Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: aede6R/4m6XVm1Ns5TBHD1ebAykJk6or6YXKsxFihHE=
Subject key identifier: AA:40:B4:B5:5C:B4:AE:9C:3E:87:0B:67:71:5A:AA:0D:45:B9:50:73
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0199FBEBAE68D88CF73CDB0ADC33E6F294F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0D50
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: XzuPSZgI5EK5728jD/97S640b4f9vKReV7ch8ZlazmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:68:d8:8c:f7:3c:db:0a:dc:33:e6:f2:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=aa40b4b55cb4ae9c3e870b67715aaa0d45b95073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:b7:58:99:52:d6:3e:68:1f:25:69:fa:a1:
4a:fa:4a:4a:a4:2b:44:66:15:ee:15:cd:d6:42:f6:
60:45:81:3d:6c:6b:68:46:72:48:8d:21:af:01:e7:
aa:7f:a7:95:a6:0c:cd:77:f5:59:40:64:78:1c:16:
6a:68:52:8b:bc:25:05:fb:7e:24:cc:69:dc:06:5f:
05:24:95:83:80:81:2f:bf:d4:74:39:c1:bf:2c:85:
4f:b5:39:e5:ff:4e:e3:00:96:a4:2c:80:96:5f:1d:
63:2c:ec:cc:a1:6b:9b:67:d6:a0:2b:c1:62:2c:55:
fb:51:d9:31:96:6a:a8:26:24:63:18:bb:0a:b7:84:
cc:50:ec:cc:31:59:c3:94:06:cc:80:c5:b4:64:19:
ff:f7:2c:1c:2e:c9:4b:30:f3:09:46:62:0f:bc:73:
c4:e5:4f:c4:a5:d3:c9:76:24:37:63:18:66:54:2f:
a6:01:1f:4d:47:87:b1:ce:f9:e6:21:cb:00:10:63:
da:19:43:f2:93:95:2b:a8:59:72:58:77:ff:df:bd:
4e:be:95:22:78:10:9f:0c:c6:fe:f5:7e:55:92:1c:
d3:ff:db:1a:0b:2b:47:fa:14:c5:52:f7:f0:d8:c1:
7f:90:1e:38:cd:e8:13:98:e3:72:a6:16:29:e0:74:
d5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:B4:B5:5C:B4:AE:9C:3E:87:0B:67:71:5A:AA:0D:45:B9:50:73
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a4:27:bb:93:d8:65:56:43:10:eb:e0:69:ce:0c:08:79:53:
9f:b2:5a:4e:b4:08:21:6b:34:55:7d:2a:82:4b:cb:70:64:7f:
30:b8:24:6d:c8:10:05:31:ef:06:09:8d:d2:81:c7:71:87:6c:
70:8f:0c:f8:27:4b:79:ed:e1:d7:1b:40:ef:a1:61:f9:85:2f:
63:1d:9d:4a:1a:04:d2:95:87:40:99:67:27:5d:c0:c4:23:2f:
75:ef:6a:6e:17:6b:79:bb:6f:ba:50:b6:b3:4b:9d:52:db:ba:
db:f4:46:47:87:fb:d5:62:11:3c:7d:df:d8:86:fd:f9:45:6e:
ac:37:8b:5a:8f:e5:e0:f8:1e:1c:82:79:ab:e8:9e:59:6b:51:
8f:b0:10:21:48:56:bf:3b:00:7b:e9:51:17:86:5a:a8:9a:d5:
c3:f6:f6:ff:b8:7c:e4:eb:23:19:aa:ad:7b:04:06:8e:9a:e1:
10:68:d6:57:25:d2:8d:09:0a:f6:67:59:74:04:c3:71:90:63:
47:52:4f:dd:c1:7c:5f:48:3f:12:29:16:bf:f5:4f:53:b4:ed:
53:b7:83:54:ba:c0:1e:98:1e:d4:7f:d5:ea:45:bb:2d:b5:f6:
3e:e5:a1:2e:7f:6f:3f:89:6a:13:cb:09:ee:b6:56:6c:92:46:
e8:9e:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:43 2025 by rpki-client