Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: MtQtzu5wddioDtUgGhVy3EJ0z3j3rLir29bmSkTY2sQ=
Subject key identifier: F2:8D:16:2F:2A:5D:99:8B:0A:D9:9B:F3:53:B6:67:20:EF:7F:32:71
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 0199FEEB912C3035FBC48CFFF358510630F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0DB4
Signing time: Mon 20 Oct 2025 00:01:14 +0000
Manifest this update: Mon 20 Oct 2025 00:01:14 +0000
Manifest next update: Tue 21 Oct 2025 00:01:14 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: SsS/b673+5Ha7Skiu9sUHbjxrU9YZUsT+jWaRo6n3Xo=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:91:2c:30:35:fb:c4:8c:ff:f3:58:51:06:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Oct 20 00:01:14 2025 GMT
Not After : Oct 21 00:01:14 2025 GMT
Subject: CN=f28d162f2a5d998b0ad99bf353b66720ef7f3271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:56:e5:ad:40:64:fb:b0:c0:15:01:7c:d2:
42:61:dd:c9:18:09:fc:5b:f1:c0:cd:45:01:b3:8e:
e4:b9:d7:0b:c5:e3:62:34:b6:59:59:16:30:b9:e0:
ed:a8:4a:e6:ef:37:7e:25:8e:ad:66:11:37:0f:bc:
d1:fc:e9:c7:34:99:c1:94:03:cd:5f:68:76:ea:47:
fc:54:19:3a:dc:c8:36:ed:06:53:71:57:14:a0:26:
74:27:2a:d9:58:62:38:99:6b:23:09:60:c7:d1:35:
bc:03:ac:61:01:72:4f:e8:12:09:84:2f:98:f5:c9:
b7:3f:f9:85:7e:15:fe:91:71:63:8a:5a:dd:97:42:
15:14:12:65:50:39:7e:42:86:1b:dc:4f:da:b5:77:
00:9a:a5:57:13:d7:b4:51:c9:da:84:74:db:5a:59:
1c:73:72:a1:cc:29:34:9c:f8:0d:6d:ee:d2:51:34:
84:fa:e5:60:51:97:8a:95:cc:57:ee:64:ca:28:14:
a6:84:1f:a7:6f:34:ae:9c:f3:3f:07:f6:20:85:7c:
0f:f7:9f:85:de:28:6f:6d:fd:a4:68:7f:28:5e:99:
67:e5:19:bd:a1:3e:33:cd:8e:6d:6e:cf:db:b6:46:
b1:37:1e:01:b5:a6:45:78:5c:b9:41:e8:f3:06:38:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:16:2F:2A:5D:99:8B:0A:D9:9B:F3:53:B6:67:20:EF:7F:32:71
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:49:55:98:9c:91:09:2e:1c:c0:14:e4:83:c3:fd:f7:6b:b0:
73:22:48:88:66:66:1a:d7:3d:7e:8b:a0:12:b3:2e:fa:74:4f:
db:40:bc:8e:d0:11:05:1c:f1:74:ff:98:9c:32:68:b8:84:51:
a4:93:fa:27:2f:76:3d:c1:f1:af:42:9d:35:c2:c1:15:65:e7:
0f:df:1c:48:01:1b:76:43:77:d6:1a:07:6b:af:a0:83:63:4b:
90:58:fa:96:5c:2f:d1:55:21:7c:c7:96:f2:6b:09:bc:10:d9:
68:cd:1f:fb:a2:28:b2:62:04:a0:2a:ad:7c:e0:3a:0a:5c:d1:
56:76:da:7a:6d:0c:e3:6b:a4:de:63:5f:75:b7:43:88:2b:8a:
dc:85:f5:21:23:0c:bb:b3:9f:97:5a:4c:5b:ad:52:66:7d:eb:
07:ad:2e:8c:c8:bb:8c:96:b1:24:65:1f:15:56:61:d1:0a:83:
d1:41:f7:c2:62:50:49:4b:6e:ef:2d:2b:fb:9b:7d:d3:25:d3:
be:6d:fd:97:e9:61:d2:91:8e:5c:40:4c:17:a3:16:0e:a6:81:
6f:b3:6b:e7:16:d8:05:88:05:91:70:48:b6:c9:0a:ce:6e:1d:
69:d2:5c:86:c0:f2:94:9b:28:9f:b0:9c:96:cc:11:68:dd:d2:
b7:50:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:09 2025 by rpki-client