Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: hP+SIVONT8ggDvLIeNUpRtD5MoCSXmEiS50c44j4dqk=
Subject key identifier: 92:A9:54:A9:28:63:E2:7B:B4:20:08:1B:5F:97:69:C7:15:BF:BA:EA
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 0199FBEBAED0C710B5E335953AB843F0FCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:30 +0000
Manifest this update: Sun 19 Oct 2025 10:02:30 +0000
Manifest next update: Mon 20 Oct 2025 10:02:30 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: pL6zjRy5eup7CUBuGYklevPRCu+AoGBpZ8hVWfz78KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ae:d0:c7:10:b5:e3:35:95:3a:b8:43:f0:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Oct 19 10:02:30 2025 GMT
Not After : Oct 20 10:02:30 2025 GMT
Subject: CN=92a954a92863e27bb420081b5f9769c715bfbaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:6f:52:24:2e:89:53:69:d5:b1:9f:36:0b:
fb:48:93:5c:34:17:18:0c:a0:22:02:80:fa:46:fa:
23:27:7c:90:67:de:ed:88:17:df:37:7b:fc:0d:03:
34:a6:b8:6c:bc:dc:44:fd:bb:ab:14:d9:8b:2b:22:
00:e6:1c:a7:53:20:57:11:bc:73:ba:93:ba:a7:5d:
18:f3:7b:b5:dc:e8:12:94:bb:33:0d:45:60:63:6d:
bb:81:0d:20:86:23:ef:33:65:6b:65:67:62:c1:1c:
d9:aa:df:cf:f1:7e:f0:fd:98:77:0e:3b:e8:29:02:
1e:af:b9:36:5e:b8:12:48:31:ab:a6:4f:d4:75:c0:
7d:ec:30:8e:a8:9f:23:7b:e3:53:4d:a6:8a:94:e6:
69:d5:a1:67:ce:0a:7c:45:e3:6b:c5:c6:82:5f:98:
25:25:95:9d:30:65:72:c7:a8:89:c8:e9:0a:f7:d1:
4c:0d:a4:10:b6:cb:ee:9c:df:cd:7f:6e:5a:ed:9b:
c5:2e:cb:ec:ed:90:50:c1:12:1e:fa:55:30:be:99:
32:66:b6:93:ad:b4:42:b0:65:0a:e4:c3:10:a2:c7:
05:5d:25:c4:9a:66:de:3c:10:16:59:e5:10:0c:86:
ff:c9:11:2c:45:5e:5b:a5:1c:1a:a3:fe:88:77:b5:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:54:A9:28:63:E2:7B:B4:20:08:1B:5F:97:69:C7:15:BF:BA:EA
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:55:da:28:14:00:60:a7:ba:05:94:61:ba:4a:e2:60:0f:
45:b2:fe:51:f0:d3:e8:89:fa:01:0a:79:9f:86:46:b9:72:ee:
02:18:94:25:18:f5:9b:82:e5:de:0f:4a:6f:ce:ce:04:89:eb:
55:50:cd:ba:fc:d8:c9:6a:33:e3:fd:b2:49:05:6b:a3:18:d2:
a5:ec:97:ae:02:c8:62:dc:2c:32:0b:27:3a:ab:9e:1e:01:95:
ea:a8:c6:1f:ea:39:a5:15:72:ea:71:d7:5a:6a:45:0b:73:d8:
a3:c4:bb:53:03:83:08:e4:f2:da:b8:cb:34:ab:ef:dd:cd:6a:
20:61:ac:c0:98:aa:f7:6d:46:94:7d:49:3f:1e:f3:7e:1b:bd:
39:6d:3a:e5:a2:44:3d:7c:b8:b9:5c:26:70:f4:9d:b3:58:f3:
e2:99:c8:3b:52:26:e4:44:81:e0:36:7d:fa:8f:1f:d4:ff:f0:
42:0b:4c:bc:c9:d0:26:4d:3a:18:5b:b3:65:48:f0:13:09:89:
5b:71:bd:5d:1a:2d:3a:ed:05:67:d8:e0:82:09:0c:05:49:c7:
1f:56:2f:1c:fb:6c:72:80:10:41:fe:9e:41:71:f8:93:03:dc:
a3:1d:94:ca:23:72:d8:f7:4a:02:a3:34:d7:9f:27:6c:50:c8:
c8:0f:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:44 2025 by rpki-client