Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: bwKp53sLCmFaJ+i8yRomT2U7B8fnjMoHCBIZYMr2oBc=
Subject key identifier: 62:61:1F:10:B6:25:3E:9C:B5:76:EC:05:49:FE:9F:B5:9A:41:D1:0B
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 0199FCC6A8897FF85777FBFA4B7C2ED16F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 08C7
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: /IOiFB6yW5vwIao4SlhTpjtT+wBaXnuRuRz4baTgVsI=)
3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a8:89:7f:f8:57:77:fb:fa:4b:7c:2e:d1:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=62611f10b6253e9cb576ec0549fe9fb59a41d10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:af:6c:0d:9a:42:e5:e6:e9:52:4a:86:9e:
2e:9a:10:01:7d:dd:27:fd:f9:d2:f9:e1:d6:81:4c:
ff:09:27:02:06:12:e6:03:05:f4:c6:37:d0:cb:0d:
32:69:86:d9:7d:29:47:0e:fb:6f:bc:e2:3b:9f:6e:
8f:69:24:fc:a1:9f:ba:68:e1:49:65:d1:3c:1c:82:
a8:e2:d8:2c:23:c2:a6:01:79:f4:cb:55:ba:98:41:
d0:94:6f:0e:e8:46:50:ba:ff:0f:a6:6b:e1:33:d6:
7d:a8:1c:52:46:ae:54:75:12:ba:cf:12:81:ba:e8:
3b:2d:8b:e4:90:30:db:75:59:98:58:34:2d:b9:19:
83:f6:8b:dd:f7:d2:72:0e:ab:66:92:83:1e:89:9b:
42:06:f5:40:d5:94:29:ca:08:5a:96:84:e3:ac:21:
69:db:95:f5:34:2c:e1:c5:12:3a:c7:ba:58:28:ab:
7d:ad:c4:ea:7b:3c:ba:06:32:40:b3:0d:a0:76:62:
3b:cf:5a:24:12:73:36:4b:80:d6:f5:e3:f9:86:c9:
fc:b8:7f:bc:42:69:02:56:3a:d2:45:35:56:34:37:
d8:db:7e:a0:e1:b3:76:67:ce:b6:3a:6d:2f:2b:7e:
8e:30:6e:37:6f:41:ad:17:ad:7a:6b:8e:e9:af:c0:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:1F:10:B6:25:3E:9C:B5:76:EC:05:49:FE:9F:B5:9A:41:D1:0B
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:38:82:3f:fe:c8:7c:48:59:52:85:eb:55:8f:0c:04:71:bf:
69:b9:7b:84:30:e8:a4:88:8e:25:8e:ce:a8:78:96:b6:e6:3f:
12:13:52:20:36:57:ad:27:04:fc:88:2d:0d:85:9b:0d:a1:cd:
0a:86:3a:9e:b9:81:eb:5f:20:ec:96:13:84:7e:25:47:7d:86:
00:c1:ca:21:17:5b:47:54:bc:26:e0:48:0e:29:46:22:0c:1c:
e1:94:71:6a:03:59:e0:85:1b:ce:53:44:08:a1:13:ee:2f:b9:
9e:d8:5c:a5:72:ba:54:57:05:57:cc:49:ae:b8:e6:b9:b6:47:
c3:c0:be:e7:aa:fe:d1:5e:cf:af:b5:67:9f:fc:29:8d:a7:ba:
b2:87:71:5b:4c:f1:94:bf:9d:32:79:34:7c:8d:d2:df:51:e1:
4d:10:7d:df:eb:37:af:73:d5:97:46:3b:08:da:8d:81:15:df:
cb:56:c8:72:da:ed:2f:1c:5f:4c:4c:0d:91:3f:d4:8e:78:9c:
de:50:16:57:81:70:45:90:c2:cb:5c:3a:0c:fc:c2:5d:4e:cb:
3e:6e:da:52:8f:b8:0d:d2:ed:3f:dc:94:ff:89:b4:74:34:d8:
47:8c:d3:9f:68:c3:70:bb:b1:81:04:c4:e4:d8:e9:b2:f9:01:
81:98:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:49 2025 by rpki-client