Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: 9x+v++52ruvTYze4XY1JwFMMYXzZovR7a7FpdJ0541E=
Subject key identifier: 47:9F:3C:B4:89:92:EF:EC:FC:E0:A7:70:0C:46:F9:FD:5D:8E:22:59
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 0199FBEA8D4BD012000681095A6BD25F32F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: 6qI1gpUM+5qpxn/NfNNtP/nilX/w19+baWrAt3ak4+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8d:4b:d0:12:00:06:81:09:5a:6b:d2:5f:32:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=479f3cb48992efecfce0a7700c46f9fd5d8e2259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:c0:bd:01:0a:6b:84:86:2e:30:6f:52:7b:
48:38:6c:88:a9:76:30:d1:8d:07:46:77:86:14:e3:
ae:61:69:f8:56:1a:72:23:5b:6a:46:e1:cd:42:71:
ef:3c:a8:a2:50:52:53:94:ea:9e:2c:c1:73:c8:72:
b7:a2:f1:f2:00:13:3c:46:c4:b1:c6:8b:62:38:35:
b4:b5:a3:5a:21:32:6e:39:35:a9:44:f0:31:9d:d3:
37:c3:da:1d:33:19:b5:48:26:5c:28:55:44:ed:ff:
2f:20:f8:39:fb:e6:2a:f7:37:3e:0d:6a:86:40:8c:
6d:e4:5c:9a:d5:20:58:2f:c7:6b:b7:8e:ca:98:e6:
91:20:4f:37:6f:43:2b:69:14:36:26:54:7e:d3:58:
ab:28:76:e7:2e:6a:fe:cf:f7:35:88:26:04:fb:b1:
23:66:ce:b1:75:21:49:1b:b0:fc:4a:af:69:ff:41:
5a:d8:3c:90:58:b4:36:9e:0d:06:e6:71:f8:6d:69:
d9:44:e9:3f:25:c0:35:c1:24:c7:83:9c:94:c8:9d:
87:66:12:07:c4:64:9f:38:08:08:2c:51:71:12:25:
7e:fc:3b:64:ca:25:b7:9b:bd:7e:82:c5:cf:e1:e2:
6d:07:82:e5:56:a0:ab:73:66:f1:b5:ed:9d:e2:5c:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:3C:B4:89:92:EF:EC:FC:E0:A7:70:0C:46:F9:FD:5D:8E:22:59
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fb:28:48:61:67:02:fc:a0:7a:bf:49:0d:84:2b:39:2e:ea:
42:5b:09:c5:0a:a3:b6:87:a8:16:f5:52:2d:24:06:99:02:04:
b3:69:d5:4f:28:6d:b9:59:cf:ae:af:c1:e8:6f:c6:28:6f:1d:
5e:70:b4:d4:b9:92:de:c0:3e:7e:2d:dd:eb:01:ba:5a:82:ac:
cf:84:c8:2c:17:54:40:ff:7b:5e:e9:17:61:17:9a:36:81:d9:
3a:d0:91:1a:27:a5:47:d2:e1:f9:60:43:34:25:88:a1:68:a2:
f3:ac:25:48:ef:8f:0b:e8:de:8b:f1:14:ec:bf:5a:9f:6f:c2:
3c:69:6f:a4:14:d2:aa:e0:a9:ff:ad:e9:21:5e:71:84:ae:60:
3d:04:26:ce:a8:f5:d4:b9:64:a7:82:1f:21:62:e3:24:89:11:
dd:ad:c8:1a:09:35:9e:46:3c:51:35:8a:0b:5f:43:ba:f6:a8:
23:e3:ac:9b:e8:71:89:53:59:e8:d5:be:49:c9:ec:9b:14:f1:
89:fc:68:a1:1a:e5:e6:9d:df:09:e2:9f:d0:ca:30:6b:eb:ab:
3b:b3:a9:c7:75:4b:82:b4:c6:77:be:99:eb:31:c4:ee:36:65:
1d:73:4d:6c:43:66:9b:37:03:68:5f:80:ef:cc:2b:77:a2:15:
8e:1d:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:58 2025 by rpki-client