Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: q2nsyltNeAyPvYWEygPkmkxmwK5UlVtsJMvk//uubKs=
Subject key identifier: 48:8B:C1:EA:C0:C1:CD:ED:C3:8A:06:63:D8:C1:E4:09:A3:72:1E:1A
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 0199FB0F1EB4729209221995959CC09F380E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0D98
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: VDd22kQt6U24RK4yWFXHDvJCn9jnBtgaF/alapkBJ84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1e:b4:72:92:09:22:19:95:95:9c:c0:9f:38:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=488bc1eac0c1cdedc38a0663d8c1e409a3721e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:3a:26:9e:f6:85:a0:cb:2c:07:a0:c0:71:
b1:54:d7:38:35:64:81:aa:ee:a1:b0:ec:82:0c:57:
bb:7e:c5:84:78:73:b4:5f:22:97:38:cb:92:00:82:
98:b3:44:8a:8d:dd:10:f9:7e:b5:34:e5:79:d6:a9:
4d:61:69:1c:56:c1:1e:29:25:5d:3d:7e:0f:b0:0e:
9a:87:d6:5f:e1:eb:4f:70:57:ef:cd:0c:8a:8f:2d:
0b:3d:5a:3d:42:ee:bb:ce:ac:9f:b9:a5:95:e4:21:
29:7c:43:a9:34:be:33:e3:7a:eb:31:a0:36:ef:40:
7b:16:b4:be:f8:38:2a:2a:ff:5e:2d:c8:37:30:ed:
f1:a1:32:80:01:43:e0:69:e2:55:d6:e5:5f:5c:93:
76:d6:b5:36:ac:e7:b6:4f:ab:18:ce:1d:a2:d0:57:
62:fd:34:04:1f:1c:9f:c5:44:1b:07:3f:9b:9b:09:
e3:fe:c9:f9:27:88:a3:7a:86:00:2f:96:0a:49:04:
54:25:a0:cf:31:4f:51:05:12:2f:44:35:0a:1b:a7:
74:1c:c6:66:66:e7:1a:66:4e:06:3d:c2:89:fa:46:
7c:49:8c:67:4f:4a:55:db:5d:49:80:57:1d:30:cd:
76:d4:8c:9d:21:bf:0d:d3:69:f1:fe:56:11:69:3d:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:C1:EA:C0:C1:CD:ED:C3:8A:06:63:D8:C1:E4:09:A3:72:1E:1A
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:7e:2c:6e:ec:b0:37:33:0e:7f:3a:9a:ca:71:0c:c0:75:
25:e5:43:8a:48:64:6e:1a:a9:d0:e9:88:f0:be:84:ce:ab:1a:
cd:84:8e:96:7d:a8:19:38:d4:18:c4:f5:d7:05:79:c7:a8:67:
84:ba:d1:fd:9b:2c:87:6f:41:cc:38:78:2e:27:d0:b3:50:0e:
1d:ba:17:e8:67:7d:6c:cd:8b:42:69:e0:56:2b:26:fb:41:27:
de:a3:a2:27:02:7c:5f:5f:02:75:c5:45:93:aa:10:ea:5c:2d:
47:01:1a:01:89:e2:01:14:fb:fa:c1:86:0f:13:bf:d1:9f:48:
e7:1c:1c:c2:79:2e:f0:b9:a9:67:a2:62:c2:e8:9f:64:72:08:
d1:78:fa:d5:c1:15:d4:b3:6d:99:38:94:ce:a0:3e:e0:58:da:
1d:5b:73:ba:3b:07:8e:06:bd:f4:9f:da:d7:31:c3:59:63:0a:
85:48:c3:ed:b2:fc:51:ff:75:b7:16:19:30:2e:3d:d4:bb:a1:
0a:99:12:33:9c:10:94:f9:f0:51:02:f1:a7:44:2c:12:2f:23:
53:e5:e1:2f:4a:7a:cb:05:4f:b6:6f:33:d1:b1:06:c9:2f:83:
d3:08:31:db:fd:8e:37:a5:5b:f2:47:01:c0:fc:40:35:81:da:
e3:67:ab:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:34 2025 by rpki-client