Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: vye9LXxiXGP+aafVA40/bIesGzRcK36PS0/j+1lFL0w=
Subject key identifier: AB:6C:0F:68:98:E9:98:D3:E8:4F:8B:2C:37:53:CD:95:DC:6A:F7:D0
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0199FB7CD9CE536C0F909C58DCDD77391589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: KYJWzAoEfIW+5clQKgRo9ue1KNp3X3hGBwQTY1W2n8o=)
2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d9:ce:53:6c:0f:90:9c:58:dc:dd:77:39:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=ab6c0f6898e998d3e84f8b2c3753cd95dc6af7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:fd:53:77:83:16:38:40:7d:5c:89:7e:1a:
e8:7a:bf:27:d5:eb:67:55:64:3d:ae:0c:0e:7a:fe:
81:13:7e:38:bc:94:b7:b2:32:62:64:00:5c:84:c0:
9f:63:be:53:bc:06:f9:5c:0c:83:97:aa:bd:91:48:
35:8f:26:9f:03:ac:24:c2:a0:34:2e:d0:ad:55:78:
c6:88:79:12:aa:03:94:d6:c5:97:96:1d:32:4a:33:
30:6e:c4:9a:80:41:06:7a:a0:52:1f:87:96:11:06:
c5:04:ff:de:c7:ed:96:b5:77:57:f0:35:97:af:28:
83:ba:8b:27:52:6d:7a:41:3c:7e:1b:a0:cf:21:99:
10:b5:a8:31:52:a0:37:e7:60:d3:1a:c3:c8:52:83:
43:6f:3a:37:2c:c6:76:52:e3:09:03:4c:3f:58:67:
51:91:ae:47:a7:de:1b:67:c1:e4:45:b3:76:d4:aa:
09:f9:9a:14:16:ed:39:d7:4d:e0:95:f4:15:4b:b2:
e5:e6:10:f9:a9:32:7c:dd:15:08:af:4b:a5:6e:73:
cb:f7:be:8d:a6:c8:d7:e2:a9:1a:51:0b:4b:01:67:
d6:ab:0e:03:91:5e:da:4d:d8:5e:9d:cb:8e:3c:6d:
34:95:e1:39:14:53:58:1b:01:e5:81:4d:98:b0:41:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:0F:68:98:E9:98:D3:E8:4F:8B:2C:37:53:CD:95:DC:6A:F7:D0
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:ec:b4:be:06:25:34:f0:59:fe:80:51:e4:e1:0a:68:4f:
7d:a3:a2:49:88:01:69:d4:04:65:26:5b:c8:f8:ec:6c:0e:79:
c5:8e:fa:f9:3b:3d:11:9e:34:c2:33:59:f9:b6:c1:15:47:74:
16:d7:20:af:f7:39:0e:99:75:0a:9d:e8:af:0f:a8:1b:b6:5e:
d2:4f:c2:d8:3c:83:31:b4:1c:39:71:eb:dc:62:ef:a7:ca:2a:
c1:43:f9:ef:b4:fd:55:ee:a7:29:ae:ca:a1:29:11:cf:0d:3c:
18:ea:44:97:d9:f4:da:b9:7b:f0:60:06:6a:0a:ba:c2:91:06:
67:82:c2:f4:d8:24:4a:8b:92:77:1c:95:80:3f:f0:80:bf:15:
56:fa:b7:05:58:cd:68:40:92:71:90:f3:85:52:fd:22:79:8b:
d3:6f:82:48:24:ac:11:06:2a:d1:1e:ed:e8:c2:64:34:3a:04:
c4:7d:04:fd:5b:0a:6e:51:15:22:f7:2c:84:d4:0c:e3:e6:a6:
ae:53:63:03:b1:47:2e:58:2d:fa:0c:a4:88:34:6f:6e:eb:a7:
70:07:dc:fa:50:c4:1c:3f:f0:e4:5a:57:61:fc:a3:4e:1d:e2:
51:00:ea:84:36:06:18:aa:e2:a0:de:30:b0:3a:7e:54:e2:49:
59:7f:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:54 2025 by rpki-client