Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: EqvFHMClS7PB0pUmWHC4okSJQtxSuImSworQySrTg1o=
Subject key identifier: E2:4D:24:24:31:B7:6B:63:D3:28:80:3E:88:D8:C0:6F:A6:3F:D5:92
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 0199FBEAF4D7BE074F0F2BC93981CB8EFA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0C08
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: 4Wvv1cOes5uYF6wbnitp9qu3NaHHvx0n8ktm5CBl66E=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f4:d7:be:07:4f:0f:2b:c9:39:81:cb:8e:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=e24d242431b76b63d328803e88d8c06fa63fd592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:48:9e:cd:19:ba:2a:57:8b:29:f5:57:5e:
80:74:10:89:d0:83:29:fd:96:61:e9:41:7e:0f:ac:
20:81:4f:fc:81:66:46:f3:b2:87:12:55:2e:79:ed:
a0:2f:b5:6e:32:67:dd:45:81:04:2e:d4:cf:3d:34:
3e:a8:9f:15:f1:30:10:a7:86:aa:1a:59:8d:4f:db:
6d:05:a9:31:39:b6:94:96:88:47:d0:0c:6d:7b:4d:
de:b3:d0:87:40:c3:09:b2:4b:30:a0:86:8e:e4:ec:
90:7e:4a:ef:fb:d4:0f:4b:68:1d:ae:77:1d:8e:2e:
f7:39:8d:a2:f0:c9:c6:0e:c5:c7:e2:da:03:44:2e:
71:f2:8d:7b:78:62:ec:9b:c2:56:97:b1:37:18:47:
f3:4a:85:dd:73:6e:35:38:6f:df:fc:44:24:b8:25:
97:01:d0:03:f0:9d:99:fd:10:ff:4f:c1:f1:d4:55:
d6:74:5a:1a:c3:00:47:fb:d8:98:99:e8:a9:72:72:
55:78:9f:a9:d4:37:34:46:c8:9e:73:9f:e9:a6:29:
29:d2:d1:19:be:b4:b5:b0:82:d6:50:f2:ca:89:a2:
13:c7:8f:8a:75:92:fb:92:71:9d:cd:8a:7c:63:9b:
82:73:f3:e0:14:56:46:8e:1b:c3:f4:c8:94:82:29:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:24:24:31:B7:6B:63:D3:28:80:3E:88:D8:C0:6F:A6:3F:D5:92
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c6:e2:30:0d:82:2e:89:65:c9:e9:7f:dc:10:f3:74:ac:44:
5a:e6:dc:40:94:6d:17:e7:0f:44:4b:f1:b5:55:7e:f3:93:0b:
0f:29:4e:2c:c9:23:88:58:4c:4d:b7:c0:49:4e:19:65:7c:e2:
e5:31:8c:d4:f0:33:57:6b:8d:4c:18:fd:fa:33:73:8f:64:d4:
ff:e1:22:38:83:58:41:08:a3:20:50:2e:f7:c5:ca:46:64:93:
09:e4:24:72:af:b6:f5:fd:30:cc:bf:a1:56:57:3b:8d:16:22:
ff:ae:a6:19:09:6d:ea:46:29:a7:c2:c6:71:45:35:a1:4b:cb:
b7:30:d8:c2:db:19:3f:4f:89:c3:46:54:71:b7:aa:10:6c:71:
4a:e4:39:87:8c:11:7d:50:d2:e3:23:50:27:59:f8:a1:ba:23:
64:3e:ba:24:b4:65:f1:7d:a0:4b:74:a4:f8:6e:e7:22:57:88:
48:aa:3e:f8:1d:f5:e2:1a:10:c6:6e:b2:20:55:e6:62:04:41:
d5:03:7d:5f:ba:1e:50:fa:88:6f:ee:39:24:e1:48:36:71:19:
d7:a5:3e:e5:dc:79:54:37:9c:c2:61:ae:7f:69:6a:5f:99:df:
5f:01:e7:08:61:90:e6:52:b3:81:bf:a8:8e:02:57:d1:f3:45:
07:f4:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:53 2025 by rpki-client