e3:cf:cb:02:07:90:36:57:ee:c4:ae:
b6:34:ed:63:08:9a:0a:4f:fd:f8:8b:50:a1:11:d0:5f:0a:7b:
c6:c0:f6:f1:41:18:06:3d:59:b9:55:bf:23:7d:b2:81:44:a8:
c8:9c:ec:32:79:e0:bc:b0:6f:1b:9c:83:c5:bd:21:64:d4:1f:
e3:e7:70:d6:eb:93:ce:42:99:d4:4c:ef:ed:3c:a4:72:a2:11:
44:9a:98:fc:a1:2e:15:19:b7:86:3b:a2:94:06:66:63:8a:2b:
fa:4a:ea:8e:52:87:75:f6:a9:45:8b:0d:ab:b8:38:dc:62:e1:
8e:af:ae:22:ea:21:93:3b:1f:ed:ef:14:8b:00:88:5a:a6:27:
91:7a:aa:be:4f:24:c8:be:40:28:86:80:48:ee:33:6e:8c:34:
a0:63:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:09 2025 by rpki-client