Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: pcWQzf49fm5xqpGbGUzI2R8U1qv7CYOR2dbQXSZ7rnE=
Subject key identifier: 56:97:CF:CF:8E:84:11:82:E6:E1:C0:76:29:0D:D2:CD:77:85:5B:F3
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 0199FCFD52B3E03234BFD66BE9416255DDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: 62gLqTuowkNIvBfpUP7sJyGhFcZ/WgkhfaP3imoUwws=)
2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:52:b3:e0:32:34:bf:d6:6b:e9:41:62:55:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=5697cfcf8e841182e6e1c076290dd2cd77855bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:dc:3e:5d:0c:4d:08:69:75:e3:45:20:da:
15:9c:dc:34:64:b1:59:b2:e5:2a:ee:f5:ab:84:f2:
7c:73:0a:8c:c6:bf:90:84:74:74:6b:1d:1e:e7:fd:
96:f3:9b:e4:c6:1b:37:15:54:08:dc:83:7b:30:bf:
c8:95:26:04:90:e6:ba:5c:b1:e6:36:38:89:ce:a2:
04:14:c8:45:9a:32:e7:80:11:d6:d1:48:82:dc:ec:
a3:bc:12:05:fe:33:0a:51:bb:8a:da:26:e8:b2:5c:
fe:45:ea:58:f3:05:d6:6f:34:37:c4:72:cc:ed:da:
3b:e4:65:27:8b:6f:81:dd:10:1e:09:75:b8:df:8b:
ee:97:26:8e:2b:18:60:0c:b1:04:ac:6a:67:16:de:
91:05:a1:b4:cf:a2:c2:ac:42:18:0c:8b:70:f2:bd:
4e:c5:8d:2a:91:f9:29:15:0a:ed:ea:41:f2:99:c2:
36:78:98:6a:b9:38:60:e3:73:06:bb:a3:3c:f3:29:
db:7a:8e:94:66:fe:95:29:96:68:1b:ff:c8:34:23:
de:74:24:2b:a9:57:4f:cb:58:56:91:89:9e:20:31:
1d:f2:d7:bc:0a:ec:3c:98:54:94:f5:0f:4d:00:1e:
c0:88:d0:e7:be:44:98:14:ae:56:9f:7c:4c:7d:a9:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:CF:CF:8E:84:11:82:E6:E1:C0:76:29:0D:D2:CD:77:85:5B:F3
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b4:4e:19:db:c1:fd:80:56:b8:98:1e:af:e3:84:70:1c:63:
9e:f9:bd:5a:ab:ac:c0:7a:de:8e:c9:4f:c8:67:08:7d:28:1a:
35:9a:de:95:4d:2e:aa:9a:46:97:bf:80:28:09:ad:ec:50:70:
28:f9:00:20:37:57:f1:49:bc:c1:a7:bb:cd:0a:3a:d8:a8:e3:
32:54:fd:74:90:84:38:3b:67:00:4b:6a:d8:32:ac:11:f8:cb:
d6:f3:5a:24:64:06:f7:96:d8:d8:69:f4:34:c7:c1:a5:db:a4:
83:24:30:98:94:0a:99:9a:83:63:2a:84:b3:1b:61:7c:93:68:
cf:71:bd:89:d3:1a:a9:27:ea:fa:31:a0:b0:26:78:6e:4f:47:
52:a5:aa:97:b0:02:17:79:2d:45:3b:78:2f:37:19:51:ea:81:
ca:f7:ac:2a:fd:12:78:4d:35:24:66:86:f1:97:ec:fd:9e:70:
69:05:ff:a0:81:61:1c:ca:cc:5f:96:da:a5:fd:f2:77:6d:91:
c0:78:ab:bf:2e:6e:76:22:d7:4c:4b:9d:7a:c5:67:b4:63:0d:
5e:4b:2d:eb:54:e0:a1:ab:e8:ca:00:60:82:b3:ec:a9:77:15:
82:85:3e:3d:c4:00:d8:80:d3:53:02:85:1b:89:e7:26:b5:ab:
4a:28:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:36 2025 by rpki-client