Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: Ek6K/Nn+qdXQChyvjcCBkNhVpd8P3ynMVQwjinv71Ik=
Subject key identifier: 7A:98:AB:72:23:44:C3:13:DC:D0:4D:22:42:CB:5B:5F:95:C9:1C:FC
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 0199FCC64B265B1E476A44BC3A9B97C5E957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: gYHqdYy1QsCbl1Wn+NlkEdJvgRwIplK8JUCpu6QKr80=)
2: UJadThgIY9kRl3yuOM0mvOp3eiw.roa (hash: NYhzFFlpnpad/HHC5kD2Bp7E8XgYHWJLlBn3GfXQ/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4b:26:5b:1e:47:6a:44:bc:3a:9b:97:c5:e9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=7a98ab722344c313dcd04d2242cb5b5f95c91cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:bb:97:f7:50:5c:db:dc:0b:18:b1:51:75:
bd:85:e9:ed:04:d3:86:89:03:27:a4:52:1b:57:e4:
c4:f9:3f:dc:74:69:05:fd:1b:d3:f2:f0:60:40:3a:
d2:ef:8f:c3:67:04:30:f0:75:f2:46:35:f9:16:77:
a3:06:8c:ed:d9:77:5b:61:ae:8e:fb:a7:14:8f:c7:
05:5c:62:6e:e4:b2:40:29:79:3c:b8:27:bb:f5:b2:
fc:7c:d6:5e:ff:cd:f0:07:5a:21:c0:77:bc:2b:ee:
d1:e5:40:55:ac:86:5c:4a:08:ab:7a:a3:eb:43:d7:
b3:6e:05:95:6d:22:47:28:17:71:a7:3a:fc:22:5f:
12:44:e5:3f:30:82:ce:19:35:d7:e6:b4:e5:18:28:
2c:b2:54:db:75:e4:e3:ea:57:f4:9f:52:6f:95:18:
c6:60:45:87:f1:b5:8d:18:89:12:02:67:62:af:7a:
53:b1:aa:95:9a:6d:38:9f:2a:71:de:13:ad:9d:ec:
0a:37:6e:8e:c5:fc:d7:b7:8f:62:c0:fa:5a:d7:24:
45:90:52:d6:bc:61:1b:97:51:10:51:4b:55:d2:85:
9b:ec:27:92:38:53:9a:2a:e0:ba:c7:d1:3b:91:ce:
e9:76:18:4f:67:94:10:ac:99:b3:dc:93:42:99:8d:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:AB:72:23:44:C3:13:DC:D0:4D:22:42:CB:5B:5F:95:C9:1C:FC
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:be:85:31:fe:88:23:fc:38:e0:b6:5b:4c:90:5b:e6:fb:
94:89:74:c3:8d:29:72:2c:53:86:99:1e:d6:a6:17:a0:22:b3:
b2:f9:cc:6b:25:b9:29:71:e9:6c:17:d3:d7:cd:c9:52:fb:50:
57:60:2f:41:a9:9e:31:97:a5:c4:30:f3:dd:a4:3c:43:e4:ed:
30:b5:bf:6e:b2:f2:04:2f:44:2c:6a:4b:01:76:06:55:9c:4f:
0c:83:e1:f4:9a:4c:c6:a8:9d:86:41:08:a1:22:15:c1:5f:cf:
4d:3b:60:59:91:eb:e0:b7:0e:99:db:0d:74:59:e7:1d:81:21:
df:db:e0:6b:d3:9f:b2:d0:eb:a1:d2:44:cb:21:bd:52:58:13:
64:7d:4e:9d:60:9f:95:93:4e:88:23:eb:b2:49:d6:52:6f:ce:
58:75:23:58:a3:51:c9:ec:bd:ed:0b:6b:19:60:9d:2b:e7:6c:
08:e5:bd:b5:3c:04:35:c6:cf:e6:87:d5:f9:fe:2a:80:ce:d4:
ee:17:71:cb:b6:36:ec:89:b7:ea:da:94:bb:8f:ba:53:86:da:
bc:f1:5b:8e:cf:b5:64:25:4d:66:dd:33:2f:19:6b:9c:21:72:
4f:38:2a:55:1d:e9:9c:73:fe:a9:99:47:b3:fd:12:33:9a:95:
ea:16:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:24 2025 by rpki-client