Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: y6TS3rBPYLHibMA79dN+P1QCwAxsMeXPUT/JtMPeTIk=
Subject key identifier: 31:10:C7:3F:76:3E:6D:D7:0A:36:BC:43:F5:36:F3:65:B7:79:3A:9D
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 0199FC585A23E9B14D03E37266B29A6B24E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: DD
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: gZ0ybpfKN9j0ARiS6YoqYhK0Pkds4VsEYGIpLDnPhY4=)
2: XD5kSDYeMfY8LIHhbfnJvruSBPc.roa (hash: 7oUWV+LyugwjeCoSmfoHPMTejsb+0njHiDkg9kgwwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5a:23:e9:b1:4d:03:e3:72:66:b2:9a:6b:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=3110c73f763e6dd70a36bc43f536f365b7793a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:20:6c:ec:36:f6:86:32:20:28:ed:9e:cc:e3:
45:6d:65:64:01:1e:d3:7d:fe:9c:ee:56:41:54:13:
0b:e8:1a:bd:20:e4:3e:c0:0d:7d:01:65:1c:c6:05:
47:c8:fa:50:95:3e:78:e8:0c:64:9c:75:87:7d:e2:
97:95:1e:ee:27:7a:5a:ce:35:6e:17:c0:92:4d:a8:
66:d1:ab:82:0b:4d:df:bc:7e:fe:1c:be:59:63:49:
ea:0d:b5:26:d2:ce:0c:9c:86:89:8b:72:b9:18:3b:
dd:b2:66:ee:ec:0e:62:ae:eb:75:3e:c4:ee:90:95:
63:2c:37:b1:4e:4d:bc:c0:dd:fa:b4:c4:91:a4:61:
09:15:74:92:c0:b7:fe:eb:a4:f2:0d:41:9f:64:6f:
66:0c:3a:ed:f9:53:98:88:b7:97:32:7e:65:af:83:
44:cb:26:23:04:b7:78:60:07:a9:3e:cd:9a:57:7e:
e7:af:31:2e:b0:b3:da:e0:c7:27:28:37:c5:b3:5d:
c2:a6:11:d0:40:29:1a:0f:26:da:85:98:84:dd:2b:
e3:0d:1c:2d:8d:78:be:ab:f2:8a:d9:e5:5c:84:bd:
5e:59:0e:8a:35:6e:67:3c:13:5d:f5:70:b3:da:09:
28:25:aa:03:96:b7:b8:9a:3f:f9:5b:b7:90:eb:11:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:C7:3F:76:3E:6D:D7:0A:36:BC:43:F5:36:F3:65:B7:79:3A:9D
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:75:39:d5:b3:90:3b:36:3c:d1:b0:71:2a:8f:d2:7e:2b:63:
8f:1e:d7:b7:08:5f:df:f8:eb:09:ff:00:cb:3e:de:63:42:d7:
1a:77:c8:91:51:1d:6d:bf:3a:09:a6:8d:40:58:75:e8:ba:70:
c7:e4:0e:f2:ca:4e:a6:63:0c:a5:e1:85:02:75:67:1c:33:a2:
46:bf:d1:85:2b:2e:a5:11:55:04:ef:5b:9c:31:8c:01:a9:86:
29:c5:6a:0d:ce:73:1e:14:3e:d7:a9:03:89:6c:1e:6b:33:bd:
71:b6:e3:f5:cc:31:2a:45:7f:b9:b0:32:45:6d:1e:50:ca:1a:
c2:95:57:20:47:2e:f4:27:ec:d0:02:53:b6:f3:c4:8a:fd:36:
4e:7a:91:74:e6:31:d4:6e:f3:73:5e:5b:8b:42:85:6d:ac:22:
27:3a:d3:ae:79:20:6c:e5:84:c2:de:d7:42:4a:37:c8:26:10:
58:6d:03:60:4c:28:9c:69:00:01:54:22:0e:f8:95:a3:d2:b0:
f7:11:6f:7e:a4:67:3b:2d:18:64:7e:5d:24:67:bf:7b:cd:cb:
41:15:35:18:82:67:83:ba:d5:5b:57:41:59:1c:c3:26:fc:9a:
3d:61:b3:2d:86:78:c1:89:f6:3f:9e:ec:75:23:af:92:56:79:
06:6b:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:16 2025 by rpki-client