Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: NB6MmYhk2xt4uFiEQSS5MzQOTvtn1QhWimBlx1ntOG4=
Subject key identifier: AA:91:14:8A:AC:67:78:0C:9C:C7:D1:59:95:5F:C7:5E:56:F1:6A:E8
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 0199FBEAAFE981FFAA42808BE8F176FE5ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: Tztjcp+5covJj31sKuGl0W+H6dA9FBO3OUiKeVOQ7Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:e9:81:ff:aa:42:80:8b:e8:f1:76:fe:5e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=aa91148aac67780c9cc7d159955fc75e56f16ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:ce:6c:52:15:be:45:9a:2a:66:7b:d3:0c:
7f:1a:0d:87:35:f5:86:47:26:f0:6d:85:7c:8b:a8:
11:8f:67:47:14:68:63:7a:d1:63:30:49:a1:68:c0:
65:8d:d3:35:7c:16:bc:cc:1c:50:58:4f:ae:7b:f4:
c6:cd:02:9b:4f:6b:37:30:07:e0:e1:a8:50:c4:66:
4f:1c:28:38:3a:b3:94:fc:31:fc:23:87:bc:3b:29:
23:8f:47:db:e8:68:d2:48:65:55:cf:6d:02:3d:bc:
d6:fd:71:74:2c:5b:a4:8a:ce:4a:c7:e2:37:03:bd:
37:99:26:35:83:c0:f8:99:1d:78:a6:d7:b5:58:14:
99:61:90:cf:7c:98:b0:6e:2f:81:42:bc:8c:d4:f0:
64:22:2a:bb:c4:db:8f:80:fb:cd:6f:89:da:bf:0c:
c8:16:6d:32:11:61:53:49:e1:53:34:d7:5f:93:fc:
a2:42:98:45:d6:0d:0f:d7:59:12:10:cb:02:b9:81:
b6:94:b3:9c:78:b7:21:40:e5:94:de:9d:7d:b7:fa:
2c:2d:63:ed:b4:48:8e:88:19:51:36:e2:f9:28:21:
1a:57:a7:6a:8c:fe:c2:4b:94:cd:c5:59:c0:93:f8:
35:44:9f:f8:27:54:b8:ab:a6:d0:ce:b1:df:e5:f3:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:14:8A:AC:67:78:0C:9C:C7:D1:59:95:5F:C7:5E:56:F1:6A:E8
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d0:18:22:4c:7f:10:92:ca:7a:aa:46:27:27:37:66:4c:64:
c0:06:f3:7d:e2:a6:92:01:51:89:ba:42:0b:75:61:e5:bf:bb:
06:a5:07:b5:06:e6:86:1e:ef:d9:72:02:4a:d6:2b:fb:d4:41:
39:84:06:6e:bf:95:e8:8c:5b:87:e0:13:1f:e1:c3:85:43:f6:
88:11:39:a3:61:6a:a8:06:c6:a2:5e:68:0b:9a:0a:17:b7:4d:
10:7d:5b:02:77:c8:32:c8:4e:8d:27:6f:56:4e:8d:ba:32:e3:
53:8c:91:e8:e9:f8:f6:df:90:e7:1a:d9:0c:aa:97:80:94:45:
09:10:6d:61:64:21:8f:8b:50:f3:ea:c6:ce:3a:2d:78:48:c9:
b2:15:4d:54:63:69:39:3b:22:04:c2:ec:df:9a:4d:5a:f9:01:
5c:1c:5c:d4:27:ed:16:10:f9:f1:7c:51:b6:19:79:89:6b:aa:
1c:80:6d:1a:28:00:f8:57:b9:8a:a7:7a:24:d3:33:9a:67:4a:
0a:1d:3e:bd:31:95:0b:ac:38:51:15:bf:9f:e1:d4:ab:a0:a5:
a9:2b:ac:4d:29:83:85:8c:bc:d8:d8:91:a8:69:07:18:54:39:
8e:d8:a7:53:29:ea:01:32:9d:35:ed:2d:6b:36:4b:f9:41:49:
41:2b:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:27 2025 by rpki-client