Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: NQsc0dnGBe9/1wi+8TMdV2IttwLzF0cqqtKW+9wSfvg=
Subject key identifier: 1C:35:BD:EC:7B:70:6A:21:19:B5:49:F2:E9:D6:C6:FE:76:54:00:F2
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 0199FC586CB8C8C12DCDA9199E4957D67154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 0AE3
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: dgWbSI8LmG3EBa5Aqi3NGhWacFdkn4g5+GD/THyYY88=)
2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6c:b8:c8:c1:2d:cd:a9:19:9e:49:57:d6:71:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=1c35bdec7b706a2119b549f2e9d6c6fe765400f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:9b:55:cd:db:ee:e3:58:d9:cb:ee:4f:61:
44:0d:76:f0:84:43:e1:55:2d:65:e4:23:d9:c2:ff:
69:72:b7:9c:c6:78:30:ad:03:a9:ad:fa:8f:aa:d1:
2b:6e:68:7d:84:81:99:57:32:8c:3f:06:c8:67:44:
62:11:1f:03:dd:04:b1:6b:78:7c:df:4e:03:7d:71:
5b:71:b8:18:64:42:d3:ca:3f:8f:11:33:d4:dc:1d:
01:2d:71:6e:42:12:eb:5b:2b:6c:70:fa:20:e2:b0:
72:08:9d:45:70:6e:6b:82:98:43:c4:be:c4:83:a3:
97:8a:23:aa:12:61:da:f9:78:96:d8:e9:7c:9f:f4:
59:f5:10:d5:a9:5b:31:95:08:d8:ac:2e:97:31:e6:
8a:cb:78:20:32:20:a4:c4:3b:93:3c:99:e7:a3:23:
23:9a:c4:69:79:21:a7:4a:a5:5d:c6:6a:98:6e:68:
5d:8c:49:b2:33:24:a0:a8:df:0e:46:5e:a2:5d:32:
0e:14:7a:0b:8d:79:22:65:f5:6c:82:09:bd:3c:2e:
5a:0e:c1:95:e0:be:54:6c:84:ae:19:5d:00:1e:f3:
8e:28:de:b5:b2:b8:ef:ef:d1:7d:a2:6e:ac:f1:3f:
e6:9d:3d:e1:35:f8:20:1e:92:67:4e:e9:48:d9:96:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:BD:EC:7B:70:6A:21:19:B5:49:F2:E9:D6:C6:FE:76:54:00:F2
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:b8:3d:2b:77:73:ea:cc:97:0e:4a:0e:bd:91:22:7a:91:
71:7b:06:ad:a1:65:20:51:ec:f4:00:de:49:b2:4c:e9:49:4c:
60:dc:7b:10:e9:19:07:b0:e4:70:9a:71:c9:1e:79:17:55:ce:
a6:11:bc:be:fc:8c:37:c3:80:15:44:f2:b8:fd:08:a2:84:97:
35:cc:78:cd:38:28:8e:5d:fe:a4:a8:96:0e:40:48:c4:51:d6:
d8:2f:9e:ae:1e:e3:3e:05:28:13:07:c2:94:a4:58:cf:1a:46:
df:df:82:cf:e3:c6:35:bd:09:9d:18:57:02:a9:ab:54:5b:63:
19:45:4c:89:a2:b8:cb:08:33:ef:a8:8d:99:06:b9:59:da:8f:
a9:55:7f:75:ec:f7:a2:4c:4b:d7:f3:e4:5b:dc:e5:09:ec:75:
79:79:d2:a0:fc:f4:03:4b:43:16:67:87:4c:31:b2:fb:1e:4d:
9d:15:81:96:b0:fc:d8:17:39:4f:4b:38:03:eb:29:64:3e:a7:
ac:67:6c:4b:48:d9:ce:7c:34:71:60:8d:45:bd:41:13:2f:0d:
fe:f1:06:c8:7f:39:d6:d0:e9:8a:7e:7d:9d:02:ca:a8:b1:3c:
17:54:76:06:8c:86:1c:f4:34:4a:d6:c4:4a:e8:d1:89:de:dc:
56:45:30:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:21 2025 by rpki-client