Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: VnXfop22O6J89CYo7Gc2yra9RFmuL7h64kGVqcXtlS4=
Subject key identifier: 4E:4B:E8:1C:89:CC:AE:4B:65:A6:93:FC:9E:2D:D5:8A:2D:7C:6B:89
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 0199FCC6B70BD0B78772F8D1D0B42C1C4821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 0791
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: GQSNluYfjRetTE9t30JfX5NWnd/VmGYmnmZu70szVpo=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b7:0b:d0:b7:87:72:f8:d1:d0:b4:2c:1c:48:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=4e4be81c89ccae4b65a693fc9e2dd58a2d7c6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:b8:ab:75:25:21:c4:ac:36:93:96:1c:c2:
ad:3b:30:a2:87:64:36:60:e8:39:5c:8e:1b:bd:dd:
73:8c:8b:45:3a:25:06:1a:2a:a9:1a:66:89:a9:ed:
41:3b:67:e1:70:db:82:40:14:b9:dd:14:54:a7:59:
93:09:ed:89:8d:fb:89:24:ed:76:3e:e4:a2:d9:eb:
79:32:15:19:45:e7:7b:d4:aa:3d:16:7a:bf:ea:6a:
24:e2:67:91:27:3a:df:9e:89:a5:cc:cd:ef:29:7b:
ba:4f:72:c5:08:66:95:ce:87:99:3c:e4:ee:3b:d0:
cc:a4:d1:7a:25:20:f1:cd:35:52:c0:73:d8:e4:09:
20:00:26:97:69:76:04:4b:5e:b2:a7:ef:bc:38:c2:
a3:ee:b0:e6:4b:04:79:68:c0:87:b5:04:4c:2f:65:
cc:c3:43:05:e8:5d:b5:e5:36:80:4f:5f:6d:ef:2a:
d4:b3:e9:63:81:4c:51:2b:aa:f4:3a:59:ed:2e:3a:
07:e4:43:bd:e7:ee:95:35:d4:1c:7e:cc:40:0d:86:
60:78:95:b6:aa:c8:0f:65:1e:a0:54:74:b3:38:f1:
da:69:26:a0:e3:48:98:25:75:1f:4b:8f:2d:01:ab:
0c:58:49:f2:c3:4c:10:6e:e1:15:bb:a3:12:a3:cf:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:E8:1C:89:CC:AE:4B:65:A6:93:FC:9E:2D:D5:8A:2D:7C:6B:89
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:78:83:cb:21:7f:21:9e:de:18:e1:69:37:b2:fa:c6:a1:64:
72:00:75:c9:a0:86:dd:78:0a:d2:62:65:bf:10:9c:1c:b1:f5:
71:c4:ec:1f:54:f6:94:ce:53:22:df:66:15:d2:f2:7d:9e:d9:
f2:a7:e8:b1:22:c6:05:e2:74:a9:89:cd:fa:66:fd:14:f8:b5:
74:39:a5:77:3a:5a:dc:d6:76:c4:0e:b2:60:1f:d9:ae:e9:c5:
53:95:f8:78:53:1a:39:37:7e:1b:15:2f:65:20:f6:c8:44:4a:
a5:ce:75:83:c6:51:df:6a:da:b6:47:74:e9:f7:8d:e2:43:de:
76:8c:9c:2f:6b:40:85:6f:64:32:12:ba:a5:18:11:15:75:0a:
ee:ce:32:59:88:df:33:75:ae:b7:98:42:bf:e9:10:6c:58:10:
08:a4:d1:98:09:6a:83:a8:fb:75:a0:33:86:25:65:ff:ba:6f:
db:f4:9a:d4:e8:08:7b:5f:48:76:56:d3:25:fa:40:0f:4d:4e:
ae:db:03:8b:c2:5a:fc:66:e5:79:1d:4c:50:18:e3:bd:05:49:
69:ff:de:22:06:6a:b1:f1:ec:89:cc:5d:20:dc:ca:f0:cf:d5:
b9:81:79:e6:13:4a:3e:56:3c:b0:9f:31:ef:bc:d8:a6:54:79:
eb:a9:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:14 2025 by rpki-client