Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: j1XORMknTHcubHFIHIrcccLdqCn12IcDcWT4HQ+GTVk=
Subject key identifier: 95:19:A4:0A:B8:A5:E8:A0:D0:2A:14:6F:63:81:B4:C3:4B:59:B2:17
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 0199FFC71F98142D02E09CCC07BE941F83B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 1046
Signing time: Mon 20 Oct 2025 04:01:03 +0000
Manifest this update: Mon 20 Oct 2025 04:01:03 +0000
Manifest next update: Tue 21 Oct 2025 04:01:03 +0000
Files and hashes: 1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: Nredd9qSXRJYbyc6i9wz2q++BBFLe+XRcz5Km/KH6OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:1f:98:14:2d:02:e0:9c:cc:07:be:94:1f:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Oct 20 04:01:03 2025 GMT
Not After : Oct 21 04:01:03 2025 GMT
Subject: CN=9519a40ab8a5e8a0d02a146f6381b4c34b59b217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4c:0e:65:41:61:0d:75:c5:25:5b:6b:3c:a4:
6f:2c:5e:69:d9:d4:b8:c2:59:0c:77:88:e0:68:9b:
b6:00:7d:cc:98:f8:4d:74:89:95:8d:03:61:17:24:
16:16:09:e4:83:8e:e3:5c:17:41:ac:c5:10:86:92:
71:1d:ce:e1:cb:38:68:56:f9:1e:c7:98:e9:e8:d8:
1b:dd:3a:b3:f0:46:64:e3:3f:83:c0:9b:ba:79:3c:
46:b1:59:7e:8f:3e:54:e1:61:b1:43:64:56:e4:92:
f7:05:ff:d4:74:a5:59:61:73:1f:a5:fd:a3:56:4c:
16:35:33:8d:ab:86:a2:1f:87:36:5a:6e:0a:14:f6:
5e:f4:f7:17:57:31:30:8d:f6:05:fd:c8:ac:54:7c:
e2:5e:87:04:2b:1d:7e:33:73:3c:ba:82:5f:fa:b8:
b8:fc:ee:ab:51:30:75:d3:05:43:42:79:ac:ac:c6:
69:8d:f1:41:c4:1c:a4:42:28:21:e2:13:34:71:25:
5b:b7:81:0e:74:89:5f:ff:87:fd:79:1b:22:7d:fb:
41:65:10:f0:43:de:9c:34:80:a0:7a:33:c1:57:bd:
32:81:bf:ba:d4:f2:1e:85:14:4d:7f:38:96:32:f2:
cf:ab:a3:e5:9c:70:0a:c5:c8:47:91:a2:53:af:64:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:19:A4:0A:B8:A5:E8:A0:D0:2A:14:6F:63:81:B4:C3:4B:59:B2:17
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b3:89:b7:c8:d8:a4:b5:f3:26:68:ac:9c:de:8b:51:d0:34:
9e:9d:4f:73:70:fb:c4:72:d6:3f:eb:dc:9b:84:27:07:ef:9f:
81:0e:97:3f:19:93:ec:31:19:aa:6e:cf:19:a1:ef:22:90:cc:
b6:da:d6:3f:d5:e4:35:2a:a0:b7:bd:17:ea:d4:38:51:a6:2e:
ba:5e:0a:03:af:aa:ad:75:9b:39:53:3d:b9:5c:89:0d:01:01:
cb:a2:a7:15:8f:5f:da:9c:7d:03:dd:24:c3:83:8b:d1:92:4d:
37:08:c1:1e:1e:fd:de:16:cf:c6:41:02:3b:dc:7e:d6:79:ec:
17:1c:2b:05:d4:73:1f:40:cf:b6:41:76:4c:2f:ed:b4:3c:01:
e2:74:6e:24:08:a7:23:fd:73:af:b0:99:1f:89:48:c6:f4:cf:
19:e7:09:61:03:55:c4:a8:43:fb:9e:68:48:bf:73:75:d0:91:
e7:5f:56:86:3f:62:4e:af:12:64:73:9f:da:be:5b:2e:d8:5f:
b5:5e:1a:7f:4f:bd:82:5d:26:8b:80:9d:da:a6:8e:8b:4a:a2:
e8:24:18:43:55:2d:37:8d:0b:c5:9a:81:d7:6c:73:d5:50:26:
13:72:ed:b8:50:73:95:d3:f8:52:40:23:2d:8a:9a:2f:b4:a3:
8f:3e:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:54 2025 by rpki-client