Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: M9GrJOSd6OYt+5ka1du4YN3PCDDXD74V9f/XWNmZYzQ=
Subject key identifier: 87:40:2C:EE:62:5E:80:2C:DC:4E:AB:10:66:30:10:F2:1A:C7:00:21
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 0199FD33ED2D4DFEA1C63C0700EA706F48B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0FDF
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: a/jcvd/YUna+TlLA8QdNFAfiTf1dQOVMAS5RT/LtJHo=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:2d:4d:fe:a1:c6:3c:07:00:ea:70:6f:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=87402cee625e802cdc4eab10663010f21ac70021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:27:a1:f4:0d:80:47:d3:a2:2f:3b:54:30:
27:6d:1e:99:aa:8e:25:f8:af:2c:f9:18:5f:40:2b:
df:94:00:9e:c4:fe:80:0a:b1:9a:73:c2:ea:61:59:
8a:71:f1:5b:dc:4d:3e:0a:96:1f:7c:67:d8:6e:69:
20:58:96:43:94:1c:2f:bb:2e:c4:1b:97:48:59:54:
c0:24:f0:58:aa:94:1c:4a:9e:f2:29:12:4a:c1:40:
01:e1:17:51:dd:b3:b5:53:b5:5c:65:90:77:ad:10:
4f:64:17:10:22:0a:8d:d0:45:a0:30:62:34:5f:f4:
a6:ee:39:b8:2d:1b:21:fe:b9:67:d6:95:89:eb:6b:
ba:ec:8c:e5:a6:bc:0e:7b:73:23:48:00:b5:0c:aa:
2e:50:32:3d:ca:ba:74:81:85:d7:82:4e:e8:6e:17:
34:e9:d5:20:f6:3d:18:8f:3c:7d:cb:01:12:a0:f4:
ae:90:3e:52:c2:5a:61:54:8f:94:5f:da:d0:7b:c0:
af:80:dc:81:1e:46:25:de:f0:d4:82:79:f3:c6:59:
13:85:e2:b0:67:83:d8:b4:33:6e:0a:ad:02:9a:bc:
87:23:9b:c5:7f:00:46:9d:0a:62:38:39:11:fe:f4:
7e:36:4f:a7:86:1b:97:db:95:06:87:88:03:6f:27:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:2C:EE:62:5E:80:2C:DC:4E:AB:10:66:30:10:F2:1A:C7:00:21
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:60:c6:4b:ef:cc:fc:3a:50:b9:0e:0c:34:1b:5f:73:5c:
36:1f:f1:1c:49:67:e9:6c:5d:93:3e:95:2c:15:d7:0f:40:23:
bb:bc:a4:44:69:16:2f:1a:34:60:b6:34:7b:f0:99:d7:ab:e9:
bf:80:9b:d2:bd:3b:c3:d2:fa:d5:2f:93:47:71:11:e4:6a:b8:
10:82:0e:28:98:f1:2e:8e:16:05:fd:7e:d1:e8:0e:6f:49:97:
9e:65:12:94:54:21:fd:05:0c:69:d7:59:5b:61:17:08:e3:e3:
af:8f:d3:d7:64:7e:e5:c1:97:45:30:8a:92:9c:b3:73:c8:56:
d0:12:69:52:d6:cf:f5:1c:4f:01:46:b0:0e:9d:03:6c:b5:d5:
b1:bc:44:04:22:d4:8d:08:e9:0c:b3:36:d5:b0:88:a1:c0:94:
67:cc:d5:72:99:72:48:9d:93:e7:50:f2:73:7a:c7:d5:9b:6c:
aa:38:68:cd:da:42:65:60:eb:53:3a:e2:d3:16:8b:ed:1e:e9:
5c:34:2f:65:30:2f:e5:a8:23:d8:7b:71:f4:47:61:c9:3a:6c:
26:55:38:4b:a5:db:6b:5e:f2:34:7c:4a:61:06:41:e2:41:33:
fa:0d:59:35:1f:c5:d6:dd:ef:8b:22:d1:41:2f:1a:e5:0d:7b:
e2:dc:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:07 2025 by rpki-client