Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: Od9KhCZDPy3SeATWdErH7R95HCl7hzMdVqyh/9+0N+c=
Subject key identifier: 23:3C:9F:BE:6D:3B:E6:C0:11:9E:6D:C2:C6:A0:3A:03:FE:48:D9:FD
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 0199FC585C94EA68E58F95B86D72E9493BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 09C9
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: 44mrCQMAIp1TIum6Vyp+5xNm34ybyGTpWrzGGddac7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5c:94:ea:68:e5:8f:95:b8:6d:72:e9:49:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=233c9fbe6d3be6c0119e6dc2c6a03a03fe48d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:0d:e1:e2:4c:0a:12:f2:71:9c:f0:1d:17:
3d:46:f3:e1:24:3f:2e:c3:b1:36:cf:b0:dd:51:f6:
35:2f:71:1b:9d:eb:bd:2b:84:f7:26:5d:66:cd:90:
b6:0d:11:f7:d6:65:96:19:7c:f3:ee:2c:d0:22:10:
ea:11:61:01:b2:63:de:5a:fb:da:66:ba:46:64:04:
7f:6f:7e:ab:80:eb:97:5f:c2:89:59:d3:9d:d0:f7:
05:d5:94:6d:28:60:1c:3c:4c:78:29:8a:8c:a1:be:
77:37:0f:da:a9:dd:71:5d:de:ca:9a:fe:1a:35:c3:
4d:a9:dd:26:fc:9b:66:6a:9b:4d:f6:d4:4c:b8:64:
ee:1a:fa:6c:1f:c6:5e:30:3b:52:7f:e6:b6:68:8f:
86:d2:65:c5:b3:43:c8:c2:2d:12:ac:ed:ba:9c:f4:
b8:ff:78:2f:a1:9f:10:f8:09:8b:a6:5c:c1:c0:51:
8a:68:20:50:f3:99:6c:31:78:af:d9:bc:2a:0f:ff:
b7:72:ae:d4:b6:67:79:55:39:d1:67:4a:89:92:cf:
1e:7a:52:81:9c:61:a9:f4:14:16:13:db:da:98:e0:
86:5a:d3:e4:fe:a0:c9:b1:de:3b:46:f0:1a:97:ee:
98:34:55:aa:d6:cc:81:44:6e:73:32:bd:3f:02:99:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3C:9F:BE:6D:3B:E6:C0:11:9E:6D:C2:C6:A0:3A:03:FE:48:D9:FD
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3e:8f:77:7a:00:ac:dc:65:6e:de:98:f6:4b:b2:ca:1d:e4:
d4:11:98:16:a9:72:63:cb:4a:b2:04:ed:e0:8d:63:a1:12:1e:
5d:72:ec:4e:18:9d:54:0c:0a:0e:6a:d8:70:37:d6:a8:8e:f1:
30:75:66:bd:78:c3:af:b0:6c:1e:b8:21:b9:78:4f:9a:11:3d:
bd:29:80:d2:77:ed:ef:3f:a6:f7:3e:cf:02:7b:b2:48:1b:8d:
49:b3:94:0b:aa:f8:ca:51:d2:68:ea:e3:67:45:d8:24:9f:73:
39:18:8e:71:06:de:58:c9:d3:ef:d2:ad:a3:be:c7:49:94:22:
ee:26:a9:64:5f:60:8d:b6:55:1c:0f:1c:87:87:0d:e2:b3:9e:
3a:ce:65:e5:98:29:d5:2c:5b:cf:7c:8b:c6:f7:f7:b0:a0:e4:
6f:0a:aa:b5:f4:4f:5d:7c:13:79:a2:40:15:2f:60:c1:7a:13:
4d:87:75:48:fd:64:90:60:19:11:84:da:98:56:38:a8:11:37:
83:62:a4:43:ec:52:79:44:99:4f:65:d3:e2:62:df:b8:d2:c3:
ff:7e:58:f4:5c:87:d2:7e:f2:e5:8e:5e:d7:da:9e:07:ca:14:
df:ab:26:9b:dc:ea:41:06:2c:ea:81:01:a1:ad:1d:67:14:08:
c1:b2:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:15 2025 by rpki-client