Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft (raw, json)
Hash identifier: A4KIqyQV+SN0Bg67yIV6XkZkYvMo8V6eBu+PhPvKF5s=
Subject key identifier: 6F:DA:E4:63:02:2A:68:DC:F2:D1:84:D5:10:D0:EB:E8:A7:BC:F6:5F
Authority key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Certificate issuer: /CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Certificate serial: 019A01481AA1296D3EF63BA342D99E8D6CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 11:01:33 +0000
Manifest this update: Mon 20 Oct 2025 11:01:33 +0000
Manifest next update: Tue 21 Oct 2025 11:01:33 +0000
Files and hashes: 1: BX1QEArFlodqmaLywnr1dRzJ5Uc.roa (hash: kKzlkpnYRDUEMTdKdAcgkbHriGGxFSkfVVWtck+oICw=)
2: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl (hash: qNbit4min3o0h/ZbtgWpwpQCcFO+tBI/WlJFkvEPoAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:1a:a1:29:6d:3e:f6:3b:a3:42:d9:9e:8d:6c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Validity
Not Before: Oct 20 11:01:33 2025 GMT
Not After : Oct 21 11:01:33 2025 GMT
Subject: CN=6fdae463022a68dcf2d184d510d0ebe8a7bcf65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:88:5f:96:cf:78:3c:ff:4f:51:12:d6:1c:
cc:d4:7c:c8:0a:d0:32:ec:fe:5c:48:60:41:40:db:
3a:da:cc:d5:2a:4f:30:c4:d6:6d:dd:ed:18:f2:d0:
5b:eb:41:f4:1c:f7:59:ad:8b:ee:34:c7:3c:8a:f5:
e7:ae:b3:60:c2:a0:b3:2c:31:da:3a:49:ec:e9:af:
18:b4:9d:3e:d9:28:71:b1:70:36:ff:2d:1b:d8:dc:
f7:0e:c5:a1:31:0b:af:a3:c9:5d:b6:b1:a8:5a:9c:
b1:38:f3:25:b2:51:86:c9:d4:e8:df:ec:09:a6:4d:
82:3a:45:21:20:50:8c:7d:5d:7d:f2:0f:4a:a2:0b:
36:88:2a:be:0a:67:f9:0a:77:74:a0:3a:06:a3:95:
35:24:01:5b:89:86:94:33:05:5c:a7:2b:f2:64:69:
de:6d:ae:05:27:58:b4:38:7e:85:96:4d:01:f6:26:
7c:b3:7a:7a:be:b9:d4:8a:fb:87:e3:94:2f:f0:03:
21:66:13:09:28:2e:8d:51:96:cb:26:aa:08:3d:8e:
b2:18:8d:79:d6:24:cc:e6:4f:8a:32:63:ca:a2:e7:
e3:7b:cf:89:07:e3:b3:3d:17:93:a9:9b:45:ea:2d:
6b:25:3f:8d:34:da:2b:ba:fc:7a:28:03:c1:4c:90:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DA:E4:63:02:2A:68:DC:F2:D1:84:D5:10:D0:EB:E8:A7:BC:F6:5F
X509v3 Authority Key Identifier:
keyid:82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:12:f5:ce:53:70:ec:7e:30:42:b5:fc:78:8d:9d:82:c0:6f:
dd:13:10:fc:d5:e7:c9:63:fb:68:8c:c4:51:c8:9e:5f:40:0e:
25:06:76:4f:09:4d:a3:b4:79:18:aa:9d:ec:8d:47:30:8a:ba:
03:0f:b7:3d:52:f9:d3:88:f0:69:9b:70:95:f2:c1:f7:fb:0b:
d0:08:cb:60:3e:a8:95:e0:53:0c:19:2a:18:14:db:23:e2:ea:
c3:e4:79:d4:4c:d7:2a:e3:b5:ed:29:7e:6c:97:99:3c:b9:87:
c6:63:ba:33:30:cd:0f:aa:7e:7b:f3:34:d1:4c:b9:36:b0:12:
2c:a1:56:f7:22:86:37:a8:b1:cd:98:90:75:6b:b0:21:42:6d:
10:ab:ac:c5:e1:5c:09:08:9e:9a:4a:3b:6f:03:29:0e:6e:d8:
31:f1:d5:34:99:a1:3d:46:73:f5:8b:48:70:f5:09:6d:8c:9f:
39:b0:e8:a7:51:f5:ac:3f:01:f1:85:64:f3:d2:09:c2:a8:80:
84:5a:67:32:66:c2:c8:98:49:1f:1f:ec:ef:b1:eb:9b:59:68:
b4:cc:26:8a:25:b1:8c:4d:9a:09:b3:d3:3f:6c:d7:f6:5b:67:
cb:9a:1a:11:19:4a:2f:ab:ce:de:39:94:13:6f:f6:d2:af:79:
c8:72:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:08 2025 by rpki-client