Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File: GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier: J/mVz4AAXlNgMhwAqZNcSe7sNuEJs8H4OxnmMNPhgEQ=
Subject key identifier: DA:DE:73:BB:9E:CC:3B:50:1C:71:93:67:75:55:3F:50:46:57:C4:B2
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer: /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial: 0199FF22F178915EFAB3F31024BEFC21C26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number: 03C9
Signing time: Mon 20 Oct 2025 01:01:44 +0000
Manifest this update: Mon 20 Oct 2025 01:01:44 +0000
Manifest next update: Tue 21 Oct 2025 01:01:44 +0000
Files and hashes: 1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: 5f/wCGEBKdhneJ3tYK7UV2e1V32KgiwpY8++9jV3ynI=)
2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:f1:78:91:5e:fa:b3:f3:10:24:be:fc:21:c2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Validity
Not Before: Oct 20 01:01:44 2025 GMT
Not After : Oct 21 01:01:44 2025 GMT
Subject: CN=dade73bb9ecc3b501c71936775553f504657c4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:8b:c3:73:7d:ba:9f:52:68:48:97:aa:b5:
27:9b:c0:5c:e3:85:ef:a9:e2:78:10:0a:e8:31:f0:
93:44:cd:98:db:5f:ef:f6:aa:27:fc:74:a9:20:76:
0d:ff:22:27:b6:0b:26:9b:00:96:f5:89:51:14:5e:
3d:a9:ce:02:c4:c1:da:04:3a:02:67:8e:9a:fc:6d:
36:ac:94:00:4a:f2:f4:e9:34:52:47:c1:bf:cd:96:
46:62:33:cc:2a:08:b7:bd:5f:ed:9e:53:a2:d5:19:
39:f2:f7:01:5f:c4:d1:2c:04:30:c9:9e:ee:b3:ca:
d6:aa:b2:4f:bd:36:90:42:79:6e:59:70:c9:95:0a:
ab:2b:37:2c:68:d1:46:cb:e6:e0:97:d7:05:b4:e1:
61:2e:cc:c2:08:e9:90:9d:5a:70:bf:6d:de:59:e9:
be:9d:09:d4:02:1f:de:28:25:31:4c:93:f2:0c:5c:
7b:39:ea:e1:53:60:6d:be:dc:68:eb:c2:f6:ac:1c:
b5:e2:0b:54:28:fe:7b:72:c6:e0:6a:4b:f0:9b:13:
2f:9c:0b:b8:90:15:0c:f4:cf:6c:29:f2:67:61:32:
1a:60:96:2b:e2:77:00:56:92:32:34:e4:01:f5:36:
8d:a0:59:d6:81:87:8d:9e:44:d0:bb:ac:d8:fa:d2:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DE:73:BB:9E:CC:3B:50:1C:71:93:67:75:55:3F:50:46:57:C4:B2
X509v3 Authority Key Identifier:
keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:56:1a:42:8c:fd:db:6c:89:62:41:ee:df:13:e7:47:5e:f1:
37:f8:b7:d2:41:49:d5:09:12:a3:e1:0d:5f:2f:9d:e6:97:84:
a6:16:ea:54:dc:14:e0:03:bb:81:e4:58:a2:d6:b5:c7:9a:14:
21:a6:cd:66:1d:02:f1:c8:24:ce:dd:71:4c:06:bf:7d:8b:fd:
df:fb:c6:1e:3f:99:a5:47:c4:5d:99:fa:b3:62:6e:4a:b0:fd:
e3:77:db:09:cd:c3:ca:d4:2b:c1:67:d2:70:63:7c:c5:73:d7:
ee:5a:b7:49:ac:0c:fb:d2:ba:60:aa:c1:59:ea:9e:98:d9:91:
df:0d:fd:ba:1a:cb:0d:ac:c3:8e:ee:91:44:77:69:74:67:cf:
8d:61:30:1a:98:54:42:f8:d2:e5:bb:8d:de:f5:63:22:e3:b3:
ce:0f:cb:d4:01:b5:9a:19:f6:8d:36:64:e3:5a:c1:5d:68:86:
12:96:28:19:58:20:42:7a:dd:b1:7d:96:7a:b4:36:ff:82:72:
95:a0:70:6c:8a:b6:d5:1d:e8:e9:42:46:57:3d:09:5c:56:b1:
8a:cf:05:45:b1:65:e2:2a:b6:b4:7a:c8:2e:fd:00:fe:14:cc:
15:f7:72:4c:a2:ed:33:e4:a1:a3:8b:06:27:ef:9f:2c:7b:6d:
25:36:91:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IvF4kV76s/MQJL78IcJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl
Yjg3OGQwHhcNMjUxMDIwMDEwMTQ0WhcNMjUxMDIxMDEwMTQ0WjAzMTEwLwYDVQQD
EyhkYWRlNzNiYjllY2MzYjUwMWM3MTkzNjc3NTU1M2Y1MDQ2NTdjNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY2Lw3N9up9SaEiXqrUnm8Bc44Xv
qeJ4EAroMfCTRM2Y21/v9qon/HSpIHYN/yIntgsmmwCW9YlRFF49qc4CxMHaBDoC
Z46a/G02rJQASvL06TRSR8G/zZZGYjPMKgi3vV/tnlOi1Rk58vcBX8TRLAQwyZ7u
s8rWqrJPvTaQQnluWXDJlQqrKzcsaNFGy+bgl9cFtOFhLszCCOmQnVpwv23eWem+
nQnUAh/eKCUxTJPyDFx7OerhU2Btvtxo68L2rBy14gtUKP57csbgakvwmxMvnAu4
kBUM9M9sKfJnYTIaYJYr4ncAVpIyNOQB9TaNoFnWgYeNnkTQu6zY+tLpJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrec7uezDtQHHGTZ3VVP1BGV8SyMB8GA1UdIwQY
MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt
YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4
LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1YaQoz9
22yJYkHu3xPnR17xN/i30kFJ1QkSo+ENXy+d5peEphbqVNwU4AO7geRYota1x5oU
IabNZh0C8cgkzt1xTAa/fYv93/vGHj+ZpUfEXZn6s2JuSrD943fbCc3DytQrwWfS
cGN8xXPX7lq3SawM+9K6YKrBWeqemNmR3w39uhrLDazDju6RRHdpdGfPjWEwGphU
QvjS5buN3vVjIuOzzg/L1AG1mhn2jTZk41rBXWiGEpYoGVggQnrdsX2WerQ2/4Jy
laBwbIq21R3o6UJGVz0JXFaxis8FRbFl4iq2tHrILv0A/hTMFfdyTKLtM+Sho4sG
J++fLHttJTaRcg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:23 2025 by rpki-client