Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: +euE5lJELmqOL7SZegXHAEGOIAP0nkOb7Dngvx0VGKg=
Subject key identifier: 26:F1:FF:B5:C4:7C:E3:2A:AF:B8:3E:5B:28:0F:30:68:5C:32:4E:F2
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 0199FD342F54B8B2F089ACB45FB5B95ABC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: J+0xnzDHbaA4fMIqkzrVoVqlQrPXxdVwzEAc8ZWNotc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2f:54:b8:b2:f0:89:ac:b4:5f:b5:b9:5a:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=26f1ffb5c47ce32aafb83e5b280f30685c324ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:dc:75:5a:35:fd:bb:7a:64:fd:c2:65:56:
10:51:79:c7:d5:68:cc:c7:67:1e:c2:68:63:60:83:
17:19:15:a0:b7:ee:03:6e:8d:ce:d8:c2:31:5c:33:
2b:e0:96:01:62:6f:a2:0e:bd:73:d5:49:61:5c:a9:
15:df:a9:29:ae:d0:bb:61:bf:a5:05:b9:ac:9f:1a:
02:d1:39:a7:dd:47:b7:52:bc:c3:52:38:a1:3b:db:
78:10:90:49:3a:7e:5e:df:94:6c:e3:09:a3:14:07:
ec:3a:a0:0c:01:99:56:37:ed:c2:3b:eb:1b:63:01:
93:7f:16:91:57:9b:f5:e8:1d:74:aa:9e:a2:35:09:
8d:67:dd:81:fd:bd:7e:4a:bb:cc:14:89:49:15:bc:
2b:6a:37:2b:29:1d:9a:b2:24:7c:4e:5d:19:16:dc:
0f:0a:8e:f9:4e:0b:13:4b:5d:a1:7f:31:9c:77:cf:
86:9c:af:eb:54:a8:d3:c4:4e:98:0e:d8:90:c2:05:
bd:b9:e6:78:9b:ab:f8:8c:35:7c:66:9c:85:56:43:
75:28:d7:9f:5a:94:ad:0a:b4:bd:38:c1:d5:95:00:
ac:c8:41:35:2b:e9:42:49:38:1c:ec:26:99:a9:c0:
88:05:b3:67:38:0c:5f:d1:18:68:ee:a1:36:74:e7:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:FF:B5:C4:7C:E3:2A:AF:B8:3E:5B:28:0F:30:68:5C:32:4E:F2
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7b:48:9a:9c:d4:08:fb:c8:29:59:e1:d6:7a:2c:2a:36:ca:
0b:27:85:ee:76:2e:e7:7e:79:b0:f5:0a:fa:97:97:16:82:79:
ca:cb:45:4b:09:50:13:a0:e4:ef:37:ff:19:1c:2c:f0:29:9d:
78:6c:19:21:50:61:2b:c4:05:8b:fe:24:3b:04:78:63:ba:05:
86:87:6d:1e:e1:94:70:45:70:af:4f:bc:8c:ed:59:44:d8:7c:
16:c9:5e:1b:a6:85:e2:ad:3c:c4:e4:64:52:37:72:d9:cd:06:
c6:5e:21:7a:5e:23:9d:cc:47:74:8a:c8:48:10:33:7f:28:43:
56:b8:82:18:5d:9b:cf:ff:05:f8:c2:5d:09:13:fd:a6:17:38:
3d:e0:2c:08:8d:ac:d3:c9:8e:a0:31:60:5f:67:87:75:4d:33:
29:f4:64:32:40:9b:ab:7a:b9:43:d6:7f:eb:f2:e8:af:23:e3:
37:aa:07:0e:3d:75:11:30:ae:d5:af:0e:16:14:98:85:d6:5b:
08:1d:b6:f8:55:a0:d6:73:b3:b6:d4:da:a8:96:0c:e3:f7:1c:
ab:c8:e4:52:67:f9:e9:b6:fa:b2:3c:8e:b3:fa:92:57:53:7c:
c6:70:a6:b0:b5:34:ce:71:3c:50:54:f6:98:14:0d:93:80:d1:
fe:32:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:50 2025 by rpki-client