Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: ssZ2i1oYtpKfQhFqXEW5iECKsrzr8+MxLoQk1NYkOL4=
Subject key identifier: 53:78:07:FD:14:D2:D5:F0:72:10:E7:59:FB:61:21:E3:5C:17:72:6F
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 019A003558E8700D71FAA5ADC18E7E9DCDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 06:01:27 +0000
Manifest this update: Mon 20 Oct 2025 06:01:27 +0000
Manifest next update: Tue 21 Oct 2025 06:01:27 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: 79XTL9ZY9FwT+eVLr2JqS6eb2pOZOVZY8t1l4od4Sf0=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:58:e8:70:0d:71:fa:a5:ad:c1:8e:7e:9d:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Oct 20 06:01:27 2025 GMT
Not After : Oct 21 06:01:27 2025 GMT
Subject: CN=537807fd14d2d5f07210e759fb6121e35c17726f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:f5:95:d2:c9:b0:b4:20:eb:74:9a:e8:b2:
25:69:c2:a7:25:dc:bc:6b:66:ef:18:4d:ba:06:50:
74:0c:82:21:60:c1:9c:0d:c3:14:e5:81:81:97:1c:
c5:5e:3c:91:56:4a:05:99:e6:42:ab:bc:4e:82:3d:
75:50:4c:9e:e4:84:2a:08:3f:b2:cc:9f:29:7c:be:
7c:0b:4a:2c:7b:a0:01:f5:f1:87:24:a9:00:f7:c5:
34:8b:18:d0:9e:57:39:f2:0b:dd:66:ce:3c:69:b9:
7b:6d:8e:1e:91:9a:f8:98:72:cf:e2:73:a0:33:f7:
64:a6:46:bb:33:6c:f2:51:c6:41:15:a4:fd:0c:75:
3c:dd:bf:d6:5c:99:6d:f0:99:f8:e2:3a:bd:95:62:
46:e0:a8:1d:1f:fa:f2:09:11:25:ff:a1:3d:85:fa:
e9:5c:ea:5d:a2:60:56:33:e1:db:26:91:d2:02:91:
99:1d:58:45:b4:b9:85:dd:77:1b:6d:e8:a1:f2:6d:
c0:0e:4b:7a:8e:2a:1b:2f:53:85:a0:6d:71:ef:ce:
aa:47:09:39:23:a4:16:5d:0c:99:65:28:f8:30:4c:
e3:04:d8:ca:5e:cc:23:c0:fe:22:f2:65:b8:a2:a8:
20:7d:e1:b5:fa:57:05:50:4f:3f:c2:37:0b:0e:4d:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:07:FD:14:D2:D5:F0:72:10:E7:59:FB:61:21:E3:5C:17:72:6F
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:94:f2:67:10:00:ee:f3:37:76:52:88:6e:94:86:98:71:
d4:0f:2d:3b:02:8c:fa:16:b8:45:45:6f:9d:3f:f6:f4:04:01:
f4:cf:70:6a:e2:fe:04:ff:61:1b:73:d8:6f:63:35:de:35:3a:
0f:c5:cb:e7:34:b8:2c:1a:b3:14:e7:2b:01:db:e2:83:fb:0c:
29:e2:9a:d6:11:44:a5:1c:90:b4:e1:8c:00:6e:c8:3c:d7:77:
34:2f:b3:16:1d:7b:41:bc:22:0d:2d:94:e1:f1:25:00:30:29:
f8:e1:09:b5:8d:fa:ba:a5:95:06:71:0a:7e:da:21:b6:60:53:
60:45:41:63:22:b3:64:15:48:86:ab:b4:cf:32:00:2b:85:03:
f3:c8:69:eb:2b:34:f6:6f:c1:d8:03:ef:99:56:80:94:73:9a:
ba:f6:e8:d9:5b:43:17:e0:0c:b5:d9:81:5f:0d:42:c6:8f:a1:
78:cc:ba:1d:c9:7f:fc:27:76:e4:8d:f5:9a:5b:cf:71:56:68:
3a:52:dd:f1:00:8c:ea:8b:29:c0:69:e8:9a:06:0f:d9:d8:44:
9d:cc:21:cc:0a:c4:45:b2:13:51:f4:92:30:e0:02:12:de:48:
f1:dc:ed:74:9e:7b:d5:b8:72:7f:62:40:fa:fc:3e:e6:30:9e:
41:c1:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:31 2025 by rpki-client