Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: 9gYeqM6+6CuYh+zGJYBfvdv50Pmi7l8F5onlKX3YmLg=
Subject key identifier: 4B:94:81:5C:3C:1B:81:40:6A:DC:0D:9A:39:E6:D7:67:B2:97:D7:02
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 019A00356ED41D562FA26027C2887B3EAE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:33 +0000
Manifest this update: Mon 20 Oct 2025 06:01:33 +0000
Manifest next update: Tue 21 Oct 2025 06:01:33 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 9AQGI9k4KzKQZi/A5cUYwTEULelzkq/ASJkp+oA1uvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:6e:d4:1d:56:2f:a2:60:27:c2:88:7b:3e:ae:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Oct 20 06:01:33 2025 GMT
Not After : Oct 21 06:01:33 2025 GMT
Subject: CN=4b94815c3c1b81406adc0d9a39e6d767b297d702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:6d:d8:cf:57:83:42:a9:82:68:ed:a5:9d:
45:53:92:20:75:99:73:02:4e:55:ce:21:56:82:44:
15:c9:a9:f1:ef:67:4b:b9:ec:15:58:16:97:44:16:
0d:e9:35:98:6a:01:93:fc:41:b5:d7:a1:31:d3:2d:
6a:00:b0:f6:fa:57:13:e8:6b:0c:70:f5:bf:c4:db:
7c:6e:5e:2f:ad:06:a7:c7:fd:1e:2b:6d:33:98:2d:
41:ef:df:b4:71:be:35:44:f0:ab:82:31:ce:f3:21:
3f:00:7a:1d:5c:a7:85:46:36:df:fb:e8:b3:fa:39:
bc:73:64:78:d6:3e:09:3c:0a:bb:51:bf:16:50:6c:
fe:6b:a3:9c:de:83:5d:34:43:1a:4d:13:0c:23:5d:
9f:4e:2c:6e:a0:12:0e:4d:4f:e1:2f:a8:62:b2:a0:
42:9a:5f:0c:da:88:96:88:fb:e9:61:f8:91:84:9b:
46:d8:1d:b5:47:58:f1:13:1e:fe:72:ec:0e:4b:98:
65:98:1a:7d:64:8e:3f:5d:7e:c9:ef:ef:ce:b0:5e:
71:a4:6d:bc:92:4b:2b:3d:4b:ba:d8:18:28:80:46:
82:1c:26:76:34:c7:1a:f2:c0:61:5a:21:77:1e:80:
51:4d:c2:ee:5f:ce:42:ec:d6:d1:44:dc:99:d8:2f:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:81:5C:3C:1B:81:40:6A:DC:0D:9A:39:E6:D7:67:B2:97:D7:02
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:ba:49:a3:3c:e9:42:6c:f7:af:9d:64:fe:0b:f5:36:f7:
8e:2f:f0:72:c3:1d:1e:0f:12:46:7e:17:13:07:13:f7:59:50:
a5:e5:72:8c:3b:ad:41:cd:74:6f:3d:2e:2c:55:10:6b:bb:72:
54:4a:a1:76:74:34:69:43:30:26:cb:f1:79:2a:34:d6:12:82:
3d:0a:fa:52:ab:bf:b3:aa:fd:89:3e:3c:3f:cd:cd:06:b1:1c:
83:3e:d3:1e:1e:6b:ca:1a:88:6d:7a:17:53:81:2c:56:d2:69:
d5:22:50:e0:7b:00:ed:92:8b:57:ff:fb:f7:e9:10:cb:38:1a:
87:aa:80:a3:e1:65:87:0c:4b:04:80:25:16:6b:e3:80:7a:bc:
23:8b:58:1a:ca:80:15:da:e5:2e:db:9a:4c:09:f0:53:f5:8a:
cf:85:e3:09:b2:89:b2:ca:45:ec:6d:6c:f6:d5:4e:82:91:13:
de:85:63:db:f0:7e:c0:46:13:f8:63:66:58:cd:a2:82:47:4c:
e8:40:31:9f:e2:1d:e9:1d:cf:b9:25:14:06:25:02:5e:e2:7d:
c7:69:f0:1a:d0:d7:b1:ce:d5:8f:75:b1:f4:af:be:a0:c1:08:
6c:a6:ad:f3:73:38:ea:d5:fa:f9:9c:78:09:fb:22:ad:e4:a5:
ec:cd:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:37 2025 by rpki-client