Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: gqtuOE0a6jW/VbNs3xXQvP2OA+qqOhD+k0d2M7bus1w=
Subject key identifier: 28:9C:8F:8E:49:E4:38:4D:A3:FE:DF:78:CE:14:2D:28:5A:99:E0:0A
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 0199FBEAD7340450647D789722217BA40D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 13B2
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: 0AnQ5t+9EZsSISojElxphQH5T/E/Jn4iJ3DKXu9MYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:34:04:50:64:7d:78:97:22:21:7b:a4:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=289c8f8e49e4384da3fedf78ce142d285a99e00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:60:cc:d8:6b:11:70:74:67:db:08:14:30:
5e:aa:53:29:f7:28:99:70:12:34:28:58:65:64:f7:
b3:a5:ca:f5:64:7d:ab:30:06:87:fd:97:f3:a0:37:
cb:29:74:b9:3e:30:c6:05:9c:63:ea:6a:f0:5b:29:
2a:ef:da:2d:ed:bb:fc:20:7f:e8:af:9f:f4:7c:cf:
b3:76:18:42:55:0d:2b:99:8d:be:c2:c5:27:a0:59:
97:8c:36:a4:ca:bc:e1:c0:69:93:dd:a3:88:6d:7b:
20:ed:42:c3:43:24:27:d9:90:7a:0f:1e:8b:9d:44:
53:ab:72:95:0b:aa:b0:5d:5f:66:33:ca:73:14:21:
29:fa:cf:fe:9a:4b:4a:49:2a:e0:dc:58:da:b2:d4:
3d:76:bf:45:36:78:f6:78:a3:7b:f5:e9:19:20:f0:
7e:8e:dd:2c:bd:a9:54:19:1b:89:b7:ae:13:37:d4:
17:cb:28:70:a8:cb:02:4b:e6:6f:b6:a8:9f:cf:aa:
17:ff:d6:01:ac:f3:ca:25:21:3c:b2:38:9d:b3:5e:
ff:e5:44:70:a0:3b:3e:31:68:07:0b:a2:af:42:92:
76:f9:0d:fc:77:94:3d:71:05:d0:66:cc:4c:d5:61:
37:d1:88:a0:1d:50:6a:c6:1a:8e:e6:c0:59:b8:ae:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:8F:8E:49:E4:38:4D:A3:FE:DF:78:CE:14:2D:28:5A:99:E0:0A
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3f:26:44:07:54:cb:01:89:98:10:e3:6e:45:3a:31:2e:75:
50:70:68:65:cb:66:70:ee:d9:64:49:e3:02:a7:fa:f2:26:65:
6d:72:99:5b:45:29:61:5e:36:c8:d6:e5:e4:70:a6:25:36:2b:
f0:94:7d:d2:1a:b3:1b:ff:73:90:3f:aa:b2:10:97:d8:d4:9f:
d1:06:ab:6e:cb:79:0c:e6:11:9f:cc:d4:7f:3a:ad:cb:3f:ea:
d8:48:20:ac:1d:a5:3d:f6:a6:f2:6e:52:9f:ce:a0:5a:5d:f4:
ea:29:da:b4:4d:fd:b7:74:6d:10:32:cc:fa:1a:fb:69:a5:7a:
ab:eb:9f:46:17:f8:fc:b0:64:a9:43:37:5a:56:7e:72:f2:55:
10:20:44:08:63:0c:d3:29:e5:b2:11:c1:d2:2a:a1:0e:60:5d:
c0:1d:c8:8a:28:32:fe:a7:84:89:5c:5c:b4:7d:7e:59:b2:cd:
4f:d2:9c:d7:f5:a1:74:c0:a9:f4:f5:70:c4:9c:77:76:00:d2:
96:67:43:2f:11:3c:fc:ba:63:a4:ee:f3:7f:5d:7e:3f:74:47:
c5:9a:e5:9b:5a:3d:21:9d:5b:92:ff:70:86:b0:d1:52:87:de:
32:2d:eb:bd:3b:7f:88:f3:38:1b:ca:dd:47:03:1c:25:de:bd:
25:fe:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:44 2025 by rpki-client