Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: 2M2H0KMjkPib0CtsTxCqvF6h1DNGXPEZQgSkcxpXtVg=
Subject key identifier: 02:14:8E:ED:3A:97:96:30:CD:0D:CA:35:6F:A2:36:F6:E6:C2:A0:C0
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 0199FCFD48EEB4CE220B4ED09E1AC512E705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: fVyJiqIY1Ty+F/CR0XKL+qWNnQhUbBvy/jmJ9lB5ZvI=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:48:ee:b4:ce:22:0b:4e:d0:9e:1a:c5:12:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=02148eed3a979630cd0dca356fa236f6e6c2a0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:04:ad:c8:6c:b7:cf:90:dd:d7:e7:41:42:
0c:78:02:9d:3e:f9:fa:11:0e:d5:f1:f7:0b:1b:8e:
51:7e:5d:cc:9c:b7:db:9e:f8:f2:0c:bb:1d:56:5d:
9e:26:82:68:cf:8f:9b:2c:53:db:3f:b4:ce:f7:6e:
ab:e6:6c:bb:c8:2b:9f:79:c8:d3:22:00:f5:ba:2b:
3e:70:1f:c6:86:c7:0d:7f:13:4f:7c:bc:70:c7:2c:
1d:8d:eb:ba:dc:3c:f4:51:c9:a9:00:e7:b9:25:12:
44:56:56:25:1e:3a:35:71:b8:1c:20:1b:a1:f0:89:
84:1e:e0:3e:29:9a:3c:58:9e:79:44:21:bc:49:11:
98:b9:0d:18:84:7f:a0:de:7d:36:0a:d8:d8:30:df:
42:3b:d8:65:79:40:bd:a9:0d:a4:26:28:12:ee:49:
12:4d:b2:fd:c1:ab:00:43:c2:37:88:4f:08:15:83:
e4:2f:ad:81:18:e8:72:b7:ca:26:30:97:3c:e8:55:
62:f1:5f:22:7c:ab:44:80:16:b4:e8:09:f4:37:3f:
28:15:1a:0a:a1:fd:ea:62:57:31:fd:fe:b3:fe:a8:
b4:2c:39:79:90:a4:10:35:9b:84:4e:11:66:a5:f0:
7a:61:90:4d:75:ea:f6:7e:ab:30:d8:5d:c8:3d:18:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:14:8E:ED:3A:97:96:30:CD:0D:CA:35:6F:A2:36:F6:E6:C2:A0:C0
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:45:26:9f:43:8f:a1:5f:59:76:fa:6c:6d:ff:57:ef:8a:
bf:a0:6c:73:4c:0d:14:16:08:51:a4:7d:72:35:4a:e2:cf:fc:
0a:2d:76:c7:79:74:25:d1:a6:ac:13:c0:80:c0:12:5e:bf:90:
76:a3:10:49:e9:3b:a2:fc:ac:c5:89:e0:db:6e:c4:08:1f:5d:
90:fc:fe:42:ba:ad:6c:63:44:6a:1a:35:6b:0d:d5:54:8b:8d:
0b:be:77:39:63:e6:fd:5d:c5:29:df:c3:02:cb:36:7b:0f:a2:
ef:74:dc:ec:61:82:85:34:40:c6:19:01:f7:ed:e3:f1:37:f6:
17:66:ee:88:90:08:0a:a7:7a:c2:f0:46:5e:0e:3e:19:9a:4f:
cc:dc:b0:d0:c4:12:ed:1b:00:3a:9d:29:8b:8f:25:7b:73:a1:
a2:be:2b:b3:d9:42:a8:91:63:e6:51:ad:8b:cc:f3:36:ec:7f:
1f:8c:b1:a2:80:7e:86:b0:14:9a:0c:3b:14:2c:dd:87:7b:24:
fc:c1:95:d0:0e:91:b2:0c:5d:14:fa:d4:ba:56:07:23:7b:6f:
e9:cd:90:a8:ac:55:4a:7e:9e:b6:db:0e:f0:00:cd:66:b7:05:
af:71:33:bc:85:62:02:70:d7:cf:92:d7:02:71:8f:42:bc:06:
7e:e5:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:50 2025 by rpki-client