Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: hE783YwDYbPPrS4sdMM3O+rUjeXQZLHjUu7lMehR4Io=
Subject key identifier: 22:B9:A0:5A:21:C9:7B:33:E1:5C:F3:CF:01:C8:13:BD:7C:D5:FF:19
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 019A0291356BB2A1D467D824688178C73C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 11B3
Signing time: Mon 20 Oct 2025 17:01:02 +0000
Manifest this update: Mon 20 Oct 2025 17:01:02 +0000
Manifest next update: Tue 21 Oct 2025 17:01:02 +0000
Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=)
2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: elSunHFv96DWDNPc1pjG/Mfvy0irgDc0EGaSqt4XuZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:35:6b:b2:a1:d4:67:d8:24:68:81:78:c7:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Oct 20 17:01:02 2025 GMT
Not After : Oct 21 17:01:02 2025 GMT
Subject: CN=22b9a05a21c97b33e15cf3cf01c813bd7cd5ff19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:ab:0f:2c:ce:c8:d0:96:52:cf:98:18:7a:
71:34:13:75:1d:f5:23:17:74:c4:9d:83:98:5e:36:
7c:95:4a:8b:fa:f5:dd:17:08:b9:af:15:96:86:d7:
0b:c6:67:18:e6:af:a4:6a:0f:ed:ec:96:c0:c6:75:
eb:29:00:1c:cd:7a:e7:d9:1a:e6:5c:72:98:ce:9b:
27:39:91:46:38:de:43:97:5f:1e:e0:73:73:8c:e9:
86:e8:b6:0e:33:b8:35:19:75:ed:89:c6:7c:ad:ff:
80:b6:fc:f4:85:6d:3e:33:31:ee:37:88:dc:d5:6e:
fa:de:b2:84:8e:2b:88:15:c5:1f:95:85:0e:42:b2:
c2:98:86:f9:49:72:3c:60:22:ff:3d:e8:cb:8c:f4:
af:2c:ad:fb:20:1f:83:e3:18:40:7c:76:35:8b:8a:
29:ac:ad:a5:c1:9f:e8:80:fa:8d:8b:7b:ec:ff:4b:
3b:6d:bf:a0:39:73:10:d6:0f:f4:0a:48:e1:72:f3:
58:f0:1b:e4:7d:ac:e4:01:bc:e6:03:9f:f5:fb:9f:
9d:52:13:6c:fe:25:c3:01:2e:d2:a9:9c:72:c3:80:
4a:75:0b:7b:4b:eb:29:82:0c:7d:1a:d8:cd:1b:2b:
3e:63:a0:69:9d:c0:b4:e1:bf:df:f5:d8:b0:f2:27:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:A0:5A:21:C9:7B:33:E1:5C:F3:CF:01:C8:13:BD:7C:D5:FF:19
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:10:80:d2:0a:25:15:66:f0:87:d4:4a:66:67:bb:d2:14:9c:
6e:f9:6e:84:b7:ea:05:ac:f6:cc:46:aa:4c:23:12:e6:2e:b9:
2a:b0:2f:cf:09:64:54:67:d9:86:6d:3b:38:b9:4c:b6:c5:41:
4b:b0:ff:9a:ff:09:e8:1c:50:ef:48:85:4d:dd:20:4b:a4:b3:
fd:ee:06:cb:f4:e6:5b:c8:3a:b4:a9:97:53:55:ac:ba:47:3b:
8b:40:65:6a:c4:e7:ba:5c:e3:91:77:45:bf:58:51:22:0d:4a:
47:02:17:55:2b:f4:b3:04:35:75:26:5e:34:97:e3:81:72:25:
15:f9:83:cc:ba:b9:f5:be:b1:1d:4e:42:d9:f4:df:d1:42:8b:
aa:5e:2f:e0:43:24:9f:78:0e:44:a2:01:b1:b4:a8:57:d2:9a:
fd:9e:ef:cc:30:30:77:a5:89:24:1d:29:94:58:26:1b:c7:de:
fc:b2:10:c9:9b:57:0c:5b:16:32:8f:7f:f8:48:96:93:b7:33:
7c:4c:49:58:65:d8:19:1c:b9:9d:a3:1c:92:b3:6c:29:95:39:
0a:40:42:7b:77:f2:ec:1c:9d:44:63:13:59:21:6a:5f:9c:2e:
02:5e:19:c0:4b:96:51:0d:ca:42:e5:5d:77:e9:41:71:a3:ff:
4f:52:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:29 2025 by rpki-client