Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: uglLuxwkyKicoaM1D2/57pxcjKtHzHGIxiIflcfVLhU=
Subject key identifier: 53:9F:DD:4A:C4:E3:3F:FE:CA:BB:FD:E2:66:A9:74:DA:52:E2:83:2A
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 0199FDDA49BDEBFD52C0BF1FE7672029EB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:02:45 +0000
Manifest this update: Sun 19 Oct 2025 19:02:45 +0000
Manifest next update: Mon 20 Oct 2025 19:02:45 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: Cz1or8mJnsZYAYw0jOg7wjyDv20Yqlv9UsvmaW+u/vs=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:49:bd:eb:fd:52:c0:bf:1f:e7:67:20:29:eb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Oct 19 19:02:45 2025 GMT
Not After : Oct 20 19:02:45 2025 GMT
Subject: CN=539fdd4ac4e33ffecabbfde266a974da52e2832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:e5:10:53:9c:54:7c:ce:e6:5d:58:f4:ec:
5f:8b:f8:ae:f8:e2:0c:e3:f8:e6:1b:e6:28:6a:50:
9f:87:5c:b5:58:b5:05:bc:13:d8:47:6c:d5:87:50:
83:c2:ad:da:f8:60:3b:fc:4c:06:b4:fe:ff:c6:7a:
e4:c9:5e:f0:8d:06:95:2d:14:d7:e0:2d:9a:dc:c6:
c9:5f:4e:d2:c8:6c:58:ea:fa:10:48:da:d9:1f:3f:
2f:4c:60:1a:bd:b5:03:69:d1:e2:53:56:d4:d1:0d:
e8:27:7b:55:39:44:e7:65:90:c5:8d:9d:7d:84:f9:
03:22:c4:b9:51:1d:0e:56:b5:4c:82:84:7d:96:78:
83:c9:93:8b:1c:05:f9:ad:76:bc:85:a3:de:23:16:
a5:f5:40:fa:bf:a9:72:ed:dc:38:f9:01:3d:fa:53:
69:a5:b2:2d:1b:06:46:ee:6e:ba:57:3d:0b:88:57:
ff:d2:57:03:37:7e:a6:6e:e2:df:a8:20:89:15:33:
7b:7f:60:44:53:80:22:07:d5:e4:9e:d1:f7:25:a1:
50:3d:39:e2:a5:e8:89:08:f9:a7:55:e4:e8:c2:c4:
8e:47:55:9f:3c:26:e6:03:a1:c0:80:c3:b9:22:cd:
81:b0:f1:da:6e:0d:29:b6:ef:f1:cb:9f:88:62:b2:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:DD:4A:C4:E3:3F:FE:CA:BB:FD:E2:66:A9:74:DA:52:E2:83:2A
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0e:fb:9c:3f:c0:10:8a:b8:dc:27:8f:34:06:ba:99:94:db:
94:31:9c:f6:53:bb:92:9f:ae:3c:45:41:c7:52:c0:78:87:3f:
49:81:cf:76:a0:04:a1:1a:e4:7d:bd:84:f7:bb:c5:b3:7e:b1:
b7:52:a3:be:2d:72:4a:e4:93:02:57:79:61:04:2b:58:44:9a:
d3:39:b3:d3:a1:78:b7:20:d5:85:e4:b0:4e:95:5f:13:db:ec:
b8:3f:8f:d4:f5:35:29:80:85:89:e3:aa:40:cb:79:08:fa:19:
82:21:d1:40:04:97:50:79:54:60:cf:63:fc:15:12:e9:8e:06:
8e:5a:88:26:f9:be:4f:fa:16:fe:52:42:59:7d:1d:aa:12:4b:
db:61:54:bb:8e:36:9f:06:b6:03:1f:45:c6:34:ee:78:55:0c:
8a:f7:e1:11:29:bb:55:dd:dd:cb:00:bd:3f:08:d2:5c:dc:48:
6a:bb:2d:cd:bc:e8:d5:6b:67:a1:79:4e:e3:9f:39:1b:d6:2a:
e6:03:f6:b8:9b:73:68:97:46:86:17:ea:c0:d1:10:2d:46:df:
4f:33:c8:08:f7:93:b8:27:1f:24:93:f8:f5:74:d6:ad:2a:6a:
3e:ed:29:93:75:a7:9b:2d:78:2e:f6:0f:1d:6f:6f:52:45:9a:
68:85:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:55 2025 by rpki-client