Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: 0pK7IsSbmw+HRuh6Yh/+193+pH0TFFjCP4P+lpzeHMc=
Subject key identifier: C8:04:AC:64:D0:20:B5:58:2F:61:7B:5A:AD:BA:C9:1E:47:4D:94:ED
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 0199FFFEAEF82514FDAFDB9A64509CC9DC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 05:01:44 +0000
Manifest this update: Mon 20 Oct 2025 05:01:44 +0000
Manifest next update: Tue 21 Oct 2025 05:01:44 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: f5/gDI7Tsi461QLQ4Q0I3PA0jpHvqz8KOMUUNT+EoEA=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:ae:f8:25:14:fd:af:db:9a:64:50:9c:c9:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Oct 20 05:01:44 2025 GMT
Not After : Oct 21 05:01:44 2025 GMT
Subject: CN=c804ac64d020b5582f617b5aadbac91e474d94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:ea:45:7e:03:50:c5:11:78:fa:9d:22:a0:
54:a7:ef:07:6b:06:36:75:4b:6d:fc:9c:49:cb:f3:
4b:92:9d:7e:76:39:a9:03:46:b0:45:4e:c5:63:83:
93:b8:2c:47:a4:85:88:ed:f1:7f:ab:44:23:33:4e:
f2:41:a5:60:7b:15:4d:63:e4:67:55:d2:e5:dd:5d:
84:54:63:7a:a7:f5:3c:bc:b3:03:0d:2e:cb:8c:61:
c6:53:a0:30:4f:7e:fd:0f:2d:b6:a2:13:e4:6d:f2:
d7:85:84:d1:92:33:88:f6:fd:67:90:4b:cd:c8:f3:
78:21:b8:d1:0f:4b:10:d5:4f:8e:22:be:35:c5:85:
a9:65:bb:fc:65:ac:54:2c:77:3f:8a:55:a3:f1:35:
f2:ae:d0:96:70:0e:18:06:3d:60:26:13:55:50:8a:
46:4c:19:d0:f9:9d:16:a8:db:16:d6:da:3e:f9:c1:
e5:a9:53:1d:57:e1:da:4d:06:87:5c:96:8f:17:19:
18:1a:d2:3e:80:33:64:66:26:61:d5:ac:9b:98:f4:
4a:b8:80:c4:f1:4f:a9:6c:f3:88:b3:90:af:25:fb:
e1:f5:40:46:1a:26:f9:d7:cc:b9:d5:35:66:58:f5:
1b:2b:30:e9:4b:87:05:eb:35:01:b6:e1:4c:05:6a:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:AC:64:D0:20:B5:58:2F:61:7B:5A:AD:BA:C9:1E:47:4D:94:ED
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:95:24:2b:4d:65:97:95:86:63:7a:23:7c:8c:10:5b:1d:d2:
8f:bd:1b:0b:72:36:48:55:84:47:10:ea:65:c9:1b:6c:97:44:
7f:4f:96:60:a6:ea:a3:ee:f5:55:ee:bd:f0:90:b9:45:6c:fe:
5b:a8:23:23:82:16:ea:03:7b:9f:88:aa:0b:4d:79:25:6c:2d:
61:ed:70:e5:68:bf:09:98:ae:4e:4a:14:eb:dd:e9:d9:4a:f8:
43:82:b1:0f:6f:4c:51:ac:03:cd:69:77:3c:75:47:2b:70:c4:
c2:97:20:b6:a3:bb:25:d8:cc:ec:72:6d:8a:5c:5a:eb:8f:c9:
55:40:e7:80:cb:42:9e:2b:fa:5d:a8:d0:42:6a:02:e4:88:1a:
7e:52:17:19:ca:1b:ad:54:64:61:b9:dd:fd:79:aa:2f:6a:f3:
07:8b:6d:27:cf:5e:52:fb:e2:74:2c:4a:45:5f:f1:d5:f4:0b:
a1:ec:12:b6:38:05:66:06:e0:3a:39:5b:93:ad:59:0e:88:83:
76:9d:c4:a3:d7:63:3f:da:1c:6e:af:77:52:32:93:3f:cd:0c:
5d:1d:54:0e:c0:70:88:28:cc:86:f8:5b:15:7f:b2:cb:9b:fb:
98:bb:12:88:aa:b8:35:b4:3c:55:9c:9c:40:e6:8a:ce:8d:43:
32:46:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:25 2025 by rpki-client