Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: B7enFZoUXnKrr3YQjiABxpUuOk5UY++ynJ+ei30inLM=
Subject key identifier: 5F:2F:1C:57:72:0E:64:5A:E7:0E:B7:48:89:C7:A2:AE:D8:34:AD:04
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 0199FB0ECFEFCF380D8FC761A949D87F6FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: 0mVZz/kYnasKLOYRUGF2sdLV/Szf9W0B4s6/gEmbyFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:cf:ef:cf:38:0d:8f:c7:61:a9:49:d8:7f:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=5f2f1c57720e645ae70eb74889c7a2aed834ad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:67:69:10:4c:a9:2a:52:ae:19:13:ca:d1:
27:66:2a:73:44:3f:6c:2f:b2:c6:0a:ef:34:68:05:
db:fa:56:73:e8:51:f7:cb:c1:ff:57:69:02:ca:06:
2a:32:af:42:cf:85:0c:2c:c9:42:ab:0b:d9:d4:63:
91:96:2f:07:4d:12:ba:a1:1f:e6:b4:0d:60:e9:2e:
fa:8f:09:d3:d4:84:e0:d0:b5:e7:a1:94:a2:01:f6:
f1:e5:16:ce:ca:f0:31:d2:e5:f3:78:8c:14:36:7c:
4b:de:99:b2:69:4d:59:17:df:00:9d:12:24:b4:bc:
19:b8:47:a5:65:4e:5e:eb:26:54:22:e5:72:91:04:
1b:3f:84:59:fc:9c:e7:88:8e:d1:da:62:cf:28:f6:
d9:85:9e:87:5b:a3:6f:e7:47:cc:84:a7:7b:28:01:
06:36:84:41:9b:73:be:e4:7e:a3:3c:aa:95:ed:d6:
ac:e3:7d:42:e1:46:67:90:9a:0e:db:ba:7e:53:e8:
86:12:a9:a2:04:dc:4c:52:e9:64:74:a2:39:e1:40:
8d:89:02:2a:40:be:2b:c8:4f:4c:00:6f:f3:6a:5b:
1b:af:0a:f9:7a:78:b6:99:22:95:19:78:69:89:ce:
43:04:58:74:b1:f1:ff:14:37:f1:be:6f:03:2f:5b:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:1C:57:72:0E:64:5A:E7:0E:B7:48:89:C7:A2:AE:D8:34:AD:04
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:8e:f7:4c:31:94:49:dc:be:02:69:08:80:04:ca:ed:ae:
02:bd:02:35:3d:5b:f5:28:3c:48:a9:a4:4a:a8:01:f9:1c:b2:
33:d7:76:3e:dc:d7:08:2a:e2:d2:57:ab:98:52:b5:3d:ff:89:
d3:8a:a3:74:97:0f:eb:d3:96:b3:1f:48:20:45:33:75:7e:5e:
ed:7f:ec:32:79:9a:ed:64:2f:18:23:83:b8:31:6a:a3:a4:a0:
26:86:41:29:6a:db:e5:14:72:b5:e4:9c:9f:30:ae:90:0d:3e:
09:7d:db:44:9d:07:f5:2b:1f:62:86:4c:f2:56:1e:38:41:73:
63:12:10:00:fc:dc:82:29:f6:c1:11:dc:83:93:c1:ce:7d:da:
a0:de:1e:a7:8a:bf:b9:ea:d7:08:ac:1c:20:e3:a2:8d:62:80:
f2:30:63:fe:84:77:f7:0d:92:98:c5:d3:ea:6e:29:cf:69:09:
d4:75:71:0b:1f:7b:d5:9a:35:47:a7:1c:69:3c:12:f2:b1:c3:
71:f5:a8:5a:ca:f0:3f:f9:42:d0:b8:26:80:79:ad:f4:cd:08:
5e:48:7c:2b:0f:4e:d1:4c:b7:fc:3a:c9:61:2d:81:94:ca:ed:
f4:95:95:06:bb:a1:f9:6b:11:48:f8:40:5f:09:9e:53:95:c4:
ac:89:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:55 2025 by rpki-client