Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: I4ESH7o0dZGYyuCuzmfYZnVlmjYsJ3y5oz5E8yKuBds=
Subject key identifier: 96:A3:86:4A:13:71:1F:54:A7:50:D3:9A:20:2E:B9:1D:F9:5F:CC:17
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 019A00A3922A5C74FD299D4D3401E88F796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 11B2
Signing time: Mon 20 Oct 2025 08:01:51 +0000
Manifest this update: Mon 20 Oct 2025 08:01:51 +0000
Manifest next update: Tue 21 Oct 2025 08:01:51 +0000
Files and hashes: 1: 91a4AyjiQ11AE-ejkjHD7dP2jCw.roa (hash: mqMxschgmHfJobGTtzuGdiipq4NqJDFBcrZK6ygd+ok=)
2: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: AnNcvpca6dxKY5wUhI3RiKuRagcIcFesaVyekjG73go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:92:2a:5c:74:fd:29:9d:4d:34:01:e8:8f:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Oct 20 08:01:51 2025 GMT
Not After : Oct 21 08:01:51 2025 GMT
Subject: CN=96a3864a13711f54a750d39a202eb91df95fcc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:90:78:b4:d0:cd:cf:e1:2a:c0:c6:98:52:
45:39:da:c8:82:ab:74:f8:43:92:91:6c:28:64:fb:
f4:cb:41:8a:68:d8:af:60:42:61:67:aa:a8:35:1e:
47:86:89:2f:f3:f4:ec:af:1c:c1:dd:a9:e3:16:02:
ed:eb:0b:1c:37:ab:24:57:e4:be:7e:73:e1:53:c9:
e2:07:62:eb:bd:a5:e6:41:cd:f4:aa:6e:c1:16:fb:
0c:18:f6:80:60:99:39:42:37:db:16:f8:ea:48:ed:
89:f6:44:ff:be:2a:20:2f:ad:d0:57:ff:6e:5b:05:
89:aa:4a:6a:ce:a1:a3:ed:b8:d4:ba:93:9d:bb:6c:
d4:f5:c6:bf:bc:66:9c:02:83:27:de:96:f2:ff:81:
7f:04:90:b8:92:16:74:bc:29:a4:c1:64:95:70:c1:
dc:99:0d:9a:68:bf:0c:d0:d9:2c:ab:dc:ce:63:bc:
f9:ff:b0:22:ab:78:ad:66:36:44:d8:88:34:a6:00:
14:f1:42:c5:f6:1b:9b:92:33:37:ac:23:85:66:cc:
fc:e9:31:f9:ff:6c:9c:4a:38:69:e1:de:55:1b:a1:
b2:d2:3b:9e:d1:fe:84:d4:e1:27:60:cd:2d:1f:0b:
b6:40:8c:64:2b:e8:e4:48:60:04:7e:f6:87:a5:45:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:86:4A:13:71:1F:54:A7:50:D3:9A:20:2E:B9:1D:F9:5F:CC:17
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:78:6b:f9:9b:21:ed:13:32:d2:ee:89:b8:79:0b:a6:73:b3:
5f:d5:23:ed:b2:a7:ae:32:6e:80:ee:ac:e8:f8:53:a1:75:92:
e0:86:f9:4b:1f:9d:c1:de:0c:68:88:2a:5c:e9:62:a8:fa:96:
bf:62:4b:73:6b:07:1f:c4:d0:a9:dd:22:51:d6:0c:79:7f:18:
21:74:e4:02:aa:ba:25:51:97:ff:f4:55:94:50:40:2a:7a:e5:
e7:46:b3:62:1a:9d:88:b5:df:c8:77:3a:96:65:4d:dd:98:e1:
82:19:4c:af:87:83:b7:42:e0:44:81:1a:3f:7b:f8:0d:fc:18:
71:1e:23:f7:75:80:96:97:ad:8a:a4:98:91:bf:48:2a:61:46:
94:fc:31:57:9e:eb:fc:bc:df:87:4e:12:64:73:01:68:94:c4:
17:b4:1f:31:52:b6:0b:3c:e8:05:fc:27:a2:f6:30:b4:0a:cf:
7d:07:f8:00:93:a8:53:32:5e:17:bc:70:1b:d0:24:f7:ef:ac:
f2:eb:63:c0:56:27:aa:07:50:f1:23:d8:ad:17:d1:75:55:22:
75:76:f5:54:de:a3:d9:ec:89:13:e1:a1:10:ca:80:bc:a6:f1:
45:d5:b9:52:11:7a:a6:af:6f:21:a8:f9:67:3e:dd:eb:70:80:
ce:63:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:22 2025 by rpki-client