Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: aovwnv/RyjFaGgUis8ZsGqPRy9fD81PwsIKMeDD+PgE=
Subject key identifier: 10:8C:10:92:5E:FA:1F:3A:6A:45:D8:60:EB:96:0F:0A:F7:B8:4C:24
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 0199FBEB276BA0D3AD7747AE1C473AFE1AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0F77
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: PACryA46hqm9PcgYH5PsfoeUT8M4WwaosTOoPBHoC/c=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:27:6b:a0:d3:ad:77:47:ae:1c:47:3a:fe:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=108c10925efa1f3a6a45d860eb960f0af7b84c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:03:1b:dc:e6:5a:5d:03:a1:5f:24:96:5a:
d8:20:73:87:83:fe:cc:d4:96:4c:e1:65:84:fd:cc:
c0:86:88:78:7d:a4:72:46:ce:a0:1b:ee:d4:93:8c:
dc:75:39:c9:86:6b:08:e0:3a:43:91:d1:54:42:18:
05:68:34:d2:2b:51:3e:71:cb:e1:8e:f0:1d:e9:cd:
fc:ce:b4:63:ab:4c:a1:96:68:bb:0e:9c:9b:c9:df:
11:3b:ac:8b:e0:9f:3b:a1:cc:3b:d3:7a:fe:34:90:
44:ab:e8:81:6a:cf:0b:6b:c7:39:7c:c3:3a:fd:33:
5f:0a:47:e5:66:3b:bf:aa:c2:cb:63:5f:43:59:b7:
ec:51:d2:f6:16:88:43:9e:7c:c8:d8:24:1d:4d:a1:
41:74:a5:7a:c8:c5:ee:59:77:bd:c3:16:c5:49:05:
31:4a:e2:76:55:3b:86:06:a8:c1:34:e1:f7:0b:a0:
91:2e:72:70:ee:64:15:fd:67:44:8f:b9:38:1e:cf:
f0:58:b0:e1:8d:b2:cf:7b:a4:66:bf:30:8e:41:97:
e8:c6:8a:b2:02:ba:b2:b1:26:2d:85:64:3f:9a:74:
8d:96:9f:74:66:25:bf:6b:01:4f:40:dc:8e:e6:b7:
60:be:32:e0:b1:90:94:90:f4:65:5f:5b:44:c8:b1:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:10:92:5E:FA:1F:3A:6A:45:D8:60:EB:96:0F:0A:F7:B8:4C:24
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ba:48:88:61:eb:38:08:3f:68:51:75:78:5a:2d:78:f0:54:
9c:72:d8:b7:96:9d:9d:2f:72:c7:a7:65:ce:11:8e:bc:83:9b:
bf:ac:18:97:96:46:d8:5f:0d:f0:80:83:67:ea:1d:28:a5:fc:
96:a5:f5:c2:22:d2:98:37:fa:96:a9:af:95:58:5e:a9:75:35:
f5:ae:5d:2c:2d:5c:6e:6a:51:ad:0a:9e:b4:c4:54:2d:9b:db:
6c:f5:61:96:1b:6b:54:2a:d8:9f:40:50:ae:f8:3d:f2:92:25:
04:df:c0:c5:3c:0f:db:2e:45:b6:2b:31:92:db:19:16:18:e8:
26:6d:90:a0:85:ca:fd:49:a2:84:2b:fa:9c:2e:f7:2e:7e:5b:
74:63:10:8d:86:ac:97:5f:42:53:be:ae:c2:dd:9c:a4:b6:93:
f3:6f:89:78:09:85:82:69:ae:39:e5:0a:05:14:a4:d9:8f:e3:
67:70:48:7e:25:67:7a:f4:29:0b:7f:9f:b7:04:26:f6:47:fe:
67:07:22:4d:8e:4b:37:fd:fc:6e:cf:14:d9:5b:a1:ae:5a:6a:
68:d1:b3:a5:8b:56:2d:6f:4d:a3:97:9f:93:eb:f1:5d:15:bb:
04:21:b0:35:cd:ad:17:72:6e:aa:28:da:a5:c8:98:6e:e8:86:
f9:21:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:39 2025 by rpki-client