Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: EOs9hJ/MdtYlk+zv2uMZpqzJT0+hXi1PvRLAf7Mmx7A=
Subject key identifier: 5A:62:53:09:87:1F:90:EB:99:D6:23:11:50:81:46:07:CA:11:75:E0
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 0199FC58EC64E58DBBE7901830ED8A6D79EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 13DF
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: VhlNr48G6xPI5FtWjDsn4FsCHh3SnD0hDC2urmC/mcM=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ec:64:e5:8d:bb:e7:90:18:30:ed:8a:6d:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=5a625309871f90eb99d6231150814607ca1175e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:39:75:70:17:0d:2b:dd:b0:df:40:45:83:81:
61:66:81:8b:cb:2d:05:8a:97:85:54:3d:7c:15:e7:
56:a1:dd:15:72:2b:13:88:26:57:55:d5:7e:5f:95:
6e:fa:0a:f3:b1:ea:03:a2:99:23:23:92:9f:90:a3:
0d:ab:89:48:e8:4e:fd:e6:bf:91:7d:4f:11:f7:ab:
03:7d:3e:46:64:9a:15:48:36:8c:62:b3:d9:8d:42:
25:ed:20:51:f9:f2:0a:cb:6e:ec:d2:61:07:95:82:
36:f5:3a:ae:7d:d1:8b:84:d0:35:34:15:5f:f2:35:
5a:34:6e:96:e4:96:90:a9:3c:fb:c7:1f:fa:57:f9:
fc:ca:8d:41:12:e8:09:c2:c0:51:d8:0b:f1:fb:cd:
7c:e1:25:bb:11:ac:c9:c9:56:53:29:46:47:35:c4:
6d:fe:26:62:ce:31:6b:9a:3d:18:48:ab:7a:01:b0:
9b:c9:ed:4d:84:39:13:6c:ce:91:14:d8:4d:89:90:
36:06:dc:59:ab:2b:e9:23:8a:b7:7a:27:86:0f:ed:
fd:ea:55:b3:ce:09:77:8c:13:54:85:8a:a9:d2:8a:
af:3c:6d:c0:a0:b7:eb:d0:96:b2:be:76:d9:f5:d0:
8f:76:38:37:24:7a:23:10:8e:3e:e3:6c:5d:ba:1c:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:53:09:87:1F:90:EB:99:D6:23:11:50:81:46:07:CA:11:75:E0
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:68:75:1e:8b:cb:4e:f2:02:18:23:bc:ce:4b:8a:72:94:05:
bf:3e:25:1c:51:c4:36:ad:c5:fe:9b:8c:26:d1:f7:25:54:15:
ea:2e:b3:6b:3e:f3:73:33:cf:ed:07:37:92:8f:41:7c:61:e5:
85:ee:7c:eb:55:b0:f8:54:7d:e9:15:06:c2:3e:dc:64:99:85:
99:d9:b9:d4:6b:20:92:22:7a:77:0b:f7:d9:78:20:17:a1:b4:
7d:6f:75:12:42:96:8b:8f:c9:29:f9:92:74:cd:30:53:af:47:
29:6a:cb:fa:9a:2c:b1:48:05:e0:6b:b3:cd:a9:c2:e2:81:f7:
c8:71:c7:40:d8:be:4a:88:d3:a7:59:7b:40:0b:75:0b:07:57:
78:43:63:f2:13:ad:3c:16:7a:3b:ca:87:82:e3:8d:10:db:a0:
70:c2:19:28:6a:46:4d:58:24:03:97:76:45:8b:3d:2d:fa:05:
f2:48:a1:94:26:fb:82:dd:98:36:68:3d:d2:27:6d:c0:f2:e8:
24:c6:0a:ca:59:0d:00:fc:3b:b0:72:35:77:10:8e:76:40:57:
10:d1:03:fc:26:2b:8b:1c:57:d0:e1:95:5f:6d:b9:06:e6:1c:
8d:43:c6:be:44:4a:4d:30:a3:cb:c9:c9:31:90:1a:b0:10:ac:
02:5c:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client