Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: Miv/8aatoQMKCqFbwF9qdKjkH51ReY9FZ9IhnZ0Oi2c=
Subject key identifier: C9:9F:97:2B:D5:1C:47:68:3C:E0:BA:F6:9F:04:A1:8C:22:9B:E2:ED
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 0199FC58C6A81CCEA89F28D2618D8FD34555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 15D1
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: NqGIJxjZH7CrB1oO4xXlKxQ6XFStUyA0Qh9dizo49cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c6:a8:1c:ce:a8:9f:28:d2:61:8d:8f:d3:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=c99f972bd51c47683ce0baf69f04a18c229be2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:3c:b6:16:63:28:ab:64:b0:75:6e:40:3c:
a5:32:07:73:1d:07:82:4c:b7:a6:ef:8f:92:f2:a8:
93:33:e1:22:1a:0f:e0:5f:04:8d:b0:56:ea:40:4f:
14:b3:b5:1e:cd:48:14:05:c2:f8:5a:70:34:76:11:
ae:ad:52:5b:48:06:cd:28:39:bb:97:47:b1:c9:22:
5e:14:56:81:ba:fe:dc:84:6c:46:11:18:0b:c7:ea:
92:ea:63:61:d6:15:4c:4b:7d:ab:28:d2:93:1b:2f:
14:fa:9a:61:e1:32:ef:d7:7b:78:1c:23:3a:f7:14:
66:ec:f6:9b:cf:76:a5:51:4a:e0:8d:c5:90:75:9b:
1a:69:b5:d6:9b:60:a8:46:71:1e:9b:67:44:04:91:
e7:f2:b8:f2:d4:50:3e:94:22:ea:87:6b:f0:bc:53:
f2:4f:61:28:69:6b:f2:7e:46:4d:1c:cc:24:23:1a:
c7:09:a1:a8:74:bb:98:31:51:e2:91:79:42:33:46:
a6:a7:67:67:91:26:50:94:91:31:f8:d7:ce:78:95:
3f:49:cc:27:5c:46:d4:bd:e0:1d:8c:4f:f8:c3:af:
75:f8:0d:85:b8:c4:38:bc:1c:b1:10:fa:c6:64:30:
87:96:9b:18:74:dc:d1:52:05:b9:04:a2:69:b4:63:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:97:2B:D5:1C:47:68:3C:E0:BA:F6:9F:04:A1:8C:22:9B:E2:ED
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:48:39:ae:40:40:5f:94:0c:40:3c:68:bd:bb:6c:32:39:50:
22:67:f8:7b:3c:ba:45:cc:36:c6:b2:ce:ad:6a:4e:d5:6e:1d:
3a:94:1a:ea:3e:9e:f7:63:16:ab:da:b4:95:a3:66:fe:9e:56:
ed:0a:73:da:04:ae:62:ed:ad:ee:f7:a8:17:de:51:bf:47:4a:
85:ee:45:c2:a6:5f:ac:be:6a:f2:6a:d0:a3:d2:fc:d0:0f:fa:
c4:a0:c6:33:dd:eb:01:9e:c0:59:dc:f1:f4:1a:37:45:93:e3:
12:e6:b6:da:6b:d5:70:8f:25:0b:8e:8e:6e:55:41:68:ca:be:
fe:4a:6d:67:a2:56:04:f5:a1:db:db:b4:53:9e:c0:10:82:22:
ef:02:3d:09:1d:80:33:6e:ff:14:06:2e:5a:ed:94:b6:ec:2d:
19:8c:f3:e6:b8:bf:1f:d7:6c:a8:5d:1a:79:45:8a:6c:a5:2e:
1f:18:34:77:7c:d0:73:df:c6:22:42:b4:af:56:54:36:86:64:
81:21:f0:7d:07:a2:b9:a4:4d:00:fc:77:17:13:b9:c1:b0:50:
f5:24:89:aa:e6:3a:8e:78:17:44:e9:26:74:3b:5b:95:e8:ec:
75:57:f9:fe:27:c1:35:6d:b0:bd:9d:e0:c1:af:7b:41:62:64:
5e:f7:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:36 2025 by rpki-client