
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: EIOssRqWP9VmecgbtTjhRYmWEav+pLsVELmjRxqGiCk=
Subject key identifier: D8:25:59:4A:A7:9F:3D:33:1C:D9:0E:D5:0D:B6:A7:35:3E:C5:E7:BA
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 0199FC5883A37B80F1A834CCF793BB34441F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 0348
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: e0+C/HN83hrkz0Vyfmxbp7mwEwxL0Z1L/mxHsI9jeCM=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:a3:7b:80:f1:a8:34:cc:f7:93:bb:34:44:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=d825594aa79f3d331cd90ed50db6a7353ec5e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:cf:57:5f:c3:f6:b3:4a:20:5e:18:30:fe:
62:2f:a7:ef:16:88:3a:d8:83:f9:a4:8f:51:76:43:
7d:48:eb:fc:09:ee:07:a4:72:5c:67:bc:ea:c1:8b:
01:cf:3c:ad:8b:40:5c:05:65:8c:bc:e7:3c:87:11:
c9:83:84:ee:52:d5:91:46:17:69:77:97:d8:22:eb:
9d:82:87:23:47:da:a4:c7:6f:9c:72:c1:28:14:d2:
26:5a:05:a0:12:d2:e7:33:e1:06:40:c5:ea:b1:be:
1f:c7:bf:75:fc:d3:00:e1:1b:b4:6f:df:b7:da:c0:
7d:c1:43:02:d4:84:3f:c0:c9:b4:53:f4:00:21:2c:
3a:86:09:7d:2a:14:49:76:c8:80:f4:26:65:c4:2e:
9c:22:5d:aa:12:85:f9:6d:0f:8e:93:f9:8e:45:27:
c3:7b:54:98:ad:20:17:57:9e:e2:4a:5f:66:5d:93:
fd:f2:bd:8c:43:c0:79:f8:02:4d:3d:11:db:a4:8d:
ff:5d:fe:8c:ee:2e:06:d3:93:39:0b:40:1b:f0:23:
b5:01:db:e4:2f:36:fc:06:2d:72:7f:6b:60:be:8c:
b7:3b:ff:48:1c:8f:a7:a2:ba:76:e4:e5:0b:36:36:
d8:9d:1c:c0:f0:35:55:35:cf:ec:f6:3f:32:43:cf:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:59:4A:A7:9F:3D:33:1C:D9:0E:D5:0D:B6:A7:35:3E:C5:E7:BA
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:89:d9:1e:42:59:1b:e6:2b:8c:f6:f8:79:9e:7c:db:9e:48:
df:ea:0e:ce:ca:b9:3a:41:6e:03:7e:26:0e:c0:00:93:c7:5f:
26:85:60:3d:e9:1f:5e:82:68:f0:2e:4d:3d:c9:d9:9f:90:63:
4a:11:cc:fe:72:d7:70:96:51:48:4f:00:02:2f:68:74:6b:1a:
c6:9b:fd:a8:08:35:6c:50:97:ef:b6:a1:41:1e:7d:a8:53:2a:
46:64:58:34:76:81:14:31:8c:f4:66:08:3f:fa:d9:38:7a:3b:
53:76:5d:60:c4:ec:b7:99:3b:62:89:c5:ab:98:31:a2:09:1e:
cd:a7:a7:f7:cd:7e:83:f3:bd:50:08:e1:97:bb:e1:7d:05:03:
a3:93:36:98:f9:65:9d:dd:b7:c3:fe:81:bd:9a:c7:fc:58:c6:
cb:b9:e0:65:60:31:84:36:10:fa:80:fb:c8:37:73:25:00:87:
7d:0d:68:c7:99:05:f4:96:e4:5e:b7:f9:f5:c3:84:7f:ba:0a:
9c:a5:e7:ab:fc:aa:d5:de:89:a9:f9:80:44:31:96:10:a8:fe:
c8:14:00:45:3f:17:b6:f4:2a:db:8c:63:39:50:e4:ce:26:ee:
9f:a2:58:18:c0:1c:ca:26:bc:8a:1d:8b:a7:d4:05:7d:67:ea:
30:11:f7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:50 2025 by rpki-client