Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: DzThpvlrfhAcKcAH9jIK60dGGkq9X9bwLWmucKtNOmo=
Subject key identifier: 9B:DD:3D:AE:3F:DA:94:BF:89:F4:23:B2:AB:C9:08:A3:BD:43:90:00
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 0199FBEB7EEEEFFBC83C57DD3ADE717EDC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: CWcwwAN1PazmnZBVaCOdrIvCSFk3nj6D8MlNSyv/Gn8=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7e:ee:ef:fb:c8:3c:57:dd:3a:de:71:7e:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=9bdd3dae3fda94bf89f423b2abc908a3bd439000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:37:8a:19:27:08:77:2c:1c:22:14:27:60:
bd:af:9c:b6:cd:9e:eb:ef:7d:23:91:cf:a2:9f:ba:
af:b1:2b:8d:9b:85:40:5e:56:c1:68:98:53:2b:87:
5b:33:df:07:ec:7b:d3:f9:0a:c0:28:88:bb:b3:e1:
2e:0d:d2:ee:b0:18:6c:f1:1a:53:c9:a3:4a:a2:11:
26:25:67:dc:0a:e3:48:16:3f:f3:a6:f7:02:7f:3a:
3a:82:a4:a3:46:2f:c6:e3:3e:04:f0:bf:c2:27:ae:
0a:82:16:9a:49:e4:6d:76:ca:19:f3:c3:e2:4a:4e:
d8:2e:fd:fc:08:2b:3e:90:5d:e5:af:e4:1c:a9:f7:
da:44:67:04:8b:07:1d:53:6c:26:fa:57:22:15:d2:
0a:29:37:66:e2:e9:79:fa:33:b5:95:54:0e:5a:4c:
df:74:02:c9:01:31:74:d7:c3:79:49:5b:82:b8:8b:
36:cf:64:90:b6:ae:43:84:54:16:96:64:d7:de:a2:
a9:85:eb:68:a1:0d:2b:43:e4:36:5a:f8:cb:57:d9:
f9:83:39:46:35:49:e3:4c:07:d3:9b:fd:98:95:0f:
ff:a8:d2:80:bf:63:7b:e3:58:02:e6:44:37:96:6b:
01:5f:63:de:a0:7d:1c:0b:b2:fc:80:b0:bb:f0:a2:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DD:3D:AE:3F:DA:94:BF:89:F4:23:B2:AB:C9:08:A3:BD:43:90:00
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:66:2a:05:1b:69:97:f5:f2:f4:8f:1c:e5:8c:94:3c:6a:
28:d9:f8:f2:7d:c5:39:6c:02:b5:57:72:ea:5d:2c:e0:f8:60:
1a:b8:76:22:46:de:e3:3f:6a:e0:13:32:c0:fc:58:50:de:b8:
b9:a1:24:e5:b3:72:0a:ca:45:ad:dd:17:3f:d5:f4:e1:9c:89:
0f:40:a8:02:72:00:55:24:13:5b:70:b2:f7:84:f0:ef:a3:db:
73:3b:08:32:41:43:fc:67:5e:8f:15:a2:2f:f2:bc:ca:f7:3c:
f6:f1:e0:00:9e:28:e2:83:c9:96:ce:22:8c:17:a2:a6:66:c0:
e3:ef:33:56:4a:62:0c:92:61:0d:f1:c1:d0:a6:30:9a:56:7e:
88:0b:3a:27:2b:b4:2a:2a:e5:ff:02:ad:35:7a:9b:6b:8d:b4:
49:4e:e7:62:63:7d:3b:ec:9a:5d:cd:04:37:97:cf:13:b4:f4:
ed:7e:69:97:f5:c4:87:3e:a1:ab:c9:f2:55:f6:98:dc:a3:79:
25:f9:7b:c1:0f:dd:ba:b2:0e:93:f9:ac:78:db:73:bf:29:cd:
39:f1:e7:51:96:ae:4f:41:cd:dc:6a:b4:2c:82:fd:a7:a1:0f:
fb:e7:12:9b:9f:05:1c:0a:2a:88:df:06:31:53:75:7c:30:e4:
68:a2:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:44 2025 by rpki-client