Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: MHVq2wTIA0LItgXZA/ZZ/ULPws9AupF4tPZMQMbXibo=
Subject key identifier: 8C:2F:41:0E:1F:6C:52:19:29:F2:4A:D5:4F:72:E5:70:15:FC:21:40
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 0199FE470F27FE9A3FDCF0DBA119E7AD00A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: OoIJyujMYvXX2NGN+NXFWhC5kCXOf74gBkq/zrwBD/0=)
2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0f:27:fe:9a:3f:dc:f0:db:a1:19:e7:ad:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=8c2f410e1f6c521929f24ad54f72e57015fc2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:15:fa:cc:69:22:f3:23:65:64:3e:6d:dd:
72:90:95:29:a7:98:5d:67:37:90:49:a6:b4:2f:04:
b7:e4:89:22:8f:45:44:9e:e0:fa:76:71:9d:81:b1:
6e:73:d3:03:5b:99:a6:b3:e5:bf:22:b3:3d:5b:87:
6e:31:85:b1:78:3f:a0:00:ce:2e:c2:3b:75:d8:16:
8e:b2:ad:9e:68:d2:fe:1b:6b:ad:d6:86:f0:00:7c:
b6:97:3c:4d:30:58:6c:dc:83:c7:37:77:78:d1:7d:
b7:60:28:57:d6:cf:de:58:12:a0:1b:67:f0:0c:7e:
47:d3:72:ac:15:d0:32:3d:33:b9:96:b1:5f:f8:87:
5d:18:d3:40:ce:ca:5c:be:77:3b:21:c4:38:1e:34:
48:3f:d7:70:cd:4c:38:fb:d3:94:c8:74:96:be:31:
02:fb:be:a2:e6:2d:97:f6:2c:7a:c5:62:f8:84:93:
6b:9c:de:d2:53:77:a0:e5:a6:f6:73:1d:02:be:5f:
3a:44:a5:71:23:e0:e1:ff:6e:a6:99:af:9c:7d:0a:
7e:e0:17:c3:82:66:74:75:61:da:04:d3:84:3e:c4:
20:b1:0c:6e:37:c7:3d:60:cf:01:6e:18:d7:a4:c8:
33:67:65:bc:4b:f4:bc:9e:11:05:4a:cf:66:6d:22:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:41:0E:1F:6C:52:19:29:F2:4A:D5:4F:72:E5:70:15:FC:21:40
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ab:f3:01:8d:99:27:23:a3:bb:54:68:08:13:c8:a1:de:63:
0b:38:71:59:59:4e:f2:3f:93:15:63:87:a4:c5:a4:ce:a7:19:
0e:06:e4:db:ee:be:86:8c:d8:be:8e:58:52:23:ff:e3:a0:ec:
5f:b0:e4:96:54:b5:5a:32:a5:97:2d:2d:aa:30:85:63:f1:d1:
1f:52:72:d3:7a:3f:5e:91:38:82:58:a3:50:e8:3c:e7:a6:87:
55:de:89:d8:90:68:c7:d1:d8:9c:11:d3:86:dc:11:16:19:5b:
4a:04:61:fe:cc:ba:f6:ee:76:7a:04:de:ed:e5:67:23:1a:a4:
61:31:eb:d1:df:e9:ad:20:f2:13:9b:0c:f0:78:92:2b:2e:3e:
c0:2b:b3:df:2c:57:fc:39:4d:eb:e0:53:89:af:5a:65:09:a1:
3c:9b:bd:13:ee:47:76:f3:08:1d:a1:56:78:ec:d8:40:c2:02:
56:79:da:1c:1d:ca:a1:fc:ba:f4:f3:3c:f8:8f:83:cc:4f:52:
32:8b:79:03:03:f1:e6:5d:32:0e:78:95:29:9a:d4:ca:46:11:
9f:95:3a:68:a2:31:d1:f5:62:65:1f:3b:84:cf:f4:e9:77:78:
e3:bd:81:c7:33:af:04:8d:10:d1:52:ae:ea:ef:64:c1:c6:f8:
20:0f:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:39 2025 by rpki-client