Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File: gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier: gJ9Kev5n7a6Bphs1PRpUrgtlpkDQNqQhF6nix/PTQ/I=
Subject key identifier: FD:80:35:EE:09:30:1B:6C:51:1B:EE:31:15:FD:70:CC:AB:67:18:A8
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer: /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial: 0199FD341C17E567EA0CF2A6B0E6237757CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number: 1335
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: mfAAb4akQw4h+gWI8pz86pStsmn6hjlbr+evtETxCVk=)
2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1c:17:e5:67:ea:0c:f2:a6:b0:e6:23:77:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=fd8035ee09301b6c511bee3115fd70ccab6718a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:28:8b:57:86:26:89:0f:34:69:d6:40:5d:
1e:a2:8c:02:a1:f6:51:5f:0e:ff:32:af:f7:dd:dd:
f3:e8:60:90:be:b7:14:7d:64:92:b1:17:2b:e3:6c:
33:91:43:4d:f7:e9:38:a5:5d:fe:b7:6c:38:c1:d5:
ca:74:b4:0b:82:79:db:ac:86:47:18:a4:67:40:3f:
fc:86:bf:dc:ba:47:63:ca:e1:2e:36:f6:2d:cf:30:
8f:2b:10:33:a3:7a:51:54:5d:ea:7f:bd:02:42:f9:
0d:0f:57:04:87:89:4c:76:19:2f:97:04:6e:39:43:
9e:e4:84:c0:b9:c2:d4:a2:0f:c4:c4:13:11:e3:0c:
df:02:47:38:ce:12:c9:ca:bd:1b:41:f6:28:6d:2b:
58:53:cd:a3:24:5f:6d:48:90:11:f5:c5:cf:30:76:
4f:c6:62:b6:fb:88:df:b1:fe:7d:92:09:46:0d:14:
f6:83:2b:da:92:78:9d:f0:a7:11:9d:86:7c:0c:51:
d8:03:7d:fa:90:4a:00:e2:b7:3c:6f:c0:08:d4:80:
ec:fc:9d:aa:a0:4f:e8:b5:31:78:dc:47:5c:82:73:
5a:23:0d:1e:a8:30:f6:a6:c9:c8:df:8e:05:f4:6e:
f1:2b:e0:13:07:b6:32:ef:bf:a7:8b:c4:75:ad:b0:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:35:EE:09:30:1B:6C:51:1B:EE:31:15:FD:70:CC:AB:67:18:A8
X509v3 Authority Key Identifier:
keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:61:28:41:c1:2f:c7:29:40:c1:88:14:31:76:e5:80:4c:12:
e0:2a:dd:23:8b:4d:fc:c5:95:48:f5:0c:44:82:e7:e3:4b:70:
42:d0:be:c5:af:a9:71:73:52:0a:e7:8f:00:c4:8a:ab:ee:2d:
c1:6e:98:4c:55:e1:6e:ee:c1:24:91:81:96:64:e2:21:88:64:
d8:24:e5:4f:89:50:5d:72:77:82:f1:1b:ea:c0:77:c1:9b:be:
94:93:73:29:22:85:cf:24:b9:8f:eb:bd:67:53:dc:53:d8:94:
d7:05:10:a0:99:29:96:5b:b2:c5:ea:ad:6f:17:59:4e:13:9d:
06:71:d7:29:1e:4e:66:88:22:85:c3:bf:44:0f:92:61:ff:c5:
cb:0c:59:fb:69:34:64:17:d7:47:21:56:a9:67:36:e4:a5:f8:
71:66:40:63:02:bf:01:ee:96:b1:bd:0c:45:a8:ac:b4:ac:de:
e6:d8:64:d2:bd:54:dd:88:b0:80:98:d7:b6:1b:0d:76:79:c5:
e5:5c:dc:91:e8:00:c5:7a:02:9c:c7:83:04:c6:48:5d:0e:5e:
46:21:7c:05:dc:fc:20:e8:7a:48:68:19:2d:46:81:57:c0:ce:
90:dd:22:4c:df:ad:a3:de:0e:22:4f:b8:c5:46:72:c1:83:d7:
d6:8f:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:49 2025 by rpki-client