Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: VfGcu2mUbLr3BFrK44t5Gp52xizufwIiE2/2XdvGZ34=
Subject key identifier: 1E:F4:C4:87:B3:EF:57:1E:5D:42:E4:4C:B1:E3:03:32:85:C8:05:C9
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 0199FC8FAAAB3A98137B868D6994DD28E28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 020A
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: A+80BOKpDqDLsJXp6duE+C0aPIDImMi/5ZnWy01EIW4=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:aa:ab:3a:98:13:7b:86:8d:69:94:dd:28:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=1ef4c487b3ef571e5d42e44cb1e3033285c805c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:ab:7c:c0:c0:4d:35:12:e6:cb:3e:43:8a:
a5:ee:ec:16:9e:0b:40:07:0f:c9:f7:e8:3b:4a:6f:
ee:ed:00:44:5d:35:1f:56:25:14:8e:11:24:b2:07:
0c:e9:04:82:38:4a:76:d8:39:f9:8d:94:a3:08:b1:
59:29:25:e3:85:41:26:27:bb:25:21:0d:87:12:19:
3d:4a:ef:53:0a:cb:c9:36:50:c0:68:78:f4:6c:4b:
58:6a:76:82:3b:8a:60:57:07:56:b4:90:1f:4d:2c:
f8:ee:e5:6f:d2:20:ef:a0:fd:29:a5:e6:69:c8:80:
02:d4:ad:d5:b6:9e:2a:99:60:3e:22:4a:9c:b1:eb:
b6:df:1e:e1:99:94:68:21:fc:19:6c:94:84:1a:3c:
8a:e4:94:f1:09:a6:b6:53:65:1c:89:40:af:75:ab:
35:ce:af:51:16:36:2f:4a:59:39:4b:98:fe:70:e9:
ec:29:23:b8:c9:eb:1a:3d:ac:a5:46:d7:29:7e:42:
48:e6:15:7b:87:52:9a:5b:1f:4d:ef:97:81:3f:ed:
3d:09:60:ec:a9:dd:e0:ce:41:c9:b4:c8:d1:88:77:
be:f7:fa:c4:39:1f:bd:cf:7c:aa:73:97:ba:56:b9:
3b:a0:4c:82:dc:63:30:5b:38:61:c9:91:fe:ec:b9:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F4:C4:87:B3:EF:57:1E:5D:42:E4:4C:B1:E3:03:32:85:C8:05:C9
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:2c:6d:9d:66:fd:bf:ec:19:35:3d:f4:9f:09:92:12:59:
7f:b3:76:3d:69:d3:29:35:a4:e6:f6:ff:ea:9a:57:92:29:74:
7e:f2:ac:af:ec:f4:53:e5:55:97:94:9a:d7:fb:07:c8:da:a0:
85:85:e9:bf:5d:d1:69:61:c6:4a:eb:94:19:b4:d2:a6:1f:45:
6e:b6:37:dc:44:b0:fb:f6:7d:7f:bd:4e:bb:90:f1:79:6f:fc:
e9:c5:35:ec:9d:54:35:a4:f9:fe:9a:5a:2b:bb:a1:45:82:5b:
cb:df:3d:75:32:b4:51:00:52:4b:36:c1:87:59:3e:b7:d6:76:
83:4a:05:3f:01:f6:f8:84:17:5f:e0:91:9c:ae:14:db:aa:3f:
ec:a5:49:24:45:37:38:2d:6c:ce:6d:59:e4:a2:9d:26:e0:bd:
94:08:26:29:9a:65:36:50:96:73:e0:c7:a6:8a:a0:6d:6c:96:
eb:2a:b2:2b:60:27:be:31:70:ff:46:3f:df:8d:de:a6:b4:0c:
9f:dd:0e:c5:03:41:af:86:32:7d:da:0c:cb:32:93:c7:27:08:
4a:85:07:32:84:45:4a:69:f5:98:ca:c1:55:c2:d0:b8:96:bb:
53:dc:f2:bd:ef:f7:b9:3e:c2:1b:d0:e9:89:44:d9:ef:83:ac:
fd:f5:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:15 2025 by rpki-client