Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: cK2eb+YMX+cWmbZTn9ax+waqzHWmXMyLog6oU4XBr14=
Subject key identifier: 98:36:C5:51:02:81:4C:E9:FA:1A:05:A6:B9:79:AC:3F:22:BF:52:BC
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 0199FDD907F114D8DF19CCB025EDE30CC830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:22 +0000
Manifest this update: Sun 19 Oct 2025 19:01:22 +0000
Manifest next update: Mon 20 Oct 2025 19:01:22 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: TAvbRa+W8qPwNJNCFXzSykyWhEHaPU9cpjTwTored8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:07:f1:14:d8:df:19:cc:b0:25:ed:e3:0c:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Oct 19 19:01:22 2025 GMT
Not After : Oct 20 19:01:22 2025 GMT
Subject: CN=9836c55102814ce9fa1a05a6b979ac3f22bf52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:61:67:35:0d:f2:c9:dc:1e:8c:aa:50:06:
84:8c:4d:e0:16:7d:d9:3b:09:ce:b8:3e:f0:16:af:
4f:1b:58:06:7c:e0:c4:e3:3b:f1:6d:d1:80:34:88:
85:9e:50:37:a9:e3:59:40:d5:62:0b:39:0f:3c:7a:
f4:a7:21:79:34:8c:75:ea:89:02:27:0c:fc:35:dc:
ea:ad:05:04:cb:f1:24:4d:e2:b7:4a:a6:e3:79:74:
c2:52:53:48:03:34:b6:70:cf:b9:73:e9:3d:ca:7f:
14:33:6e:ba:cc:5a:57:b8:ae:36:4f:e8:46:9f:38:
93:51:35:06:29:f8:f7:4b:d9:bf:71:91:27:bb:f6:
2d:78:3d:cc:bd:d3:c2:be:c9:24:b5:45:64:3b:05:
8f:4f:45:0a:89:e3:2d:dc:d4:c4:1d:ce:80:16:33:
46:9b:ac:ec:22:41:8e:11:05:db:7a:8a:da:c7:71:
74:e6:26:76:24:e9:62:96:7b:c5:2a:11:96:42:e4:
13:12:5b:84:75:c2:d6:4d:10:49:97:c8:30:41:72:
11:61:f9:7d:38:01:89:73:f2:c1:5a:b8:00:74:e8:
f2:94:74:6a:bb:bf:a0:00:da:9d:11:cf:91:14:37:
a2:03:15:64:2e:98:14:b5:1c:f9:a5:c8:33:ed:f4:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:C5:51:02:81:4C:E9:FA:1A:05:A6:B9:79:AC:3F:22:BF:52:BC
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3f:db:c9:5d:88:35:7b:c1:63:46:c7:43:44:39:8f:a1:98:
3a:82:83:19:20:27:d9:9a:d1:66:51:07:c7:0a:8a:e0:54:d6:
d7:5f:47:16:9a:0b:bc:b8:14:c7:98:c5:6d:62:a3:0c:6c:12:
c6:fc:f0:8d:41:3b:68:6a:da:04:af:af:32:75:97:09:26:f1:
37:06:9d:9b:ae:ac:20:b5:de:8b:51:dc:45:0e:8e:24:77:86:
05:21:0e:2e:3a:18:60:9e:4e:bd:9a:2a:22:f2:a9:0b:c3:21:
86:47:14:37:44:6d:84:6a:a3:79:e3:8b:b3:ce:32:31:67:ea:
34:d7:ba:31:e9:02:bb:86:35:b8:82:d0:0a:e7:e4:f6:26:3e:
72:d2:56:1d:02:e4:ef:8b:c3:ab:1f:b6:0b:a0:1f:a6:96:e1:
75:a1:d8:2c:eb:04:da:7b:55:0b:8a:6a:6e:18:67:ec:fa:56:
75:64:75:10:78:dc:ac:38:c2:b9:22:14:47:b3:8c:33:8d:96:
dd:b0:f1:2e:c4:33:90:c2:f9:ea:3e:32:5c:f8:79:d1:03:2f:
fb:dd:df:8a:02:30:36:d0:c8:06:e6:dd:59:42:a9:e1:89:3a:
2d:51:a0:ea:23:1c:4b:30:8f:cc:b5:f4:cd:7f:a0:7b:82:c0:
3e:23:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:57 2025 by rpki-client