Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: bbCCqBtH1L3/RVDweQ9ooIarCAnNnupKE7H+oiY9DZo=
Subject key identifier: B6:35:B6:F0:7D:6E:E8:F1:1E:A9:4A:19:4D:D8:68:32:EB:47:6E:B7
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 0199FDD9DA9EE0B87BFB05C021E91049839B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 0889
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: xbd/N7Tc2vAWcxlIyyhIqS671PAO5NlL/eNHC+kTcrU=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:da:9e:e0:b8:7b:fb:05:c0:21:e9:10:49:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=b635b6f07d6ee8f11ea94a194dd86832eb476eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:7f:e4:ae:d9:10:b3:bd:59:24:20:af:24:
ae:22:7f:3f:16:68:d3:97:7b:b8:81:3a:1c:b0:02:
7d:78:1e:69:5b:b6:a2:f5:ea:8f:95:bf:3c:cf:ca:
65:9b:a6:b7:79:a3:68:4d:21:1d:0f:34:b5:1e:84:
34:4f:81:47:d9:3b:93:eb:a4:30:7e:96:44:dc:23:
11:99:cd:7b:d7:fd:4d:80:93:e8:09:59:69:6f:6a:
4c:07:d8:0d:16:cb:bd:19:f1:15:88:e5:ee:2e:a9:
e6:a3:74:d5:92:5e:0c:49:44:80:83:26:f8:29:75:
fb:f5:22:58:64:4f:ab:52:4c:24:e3:d1:ef:9a:c9:
27:15:7b:c7:76:5e:57:9f:fc:d9:c3:d5:c4:0d:af:
bf:d5:36:a9:04:4d:d2:80:a5:4a:3b:c9:ec:f9:ed:
03:fe:9c:a8:f6:75:0a:31:8a:36:aa:d6:f8:12:61:
76:de:0c:55:9d:a1:af:45:0f:ea:37:0f:35:6e:27:
99:51:0a:d6:51:44:e0:51:01:18:b1:5c:15:c3:bd:
85:a9:08:76:fc:7a:84:e5:d0:20:17:01:82:a7:e4:
22:39:01:1d:03:e0:da:65:77:3d:75:ab:34:9e:fb:
99:bf:b6:80:14:dd:ce:f7:e4:e3:1c:81:d1:2c:f7:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:B6:F0:7D:6E:E8:F1:1E:A9:4A:19:4D:D8:68:32:EB:47:6E:B7
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0f:d8:4a:e4:d8:5c:d5:e6:73:4a:1e:c1:a5:e5:10:64:27:
0a:48:42:29:44:73:d4:ae:8b:59:c5:5c:f4:3b:84:3c:b7:b3:
eb:35:43:57:b6:41:97:9d:2b:5d:e0:6f:58:4f:85:d0:9a:d6:
4a:4d:fe:aa:c5:79:ad:68:d2:29:9b:db:f6:a0:f2:9c:37:52:
c2:b2:16:fe:34:d6:50:5e:ea:89:8f:5b:e1:1b:58:00:b3:25:
1c:a4:bb:48:ca:e4:1d:87:2c:ab:b1:94:66:4b:4d:08:2a:41:
7a:30:51:f8:f4:35:6f:3e:33:9f:0d:9a:54:af:11:b7:8f:46:
b2:16:75:98:71:f7:71:2e:12:e6:34:fc:91:91:d9:f3:31:8f:
96:a1:bc:07:98:57:2b:4f:55:17:da:2d:2f:d5:64:f2:95:4f:
ef:75:78:f1:89:88:1d:69:60:2b:92:8c:a3:78:80:90:47:2d:
0a:86:28:c6:36:1c:67:f1:14:45:0d:c1:11:d7:fb:37:3e:c7:
8b:ba:8b:00:d8:d6:4a:ef:54:d2:a9:3f:8e:b5:f3:dc:f7:5e:
14:4b:b2:2d:b2:15:8c:1d:dd:65:07:ff:48:a8:e5:2c:88:8a:
e0:02:b4:89:cb:75:70:6a:3d:ca:21:af:22:c4:06:ce:8e:cd:
47:fb:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:02 2025 by rpki-client