Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: FOMuwed8HosKQYN0XU8G1qzkPT/Yq0B9k8857c8u1Io=
Subject key identifier: D9:59:A1:5C:AF:41:5C:47:D8:54:C5:3B:D1:A1:C3:4D:54:C7:F6:C8
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 0199FD34105A00904CE9A56C9EB5D9E93830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0BC5
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: 4k499EqCLeg1AgZyxGmWuMunIq045rjcSymCDNpQ5jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:10:5a:00:90:4c:e9:a5:6c:9e:b5:d9:e9:38:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=d959a15caf415c47d854c53bd1a1c34d54c7f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:98:82:98:dc:2f:38:58:8e:77:14:7f:7c:
aa:6b:9b:2c:a7:26:16:ed:32:52:8a:83:fa:74:49:
9c:53:64:c3:14:65:74:23:ee:e6:1d:36:82:60:4e:
41:fa:41:3d:8e:53:b9:97:ca:d2:57:29:ae:8b:6a:
bb:d1:fa:77:cb:18:a6:6d:01:7c:d5:6f:c9:58:50:
2d:88:62:f4:1e:de:62:3b:6c:4b:af:d4:9f:ee:f9:
ca:c3:62:3a:5c:46:d4:26:c1:77:05:13:e6:fa:9e:
75:31:dc:34:ea:0d:7b:6c:41:4c:58:24:32:a4:1c:
db:16:7d:b3:30:97:db:08:c7:ea:29:23:75:49:b7:
c5:7c:c3:22:7f:49:51:fd:76:d2:ec:21:e4:ac:18:
36:e1:2c:92:b2:51:53:75:1e:d1:da:04:19:87:61:
51:46:c3:78:2d:ec:cf:ca:37:ea:80:3b:6f:02:84:
a2:fd:2d:82:4a:2d:dc:69:b8:be:bb:e7:03:4e:3f:
e6:b6:dc:00:63:60:db:6b:ba:cb:ee:89:89:53:cd:
35:89:14:6e:40:45:e6:c4:74:42:9c:ff:da:dd:3c:
e6:90:0a:b2:3a:d8:47:91:1d:92:8d:a8:33:d5:c4:
c3:9a:05:f9:d1:03:0d:04:1f:9c:16:c6:fb:48:8c:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:59:A1:5C:AF:41:5C:47:D8:54:C5:3B:D1:A1:C3:4D:54:C7:F6:C8
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:85:0f:51:16:19:2c:09:7e:e4:a0:c8:63:28:c1:24:4f:be:
a8:83:1c:12:36:ae:dc:06:77:11:60:a9:d6:83:30:3d:b9:ba:
18:19:70:1b:30:23:56:27:31:fd:88:c9:81:b8:ad:84:da:bd:
5c:db:97:61:c8:0f:3e:12:06:81:22:a6:92:62:a1:48:73:41:
44:f1:c9:a6:26:2f:cb:c3:50:c9:5d:7c:d1:b8:da:03:11:d9:
50:ff:16:4b:71:4b:37:b3:c9:e4:bc:0e:56:bd:28:7e:8d:b3:
ef:16:2e:50:68:a6:27:73:64:95:12:cf:85:d6:b5:07:84:c2:
ea:58:9e:d5:19:19:c1:86:8d:37:23:88:8f:a9:7d:66:f2:a1:
06:6d:14:e8:60:7b:f2:07:d9:24:e7:ae:a7:98:de:87:cc:ee:
79:e3:03:de:c1:a9:ab:c6:0b:38:75:08:8b:2a:1a:00:e2:1a:
85:07:01:2c:08:10:82:97:f5:7d:5f:7f:f2:95:b7:71:74:3b:
7b:a8:a2:8c:af:08:ba:33:77:d2:f7:c0:10:a4:66:49:1d:f6:
a6:a8:7c:dc:a6:94:6f:df:84:0d:fe:a6:d1:a3:68:ff:20:45:
24:99:26:10:10:ce:2b:e1:5f:2a:9f:b7:67:72:e5:dc:5a:91:
b4:7f:f6:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBBaAJBM6aVsnrXZ6TgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDIxNDU5MzAwZDE1ZmFjNTUwNzA1Y2Y2ZTI1ODk5OWQz
ZDg2YmEwHhcNMjUxMDE5MTYwMTExWhcNMjUxMDIwMTYwMTExWjAzMTEwLwYDVQQD
EyhkOTU5YTE1Y2FmNDE1YzQ3ZDg1NGM1M2JkMWExYzM0ZDU0YzdmNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/uYgpjcLzhYjncUf3yqa5sspyYW
7TJSioP6dEmcU2TDFGV0I+7mHTaCYE5B+kE9jlO5l8rSVymui2q70fp3yximbQF8
1W/JWFAtiGL0Ht5iO2xLr9Sf7vnKw2I6XEbUJsF3BRPm+p51Mdw06g17bEFMWCQy
pBzbFn2zMJfbCMfqKSN1SbfFfMMif0lR/XbS7CHkrBg24SySslFTdR7R2gQZh2FR
RsN4LezPyjfqgDtvAoSi/S2CSi3cabi+u+cDTj/mttwAY2Dba7rL7omJU801iRRu
QEXmxHRCnP/a3TzmkAqyOthHkR2Sjagz1cTDmgX50QMNBB+cFsb7SIx5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlZoVyvQVxH2FTFO9Ghw01Ux/bIMB8GA1UdIwQY
MBaAFBgCFFkwDRX6xVBwXPbiWJmdPYa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5Njct
OTIyNGNlMmU5NjVhLzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5NjctOTIyNGNlMmU5NjVh
LzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIUPURYZ
LAl+5KDIYyjBJE++qIMcEjau3AZ3EWCp1oMwPbm6GBlwGzAjVicx/YjJgbithNq9
XNuXYcgPPhIGgSKmkmKhSHNBRPHJpiYvy8NQyV180bjaAxHZUP8WS3FLN7PJ5LwO
Vr0ofo2z7xYuUGimJ3NklRLPhda1B4TC6lie1RkZwYaNNyOIj6l9ZvKhBm0U6GB7
8gfZJOeup5jeh8zueeMD3sGpq8YLOHUIiyoaAOIahQcBLAgQgpf1fV9/8pW3cXQ7
e6iijK8IujN30vfAEKRmSR32pqh83KaUb9+EDf6m0aNo/yBFJJkmEBDOK+FfKp+3
Z3Ll3FqRtH/2zg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:05 2025 by rpki-client