Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: B6DsclVk+znLzRPVdPS976VUa1LsP0KIn8TNS0Umczg=
Subject key identifier: 99:BC:6B:68:42:94:39:33:83:AD:3E:46:B7:FB:3E:BB:B0:2F:06:09
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0199FBEB3C2D16D8A515A467475A116594F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0905
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: xqAtZZHjMFd/zo6AfA5f2PNbMiJr+Zbacoa/wfDwRiU=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3c:2d:16:d8:a5:15:a4:67:47:5a:11:65:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=99bc6b684294393383ad3e46b7fb3ebbb02f0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:c9:cc:b7:96:fc:ec:2d:9d:9a:58:af:e0:
ad:4c:b7:7b:77:94:28:b2:7b:e6:7c:3a:a7:d8:18:
ca:32:96:1b:6e:9b:a8:b3:5a:52:b0:27:f9:ec:1a:
03:2a:b5:12:ca:e9:1b:9d:87:7a:f4:f9:6c:c5:1d:
5b:cb:f7:0d:85:ec:fb:05:7a:e7:d7:3c:45:98:b7:
71:2c:31:f3:fd:c2:61:24:e6:e8:78:9a:7c:0a:ff:
97:77:51:1a:5b:b3:02:32:7e:99:bb:12:87:71:f8:
3f:aa:a1:7d:a9:18:14:bc:fe:db:2a:f6:8d:c1:64:
69:8f:04:c5:6e:5e:6a:68:68:b1:37:fe:f3:80:a7:
c4:c3:f9:6f:f3:7c:8d:61:41:df:37:eb:c9:7a:ee:
90:22:cd:49:86:81:cb:6f:1c:c3:88:2a:8f:bc:b9:
0b:ff:e3:cf:be:0f:ef:84:dd:01:40:ae:82:38:6a:
27:ac:07:82:3c:53:5d:9c:3e:d2:ef:b7:43:ce:47:
fa:5b:fd:c7:ea:49:8b:29:e1:60:2d:a6:72:e6:72:
7f:94:62:66:38:32:b2:6b:f9:7e:3e:52:7b:db:5f:
3c:74:ff:ef:20:1c:64:93:58:70:a2:c1:01:79:a2:
5a:6f:ab:1c:9e:d5:1e:40:a3:3f:51:55:c8:27:84:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:6B:68:42:94:39:33:83:AD:3E:46:B7:FB:3E:BB:B0:2F:06:09
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f2:23:8d:d9:4a:0b:b0:1b:26:6a:f4:79:1e:0d:69:37:ee:
ed:54:2b:96:2a:2c:31:58:40:15:90:5f:e3:e5:00:b4:5a:15:
17:76:da:92:77:07:c8:32:70:06:32:65:c1:a6:65:ca:bc:ca:
a6:9b:e6:07:24:bb:76:e6:36:cc:22:ee:0b:ed:70:7b:33:94:
49:4c:b6:4c:65:05:4d:2c:3c:82:25:1f:a6:ff:6e:0b:60:89:
ce:8e:a6:15:2e:63:68:83:2f:02:3a:6e:ce:ca:26:5b:2a:c7:
3c:bc:17:a2:6a:ec:45:34:34:bd:77:5f:eb:22:d6:9c:a8:c5:
8f:28:b7:8b:0d:02:f2:a1:e6:8f:3e:b1:e5:00:72:34:fa:04:
43:2f:e1:fb:a9:4d:8c:48:5b:dd:d1:2e:82:a9:0c:e3:6c:45:
04:6c:9a:a9:41:48:fc:b2:99:d6:6e:b7:35:29:c7:8f:22:b3:
8e:03:de:09:78:97:a7:05:de:83:0d:93:99:97:e5:ad:4c:a0:
0c:be:52:ce:62:a1:f0:f4:d5:3b:b8:5e:f0:3a:42:45:11:01:
20:d7:c4:ee:b5:b0:f8:14:54:d5:d1:8c:cd:24:50:d4:ae:f6:
54:e2:a5:1c:21:61:1e:15:92:1e:b9:24:a5:cc:62:26:87:98:
6f:5b:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:40 2025 by rpki-client