Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: M3VsBpEwn3GgyUqWiTHhYOBathScFQKlP2AlApJ9AtI=
Subject key identifier: 1D:68:63:B5:84:67:FC:55:0F:E2:1B:51:88:8B:C6:18:E8:40:E1:9C
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019A006C1917B13E2289E9C5D930D7855DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 07:01:15 +0000
Manifest this update: Mon 20 Oct 2025 07:01:15 +0000
Manifest next update: Tue 21 Oct 2025 07:01:15 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: qZuF2hOW0mxHIWdfI6ZXxJKJhgnUnXScubqbh0UAC0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:19:17:b1:3e:22:89:e9:c5:d9:30:d7:85:5d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Oct 20 07:01:15 2025 GMT
Not After : Oct 21 07:01:15 2025 GMT
Subject: CN=1d6863b58467fc550fe21b51888bc618e840e19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:b4:16:17:36:3a:b8:3c:dc:29:71:13:63:
2b:45:9a:88:2f:69:7e:54:32:c0:e8:b5:4a:a6:25:
63:8a:78:5e:01:25:f7:1c:1f:b7:ea:8d:bd:44:a5:
e2:80:c3:84:9f:d4:03:90:5a:c6:ed:75:91:3b:2b:
8e:6d:e9:a0:4a:0c:78:1e:25:63:31:c4:d6:22:04:
47:82:73:32:ed:86:3a:21:7f:e2:47:fd:12:55:9d:
90:aa:43:11:e9:7a:cc:53:ce:88:3c:f4:42:0d:1c:
db:60:3f:b6:c5:d4:ab:68:c1:df:45:48:77:98:61:
c2:d3:57:38:9b:f8:f4:81:34:59:49:96:9e:45:07:
73:0c:a1:a7:3b:8a:b6:e2:ba:5e:6c:39:41:96:e7:
b2:3a:e2:ea:fc:eb:c1:df:55:9c:d7:81:a6:db:09:
6c:1e:fd:c0:92:f4:41:3c:4a:08:c8:8b:2b:76:28:
3c:5c:13:72:2e:45:a1:5d:fc:a1:83:80:bb:e8:53:
a0:48:33:9a:6e:e9:08:a8:81:6d:f9:20:7b:4e:dd:
7e:21:8c:89:2a:34:46:c8:09:83:4e:00:27:2d:9e:
0d:af:39:75:a1:8e:dd:36:3a:aa:f8:be:f9:ec:da:
83:0f:0b:a3:83:92:6a:73:c6:50:f2:97:7f:d5:a7:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:63:B5:84:67:FC:55:0F:E2:1B:51:88:8B:C6:18:E8:40:E1:9C
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b1:4a:b6:15:41:0f:77:d4:93:6e:96:4d:e0:a7:b2:0d:b0:
ba:89:5a:53:b1:db:02:dc:f2:ce:64:33:a4:77:2b:e6:cc:7e:
ca:b7:cf:49:76:0f:35:96:fa:62:a1:c5:97:08:db:e5:f0:ab:
04:3b:e0:bd:5c:4f:1c:d2:d2:3a:ca:a1:dc:11:75:68:5c:04:
45:db:24:a1:39:9a:cc:ef:41:d4:4d:c1:cf:30:f9:ae:3e:ab:
01:56:db:d3:f7:fc:95:ff:87:75:dc:89:fe:52:bd:b8:21:ed:
a5:5d:e9:78:78:79:a8:51:78:a8:1d:6c:c2:cc:34:bf:e6:fb:
42:12:43:62:b2:b0:92:22:0d:e1:8a:6f:45:57:5b:db:53:49:
28:6f:5c:92:f9:fa:55:71:5f:97:c9:0a:f7:27:77:99:fa:87:
8d:22:ec:39:18:8f:f1:5b:ab:ca:2e:e1:47:7f:48:14:5c:94:
6a:fb:e7:4d:2c:3f:10:13:08:5f:ce:6a:34:22:66:56:6d:12:
00:37:18:98:a2:48:5b:1e:93:45:70:ae:d5:4d:c5:04:b9:5c:
df:36:f3:77:39:6b:d1:88:83:c3:3b:ac:5c:33:8d:58:21:c6:
67:ca:ca:76:14:0e:6a:5d:40:db:c0:72:01:09:95:b4:79:08:
6d:77:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:55 2025 by rpki-client