Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: ks8Hqy/RIQYNm2ppaVrYRf1qbTtGc3xpb1mk+0VKP+U=
Subject key identifier: 55:6A:77:71:02:3D:89:65:85:D1:8E:05:24:22:17:18:B3:73:9B:D2
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019A02C7868DEFDCED56B28EC80B99C73BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 15A9
Signing time: Mon 20 Oct 2025 18:00:21 +0000
Manifest this update: Mon 20 Oct 2025 18:00:21 +0000
Manifest next update: Tue 21 Oct 2025 18:00:21 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: Xa02Ltu395cGmh3ALEAkCbX6kSGf0oq9EdAqYLWYo/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:86:8d:ef:dc:ed:56:b2:8e:c8:0b:99:c7:3b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Oct 20 18:00:21 2025 GMT
Not After : Oct 21 18:00:21 2025 GMT
Subject: CN=556a7771023d896585d18e0524221718b3739bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:8d:30:57:42:76:02:6f:84:e1:d4:f9:a5:
c3:1f:a4:f9:de:3d:37:5a:3d:92:b3:6c:c3:43:e3:
c0:c6:0c:6b:c7:74:ee:99:31:54:ba:c5:35:d2:4e:
b6:fc:cd:0a:35:48:f4:5a:d7:c2:d0:eb:24:5d:b1:
0e:b5:d3:9e:57:13:68:1c:9e:9c:de:c2:6d:28:80:
0b:6c:15:a6:f3:13:2f:de:b6:0d:75:18:67:c7:73:
6b:03:9e:e6:a4:4c:07:6d:ca:cb:5e:da:72:5a:fc:
eb:ab:56:94:3c:20:b4:40:b4:e5:be:f2:ff:b3:9f:
b7:ca:e4:bb:ad:a9:7e:0a:d9:c4:64:54:79:86:fa:
0c:a7:49:da:3b:51:41:a8:32:93:89:81:d1:8b:a1:
54:d8:18:25:b6:55:6b:28:cd:0e:12:ad:e0:60:10:
02:ab:5c:5f:79:95:8e:02:47:a4:0a:1b:56:0c:c3:
29:e0:6e:07:c2:d8:07:73:fa:56:ee:58:36:69:36:
bd:85:6e:e5:85:3f:01:1a:05:48:5f:b8:67:46:20:
1c:94:67:69:8c:f2:6c:5c:4a:f9:15:fb:7c:ee:cc:
7f:5a:31:aa:c2:86:47:20:ea:82:9d:a7:d6:f2:a3:
d7:dd:d5:2e:1e:3c:55:0a:24:32:80:9d:74:1c:c9:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:77:71:02:3D:89:65:85:D1:8E:05:24:22:17:18:B3:73:9B:D2
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e9:82:db:0c:7d:00:03:13:c7:2f:46:b0:dd:50:cb:c2:9c:
b2:eb:df:08:9e:9c:6c:be:c2:61:2f:72:6c:4a:e1:26:d1:84:
f2:c7:19:9d:8d:11:49:56:67:07:f7:0b:0d:56:32:bd:77:46:
e7:01:e5:f1:ae:05:d1:42:e9:a8:ed:c7:41:cc:6f:ea:6e:e0:
f7:9e:13:df:8f:5a:c2:23:41:fd:8f:a2:2b:3f:05:dd:dd:ea:
a9:1c:25:7b:15:b6:50:9c:2e:c6:f3:58:13:8b:ce:78:52:c3:
47:52:2b:32:0a:fe:8d:8b:b3:86:c0:c7:4a:41:6b:36:84:ce:
52:e6:91:e7:22:40:3a:33:16:86:f5:5e:19:75:7a:70:e7:20:
ac:5c:15:60:1e:40:0c:4e:f0:f4:6f:74:53:03:d8:ad:7b:58:
a8:e6:6c:7d:0b:40:dc:f9:2e:8b:68:61:29:60:02:12:c5:d1:
76:0e:fe:28:32:85:a8:fb:0e:d4:3c:05:2c:63:b4:0c:61:c5:
b0:23:f7:1c:80:f3:70:82:72:b6:c5:68:34:b1:9f:4f:8b:90:
8d:f7:47:c2:4a:0b:cc:8a:da:5d:3a:29:ec:70:21:9e:7e:6e:
a6:82:9f:6c:f4:e2:34:b8:0e:d5:a6:e3:19:38:7d:08:21:66:
a1:b4:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:25 2025 by rpki-client