Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: OUwQHbBPn1UuAVKBEyLqW7BqDRggV+UyBtMmO7G9aKw=
Subject key identifier: D0:44:F8:9C:B9:84:1D:E1:15:1E:7B:33:BC:AC:3F:A2:97:D1:4D:94
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 0199FB458BCFBC52B07D53EF41FCE2B138F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 07:01:02 +0000
Manifest this update: Sun 19 Oct 2025 07:01:02 +0000
Manifest next update: Mon 20 Oct 2025 07:01:02 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: x5C+rSQ6zlHhMEsgIHgoU0KkR9fojLiU29sJk5f15ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8b:cf:bc:52:b0:7d:53:ef:41:fc:e2:b1:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Oct 19 07:01:02 2025 GMT
Not After : Oct 20 07:01:02 2025 GMT
Subject: CN=d044f89cb9841de1151e7b33bcac3fa297d14d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:74:23:da:e9:3e:5a:d0:14:5b:04:7d:19:
80:c1:a2:26:f6:83:af:b7:4a:7e:74:3d:03:85:6c:
73:5a:a3:a3:0b:23:84:49:b5:fe:43:f0:50:12:bf:
74:6e:6d:bd:31:78:af:50:39:bd:7a:8e:f5:58:e4:
e4:3a:a2:61:8b:16:c8:4b:7d:e4:a1:fe:69:c1:53:
39:2a:41:54:f5:3d:10:bd:1b:7f:2b:23:e2:fc:e9:
84:81:97:93:e2:33:ef:e0:46:2c:f5:70:7a:8d:2e:
ce:62:b1:25:1f:e1:7d:6e:9f:60:3f:e0:2d:46:12:
9e:cc:57:0e:3b:82:68:16:dc:fb:01:bc:94:e5:2b:
9f:3a:de:63:be:bd:97:70:56:d1:8b:fc:26:ff:0f:
11:81:63:b3:03:b1:dc:19:cc:69:08:76:24:cd:ac:
30:57:7b:3e:63:f1:9b:e5:21:1b:6b:75:b9:d6:64:
56:c8:f1:cb:24:c3:50:16:a4:78:58:b3:0b:00:13:
50:fe:e0:b9:23:25:c6:5c:19:c4:5b:77:17:ff:34:
61:70:72:a8:18:bc:18:32:c7:3f:bf:41:89:51:9d:
58:68:62:b7:2e:b3:9a:c3:93:b3:f0:15:7f:8e:13:
17:9d:ab:02:8c:68:ca:49:76:20:5f:5f:6b:cc:71:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:F8:9C:B9:84:1D:E1:15:1E:7B:33:BC:AC:3F:A2:97:D1:4D:94
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d3:33:ab:ff:05:8b:7a:60:28:a6:c0:30:5e:20:2a:1e:f9:
0a:46:cf:8b:d4:d4:01:25:fe:7d:99:9b:3d:24:aa:a2:06:ea:
9f:e1:40:4d:01:0d:d2:2b:b9:3d:a6:72:5c:0f:59:03:64:29:
ca:8a:17:a1:86:fc:d2:5c:0f:5b:48:30:d3:2d:26:cf:3b:d2:
d6:10:c5:c7:dd:ff:23:6c:0a:e7:b1:8f:a6:ae:98:c9:52:b5:
e5:91:65:d1:c5:d0:24:74:a4:f7:5c:7b:0e:51:17:c6:d4:ce:
0b:d2:d9:db:1f:b6:1f:fd:ab:0e:fd:b7:67:6c:e3:b2:e9:9f:
58:e2:e2:54:ea:d6:fc:cb:d2:6d:a1:f7:b6:81:f1:61:29:8f:
03:dd:70:9b:b8:6f:3f:e2:a1:78:94:22:0f:e7:c8:ca:ac:22:
57:9f:8e:a9:23:be:28:1c:c3:a2:09:4e:21:c1:2a:e9:c7:54:
39:59:71:6c:c3:9d:81:db:ea:5c:ad:78:2e:57:8a:8b:ca:4f:
d2:a8:f0:63:1b:8d:fe:17:3f:2e:bd:93:56:4e:98:23:27:e9:
d1:82:bb:b9:aa:de:bc:e1:f6:2b:0a:50:4a:d1:0c:7a:2c:ab:
fb:19:23:54:e3:61:ba:0c:29:d5:bf:38:03:8d:9a:2f:32:61:
64:ec:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:16 2025 by rpki-client