Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: TmPHHSmTFr74MJ9N2Rq0i+Vx+bbYIDZeo5Y2/n6FzV8=
Subject key identifier: 6E:E5:C4:EF:FB:D9:0B:5C:51:D2:F2:68:6C:ED:B5:15:90:20:F0:94
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 019A00A2E6D07B84DBB3FDCC7183E74D5E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 1042
Signing time: Mon 20 Oct 2025 08:01:07 +0000
Manifest this update: Mon 20 Oct 2025 08:01:07 +0000
Manifest next update: Tue 21 Oct 2025 08:01:07 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: fE/pWcmsunaNS7m/ArjtRuJeFZ86jd1dyV5lXa9KS7M=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:e6:d0:7b:84:db:b3:fd:cc:71:83:e7:4d:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Oct 20 08:01:07 2025 GMT
Not After : Oct 21 08:01:07 2025 GMT
Subject: CN=6ee5c4effbd90b5c51d2f2686cedb5159020f094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:f4:3f:47:2c:b5:a7:ba:c1:70:cc:f2:4d:
76:05:cb:18:24:07:7a:71:77:f0:13:a8:b0:04:51:
00:d0:97:d2:c7:38:6c:e5:b5:a4:04:c4:20:1a:f6:
e7:61:9e:44:da:63:be:b5:e6:1f:31:85:ca:03:a2:
53:00:ff:f5:98:8e:aa:1d:16:f6:94:1d:85:b3:c9:
c3:c2:ed:fb:a8:91:64:2c:e9:6a:33:e5:c5:6c:12:
80:26:f0:5f:3e:1e:7e:24:e9:2c:dc:a4:4d:75:ef:
88:b7:ef:a0:8d:76:3a:7d:87:30:86:1b:e2:3c:27:
f4:47:6c:33:2d:31:a6:0e:af:65:3d:29:83:ff:fa:
58:45:f0:2b:66:6a:a6:d0:5e:95:b9:e1:f1:28:14:
55:77:64:a9:ab:43:94:fc:d1:7e:06:bc:e0:68:b8:
4b:14:ac:a2:01:57:9a:33:d8:73:a9:e6:9a:73:cc:
2a:56:45:25:4a:16:de:bc:cc:66:57:cb:62:18:b8:
d5:b0:28:0d:8b:ae:0c:09:f9:9e:b2:c0:35:5b:ff:
a3:02:7c:fe:e5:c9:bc:00:52:cb:aa:e4:6f:09:9a:
dc:ef:25:1d:27:ee:95:2c:55:9a:e5:ef:95:f1:13:
bc:46:53:27:6a:35:f3:28:d2:4f:14:ae:fd:55:1d:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E5:C4:EF:FB:D9:0B:5C:51:D2:F2:68:6C:ED:B5:15:90:20:F0:94
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f6:af:da:87:6d:ef:31:4e:19:a9:0f:4c:3e:e9:0e:1b:7b:
75:8c:02:f4:85:0f:fa:d2:05:50:f3:f5:c0:03:cd:06:37:f5:
10:93:3a:e6:84:fb:59:cd:70:9d:4a:16:33:ba:ca:d3:72:b0:
f5:5a:b5:33:66:f1:7e:82:4c:72:17:e5:35:07:e7:9b:19:ec:
c3:3b:37:85:e0:ed:6b:0f:88:4c:8c:d0:35:78:b0:9d:15:8f:
df:3c:a7:30:33:de:62:d5:2a:e7:51:6a:da:20:95:f5:eb:81:
b8:0f:10:a9:97:3b:fc:fc:92:a4:22:87:34:03:98:15:c7:78:
30:69:b3:04:80:38:f7:25:63:66:10:4b:4e:83:15:bb:f8:fa:
c8:67:56:dd:f1:58:30:07:ac:f8:61:f2:41:fc:0b:98:e1:c1:
c3:67:f6:98:62:f4:38:8e:97:60:b4:75:21:88:36:7e:e2:3c:
92:66:ff:b6:33:9b:56:4b:8e:b9:db:c1:79:1d:05:25:4d:53:
69:ed:28:c0:d9:88:55:07:2f:7f:ff:76:b6:26:a0:37:02:e9:
ba:34:7d:c7:7a:73:f2:c7:6d:19:73:95:39:0f:fa:49:00:79:
b6:b0:49:76:b0:b4:bd:52:2f:87:ea:d0:10:f9:b7:87:3a:4f:
61:2d:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:53 2025 by rpki-client