Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: OSBfyNMFlNOb2V7rnmm1zVnedONIupmAYFsH8aY0KX0=
Subject key identifier: 64:C1:66:19:E2:00:A6:91:21:48:4F:9A:27:CC:AF:A6:D6:B6:B5:48
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019A0147923F4EA7B7D6AA2DFE444444C17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 02BC
Signing time: Mon 20 Oct 2025 11:00:58 +0000
Manifest this update: Mon 20 Oct 2025 11:00:58 +0000
Manifest next update: Tue 21 Oct 2025 11:00:58 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: tNvxIGx6Y0ejABusT+01jBjNXxj1mGq08V9EWtYpCVQ=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:92:3f:4e:a7:b7:d6:aa:2d:fe:44:44:44:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Oct 20 11:00:58 2025 GMT
Not After : Oct 21 11:00:58 2025 GMT
Subject: CN=64c16619e200a69121484f9a27ccafa6d6b6b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:aa:23:dc:5d:d0:e8:ea:b5:20:b1:f1:49:
1b:8d:0c:47:9e:33:07:b1:00:f9:fe:da:91:1c:ac:
91:bb:ef:d3:f2:3e:0b:1c:96:37:87:3c:36:d9:c8:
94:22:00:e9:55:8f:69:8f:d4:2b:1e:f5:76:ef:a1:
b9:c8:6f:cb:c3:1f:36:0f:98:47:c6:4c:4a:77:03:
80:4d:e8:ee:be:27:91:b7:27:13:18:70:3b:32:25:
ac:53:c5:71:ff:9b:57:57:a0:ce:1a:7b:95:af:59:
d4:d7:2d:c1:bb:5b:73:ba:e2:c6:eb:e5:b5:e6:49:
5d:d1:ec:ed:9a:2d:c1:6f:db:9a:59:9c:51:1f:6a:
1a:f4:92:23:f1:0c:81:51:95:7b:42:da:e1:81:e5:
b6:cc:36:3b:bc:b0:75:a0:0e:0d:ee:7b:35:5c:e3:
be:8d:43:b9:ad:e5:d5:a8:e1:b0:11:0c:21:b4:06:
68:a1:5c:7e:f2:17:d2:80:a9:a6:7c:96:b4:f2:ef:
c0:a8:44:49:e7:36:7e:4b:bb:c1:5c:bc:1c:89:3a:
31:de:dd:25:92:cd:e6:ca:49:5d:89:a8:3c:24:74:
64:01:37:6f:61:cc:6a:ea:7a:86:0d:11:b8:e8:75:
a1:d5:4d:f9:3a:5a:c0:12:27:ee:a2:88:79:a0:52:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:66:19:E2:00:A6:91:21:48:4F:9A:27:CC:AF:A6:D6:B6:B5:48
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3e:77:c0:1f:bd:f2:95:04:b3:f7:a0:db:ee:be:5c:5e:db:
9a:2f:f4:56:17:ee:a4:ac:bf:27:d8:e4:62:1f:e9:5b:c4:d4:
f4:52:2d:15:bd:0d:90:b6:34:7c:79:e1:18:15:d2:d0:6d:7a:
01:e3:c3:e7:7b:f0:ff:38:3c:73:87:9a:f5:82:a7:02:24:53:
71:ee:ea:1a:0e:c8:28:b9:7c:fd:d3:3c:50:95:41:ef:b5:b6:
65:f7:57:c0:03:e0:e7:2a:aa:95:8b:11:4f:e6:0f:47:31:4c:
fa:19:ce:1e:01:f5:f6:72:e8:41:56:c6:13:5e:18:d2:b2:22:
e0:ff:8a:c8:fe:9f:5e:00:28:25:d8:73:d0:81:07:86:4c:f0:
b1:f0:a9:64:94:82:28:70:28:0a:f6:71:ee:7e:bd:c2:eb:9f:
24:6e:90:1a:a8:d2:ce:ce:db:01:df:3d:55:85:0c:ca:c0:37:
55:5f:b4:f7:7e:c5:8b:07:aa:59:90:f3:46:dd:24:55:99:cd:
b4:32:0b:02:f3:6f:a6:62:cf:da:d6:06:54:5d:e6:c4:25:07:
52:fc:c1:fb:ac:87:90:9e:ee:a7:c0:09:6b:47:85:6f:8d:59:
a7:8b:99:76:89:84:68:31:70:33:57:d1:2f:bc:f2:ae:1f:ec:
34:02:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:07:31 2025 by rpki-client