Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: zuN9A1fKN2m3vzPyTlw2xpX9SMzjXLADPCegiy0xwY0=
Subject key identifier: E8:04:22:A8:66:F2:96:79:2C:2C:E2:ED:36:58:80:B9:45:CD:FA:1F
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0199FBEB7CF8B481EAE425C650E5EE0BDD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: NmckJxzklgp1lOzRj49xduSq5J3UnxXBtwmq8ogeCkE=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7c:f8:b4:81:ea:e4:25:c6:50:e5:ee:0b:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=e80422a866f296792c2ce2ed365880b945cdfa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:84:ff:bf:f7:b6:ee:df:2f:5c:77:e6:a7:
aa:55:fe:45:7a:9d:8f:4d:2f:cc:7f:62:9f:15:a8:
30:d2:7b:c5:34:91:47:38:53:9f:af:72:ef:ab:cb:
8b:47:03:ba:75:09:91:4a:09:22:7e:0a:4a:91:df:
96:9d:cc:e0:35:62:34:22:e3:e2:92:4d:39:5a:15:
fd:e4:49:de:13:fe:05:73:84:4d:4d:be:ee:98:a9:
08:26:14:c2:ee:80:c9:ab:04:32:55:31:f0:23:e2:
0c:9b:ca:80:a8:81:c2:84:55:3d:ca:53:4d:5a:0f:
47:79:26:67:7c:a5:8c:f7:40:e8:58:c5:dd:61:c6:
ea:1b:71:77:18:1e:ad:8e:05:67:a7:15:9a:c5:69:
cc:0c:bc:ef:61:a2:9f:9f:84:8d:78:a7:f9:d3:9e:
3e:ec:a6:7b:08:d1:35:4a:87:d2:c9:00:eb:64:f9:
e5:8d:18:09:a7:24:e0:eb:ae:59:66:24:2d:5e:2a:
7a:a9:69:92:4c:92:9e:45:a8:49:9c:95:19:92:11:
a7:ad:77:1d:2c:e4:fc:f5:5b:e2:9f:91:14:38:51:
6e:90:eb:4c:75:72:c9:9e:01:64:0a:bc:ee:6b:88:
69:e6:39:86:94:c1:74:de:e6:71:26:17:00:65:27:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:22:A8:66:F2:96:79:2C:2C:E2:ED:36:58:80:B9:45:CD:FA:1F
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a9:82:92:f1:fb:11:8e:64:62:5c:a5:63:c2:3f:4e:29:67:
3b:a9:c6:a9:93:42:4f:62:72:0b:bc:7e:ea:e6:d5:d5:af:9d:
68:6d:f1:50:ef:a1:0f:bd:9b:9d:11:1f:b6:ae:f7:e2:59:03:
08:68:7f:03:fc:4c:ed:b7:7f:d2:c6:ce:ed:dc:3f:67:ef:3c:
3e:b6:0d:a5:7c:73:c9:a6:81:37:0f:69:78:c6:b0:1e:45:73:
77:03:e3:3a:dd:a9:10:8a:b7:ce:ea:d2:5a:de:c7:1e:e9:be:
bc:3e:e0:bf:f6:98:a2:4b:fc:78:5a:83:9d:12:d9:a1:b5:83:
44:8c:b4:f6:a2:72:cd:74:2e:02:92:f6:13:16:cd:b9:c7:12:
14:b1:1d:06:5f:f7:29:be:fb:50:1f:78:65:2b:71:ad:47:4f:
d9:87:54:06:24:ca:cc:33:56:f4:82:e2:bb:e3:95:9f:54:12:
1a:fd:3d:d4:7e:75:6e:09:87:53:2f:39:72:85:c7:f4:91:89:
38:99:95:5f:83:aa:c1:aa:6c:95:6c:82:ae:91:16:a7:df:7f:
97:b1:6b:14:7b:a0:98:eb:8c:3f:35:17:0f:5f:eb:63:cb:2b:
e8:a2:37:db:46:b1:07:ee:63:97:9e:c6:f9:47:17:25:00:2c:
27:b4:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client