Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: tERUzZZYCxbP/2Vz2C7+Rt+/E3gLG8NEBz6zLlEowLs=
Subject key identifier: 8F:93:ED:DD:98:F3:E1:97:A0:30:B5:2F:C5:B6:25:1C:96:DC:7A:D1
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0199FC21402F1D85E77596202A7445CDED19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 0852
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: 2eApMNB9E5UX3WrTv0tJQMMKILr6JKfddYHN3oUZ5xk=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:40:2f:1d:85:e7:75:96:20:2a:74:45:cd:ed:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=8f93eddd98f3e197a030b52fc5b6251c96dc7ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:68:a7:f7:1b:59:e0:0f:81:78:00:4b:2d:
e6:fe:b0:3a:bd:e7:71:07:db:37:ad:9c:4e:3f:b6:
26:83:33:f8:b0:2b:3c:20:c7:99:a4:6f:49:ba:5f:
a2:81:36:4f:2a:3a:76:44:60:09:6c:29:e2:fb:f2:
af:00:5c:12:65:95:ea:df:2c:fa:65:3a:b9:1f:18:
8d:b9:dd:60:f5:71:d9:1a:b3:cc:6a:c0:00:d3:dc:
f8:99:8e:a1:28:df:15:84:01:43:c7:00:e1:5d:14:
53:6c:e3:cd:6b:9b:40:a2:55:6b:14:c2:ef:be:a6:
83:c5:f1:22:a4:e7:1d:d2:1c:63:16:39:86:b5:f8:
89:f4:7c:6b:93:b5:b8:ff:f4:0a:ac:79:e3:d1:63:
fd:9f:75:85:4d:3d:61:50:1c:85:f4:b1:18:91:d5:
b3:83:52:b1:c3:c7:f4:ad:99:0a:44:56:cd:2d:be:
cf:77:42:03:90:1c:ab:4f:cd:b8:96:7a:67:83:9b:
28:be:a0:32:dd:05:dc:da:97:3e:94:d2:65:d5:9d:
a8:63:48:01:a5:bd:ba:6c:0e:ce:90:07:4d:16:3b:
ee:c9:52:82:cc:84:90:a3:5c:c4:ec:94:4b:e9:91:
cc:c2:28:40:03:4e:c7:de:f3:e3:82:83:a1:cd:69:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:93:ED:DD:98:F3:E1:97:A0:30:B5:2F:C5:B6:25:1C:96:DC:7A:D1
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:3b:84:8b:95:5c:33:9b:dc:ae:32:cd:fd:c9:b0:74:84:
ee:58:58:ea:00:53:8b:9b:16:d3:54:a3:6d:96:ee:71:1c:a7:
13:98:e0:6b:a4:6b:c9:bb:c5:0b:63:bf:de:2d:b7:f6:e8:ed:
d7:59:5d:1c:e8:c3:98:6e:1c:e8:f1:42:c7:c3:7b:89:47:17:
10:b2:11:6a:33:30:bc:2b:02:e5:03:91:1c:ba:ba:f1:e3:f8:
7d:c6:51:32:24:be:e9:0e:4e:c3:07:94:3c:05:2b:ea:52:01:
a5:8d:b5:04:f9:9f:86:37:6a:b1:e8:d2:f3:8b:5e:2d:48:3e:
4d:f1:9c:45:e6:63:72:c0:29:06:73:89:a5:12:60:61:fa:c9:
e9:73:43:9b:66:15:c9:ae:a0:9e:6b:8e:9c:65:63:a2:59:25:
38:43:91:77:ca:59:d0:af:42:d6:32:c1:cb:b2:3b:24:22:3a:
6f:f1:b9:fc:a9:40:a7:a0:78:a7:4a:f4:e3:bd:17:1c:2b:78:
03:23:9e:1e:4e:cc:76:aa:17:8f:f3:2c:c6:4e:d2:b7:74:a9:
01:82:1c:a0:c9:ba:05:a0:bd:d7:fb:07:d6:e6:78:97:ce:ed:
44:38:e6:f9:64:e8:89:ac:f7:a4:a3:52:63:b3:b5:ab:50:82:
f7:b3:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:15 2025 by rpki-client