Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json)
Hash identifier: FgXOMruvv51sMfb/dK3LMIEauaf5gtOX3SsP65mTjnQ=
Subject key identifier: 66:15:87:5D:4F:FD:A2:F9:4A:DA:0D:80:E4:79:90:3D:68:AD:A4:2A
Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e
Certificate serial: 0199FEB50D823617C2F9E782EF2153495528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 23:01:42 +0000
Manifest this update: Sun 19 Oct 2025 23:01:42 +0000
Manifest next update: Mon 20 Oct 2025 23:01:42 +0000
Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: Yj6R4Htr3heAwSIWsbPEuPRGhIKQMYAWM5NsmixWHss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0d:82:36:17:c2:f9:e7:82:ef:21:53:49:55:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e
Validity
Not Before: Oct 19 23:01:42 2025 GMT
Not After : Oct 20 23:01:42 2025 GMT
Subject: CN=6615875d4ffda2f94ada0d80e479903d68ada42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:45:73:4c:32:87:00:af:59:17:20:ed:79:
b3:70:36:2c:ff:eb:da:0e:b1:fa:dd:47:a9:fa:78:
07:a5:78:5e:6b:b0:8e:4d:47:86:d5:e5:9d:ca:9a:
0c:8c:ed:77:cb:94:96:c3:83:c2:c6:04:a6:eb:a4:
3a:ba:62:ac:c9:05:ec:1b:d2:ad:c2:4c:ce:51:13:
d1:19:8f:e6:f0:ba:1c:29:a1:a2:7c:3e:ec:a1:1c:
71:04:77:19:30:9b:04:af:76:bd:2f:a4:7c:b5:c4:
db:ca:df:c5:51:ab:1d:7b:bf:96:9e:73:3e:24:61:
9f:e9:c8:70:22:fd:9f:e3:b5:d8:38:38:54:61:5b:
9c:0a:58:b5:0d:2e:6c:ee:3f:a1:a6:8a:0d:4b:70:
5e:57:24:3a:8c:37:3a:28:ee:ba:78:1a:a6:5c:b5:
d8:0e:ce:a3:ed:16:9b:ea:ff:45:70:19:04:75:46:
ec:ab:4a:dc:f5:8b:83:64:f3:61:16:4f:30:78:89:
69:c3:27:70:5c:3f:d5:aa:e4:b4:c0:fc:e3:bf:bd:
ca:76:bd:f7:06:a1:ee:4b:0b:a7:6e:44:f5:3e:d5:
63:a1:a6:05:16:f4:14:90:1f:26:9b:b5:2a:bf:8e:
a9:14:93:78:78:d3:95:7a:e3:4b:a3:3f:87:0d:1c:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:87:5D:4F:FD:A2:F9:4A:DA:0D:80:E4:79:90:3D:68:AD:A4:2A
X509v3 Authority Key Identifier:
keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:32:e9:04:08:4a:b2:c9:e1:5a:71:01:5e:05:11:ad:a3:
77:43:ce:75:01:98:98:49:9f:bb:0e:43:78:52:b0:2e:1d:f4:
82:d5:fa:99:2e:b9:c7:1c:ba:8e:d6:34:f2:7e:cb:f6:bc:49:
5e:7f:68:d5:7f:30:c7:11:a8:2b:dc:1b:aa:4b:37:64:d1:72:
5c:4f:20:fc:ac:13:82:a8:6b:2c:bf:df:8a:ee:f5:f6:a5:e9:
51:8c:da:05:28:8a:2b:1a:20:b3:ea:be:7a:85:e6:5c:87:b9:
a2:d5:6c:9f:49:6c:48:cd:5b:2a:1c:3f:9b:3c:a9:e7:4a:73:
20:ce:bb:db:95:dd:1a:6c:2b:64:09:bf:32:98:34:8f:c8:2e:
dc:08:bc:1b:7a:89:04:3d:87:b2:c3:d2:a4:5e:c2:0a:68:ac:
70:66:01:7f:fb:88:bc:97:f3:14:78:56:6d:c6:1b:92:e7:17:
10:84:bf:3c:df:4a:01:e7:c3:4e:1e:34:bf:fb:13:a0:9a:c7:
f4:33:a2:00:20:79:ee:e8:fd:51:42:31:02:a7:6e:41:65:27:
1c:0b:a6:24:51:64:d5:b4:6a:e5:fc:3e:8f:cf:c3:30:41:02:
c8:02:9b:c0:46:73:f3:17:73:78:74:47:7a:60:a7:1a:9f:a9:
44:ba:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:00 2025 by rpki-client