Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: ZF6RlPafNyqetD6zUwkv88vTTyMfgPIJ8wexopUg3O0=
Subject key identifier: 79:A6:E2:A0:AC:3F:0E:78:56:97:74:B4:F1:A5:F2:1E:C1:16:B8:29
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 0199FF5991428362374E1A5194527D574C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 021E
Signing time: Mon 20 Oct 2025 02:01:23 +0000
Manifest this update: Mon 20 Oct 2025 02:01:23 +0000
Manifest next update: Tue 21 Oct 2025 02:01:23 +0000
Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: c4L4ko5dM5fWNms7iQAioqldXMBqj3xlj+qmN0Cb5NE=)
2: vvdAJvoqdhRnHyNRnR9QwCmshOA.roa (hash: yno5bMF5UsFhgiWOHsRLetn5+9bEbKawwZrFBu7TWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:91:42:83:62:37:4e:1a:51:94:52:7d:57:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Oct 20 02:01:23 2025 GMT
Not After : Oct 21 02:01:23 2025 GMT
Subject: CN=79a6e2a0ac3f0e78569774b4f1a5f21ec116b829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:d2:c0:b2:16:bc:9f:57:50:2b:f5:75:95:
43:5a:a0:fd:b7:4d:16:41:9c:e1:2b:23:e8:1e:0b:
d9:03:41:19:4c:7a:3d:cb:1a:2c:d3:a9:b4:2c:e2:
2c:82:c8:ee:ba:f9:70:de:d6:96:4d:65:a4:c8:81:
86:c8:c5:de:15:e7:f2:fd:60:25:ef:ef:0d:dd:4e:
22:6b:9f:bc:2c:17:9b:98:b4:6f:24:84:5e:85:4f:
bc:ed:34:28:a0:58:68:f5:3f:fd:2c:41:2b:cd:24:
9e:8c:0e:ee:13:f9:32:9e:56:98:9e:d9:cb:48:1a:
47:5e:e7:1e:a3:d7:4f:34:68:86:3e:6b:62:72:96:
78:be:e8:ee:f1:fc:c0:f7:c7:a9:0b:fa:a6:c3:99:
2e:60:4d:8a:e2:43:8b:60:2d:ea:97:f6:c1:9c:78:
0c:2a:d7:de:3a:27:3b:9b:b4:18:0c:1f:b7:5e:48:
02:74:2e:6f:74:fe:96:05:91:94:e1:16:fc:03:fd:
03:0d:23:74:d0:5a:09:fd:54:8e:f2:2a:20:87:14:
c3:8d:2f:d9:24:fd:fe:7d:57:74:0b:62:90:56:01:
a6:4a:15:27:85:68:23:74:54:b3:c5:2c:30:23:79:
5a:54:81:f9:a8:52:17:0d:cb:81:06:66:3c:61:3d:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:E2:A0:AC:3F:0E:78:56:97:74:B4:F1:A5:F2:1E:C1:16:B8:29
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f0:21:e8:a3:c9:8e:45:88:96:5d:b4:3a:a2:dc:34:f2:61:
da:1f:4d:e7:de:8e:dc:dc:ae:54:af:68:e9:38:90:11:1f:04:
e6:8d:0d:00:67:14:13:51:df:21:f9:d6:bc:82:35:ab:13:a8:
5a:64:57:8b:69:26:9e:f6:aa:63:06:2d:64:d3:c4:5d:8b:33:
c6:fd:2c:6f:02:55:b6:00:44:af:21:06:2d:42:b2:02:88:0c:
16:66:af:9e:9c:a4:ed:6a:62:f0:1e:90:55:0f:02:8e:6f:04:
c8:bb:71:c6:d4:3d:42:41:28:f3:80:99:2d:70:c9:7a:83:73:
44:3f:0f:56:da:f1:96:d9:91:0f:af:e4:cd:9a:c8:5f:3a:62:
aa:44:26:b4:06:61:c0:6e:d6:af:39:cf:c3:3c:3e:c3:7b:81:
96:95:d6:d2:71:8e:9e:54:6f:d9:f2:40:fb:1e:b2:42:03:b0:
ea:b7:00:06:e9:b1:57:71:ea:1d:10:dc:7e:d6:3f:ca:16:91:
de:6e:2d:22:3a:f5:9e:e1:db:fe:34:ae:b1:ad:76:41:d3:7f:
55:b7:c3:c9:62:30:0e:da:d9:59:e6:0f:76:92:e3:34:04:68:
50:9c:bb:2e:68:a0:4c:39:4b:a6:36:6e:9f:77:e6:7b:3d:03:
11:8c:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:57:09 2025 by rpki-client