Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
File: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft (raw, json)
Hash identifier: CuqMjHnJPICbHqKu1AoWS6n4WuHJiXkkfHJgJG38N/I=
Subject key identifier: 88:A2:20:4A:7F:EF:D9:39:A0:ED:DE:1B:16:61:D4:93:21:8E:D7:A4
Authority key identifier: 18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7
Certificate issuer: /CN=182d6963f8f80458d841caaef158b992ab4059c7
Certificate serial: 0199FBEC49B9542170CF139857F1752B5A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:03:10 +0000
Manifest this update: Sun 19 Oct 2025 10:03:10 +0000
Manifest next update: Mon 20 Oct 2025 10:03:10 +0000
Files and hashes: 1: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl (hash: 55VnX18fnMTJ2vxxhCxMKN4SdGGgj3j5FlBOa5JPkvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:49:b9:54:21:70:cf:13:98:57:f1:75:2b:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=182d6963f8f80458d841caaef158b992ab4059c7
Validity
Not Before: Oct 19 10:03:10 2025 GMT
Not After : Oct 20 10:03:10 2025 GMT
Subject: CN=88a2204a7fefd939a0edde1b1661d493218ed7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:96:76:c0:67:63:3d:2a:c6:9b:dd:83:bc:
2f:7e:30:61:dd:ed:96:a3:69:b3:e8:6f:26:c3:5e:
19:c6:e5:62:20:8a:42:92:ed:de:7a:bd:c1:fe:ab:
44:d2:eb:ce:4a:45:2e:01:53:e8:a5:3a:b8:d4:15:
d3:67:d1:9a:ab:85:3b:bf:96:63:dc:55:28:c7:ca:
56:fe:c0:c7:2c:43:b4:72:b5:1c:5f:0d:3b:23:2d:
0b:27:a4:80:da:cc:c2:83:cc:eb:5f:16:7b:9d:ee:
9e:9a:77:50:eb:87:a9:d1:a6:bb:a0:ff:ae:32:00:
15:e9:18:71:e1:dd:3e:16:7c:74:9f:28:e0:57:d4:
2f:b3:9e:54:cd:a6:a7:95:d1:74:b8:13:40:4c:24:
94:6e:b7:67:d5:f1:54:09:15:b2:88:29:58:4d:0f:
66:e6:9a:3c:7c:9b:61:d1:e4:eb:55:69:f8:6b:29:
b8:39:47:3d:14:84:a3:a5:32:0c:49:01:96:1a:7e:
93:35:a0:ee:b8:bc:c8:f5:f1:14:af:15:f7:87:2b:
25:ba:f0:88:18:a5:18:27:df:c5:32:ed:d1:b6:fc:
5f:55:2d:10:9a:7f:3b:68:69:3c:02:26:44:50:cb:
5d:e4:eb:2b:ad:2d:a0:4e:08:3e:65:ce:64:ad:75:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:20:4A:7F:EF:D9:39:A0:ED:DE:1B:16:61:D4:93:21:8E:D7:A4
X509v3 Authority Key Identifier:
keyid:18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:e0:1b:9b:72:f2:b3:8d:3a:bb:0e:e7:45:44:1c:17:10:
bf:49:69:12:5b:f1:8f:09:25:a5:89:f4:f5:40:fc:f9:8f:7a:
cc:c3:06:18:25:74:2f:6b:73:48:bf:04:8c:9f:19:cd:44:1e:
c0:a5:97:12:e0:1d:2d:85:50:48:4f:3c:1d:a0:42:d4:5f:5a:
46:bd:49:93:57:60:bf:81:1a:fb:e4:d8:35:c6:c9:a8:05:02:
cf:2d:23:b6:f9:cd:33:ab:8f:cf:69:9d:f1:9d:7f:78:0f:c3:
24:b1:8d:bb:2b:57:40:fa:af:58:b5:59:fc:56:37:86:69:c4:
a2:e9:12:c3:cd:ce:56:a9:ca:ba:16:2d:2a:48:f1:83:4b:1a:
6c:08:cd:5e:12:26:33:65:4f:7d:ee:c7:9b:42:37:cc:4f:9a:
e8:14:2f:7d:bf:1a:06:7c:3f:ea:9e:9a:d9:00:c0:d3:39:9e:
32:79:49:2c:cd:d0:bb:f4:dd:00:61:5d:d2:60:9d:0a:0a:ce:
44:36:ec:90:80:d0:09:f9:6e:3f:6d:31:12:67:d7:29:ee:23:
a5:66:11:dd:cc:71:cf:be:ea:31:22:89:65:e9:1d:2d:61:c7:
32:fe:af:0d:2b:fe:88:26:b1:f9:16:2b:cb:e4:88:92:5f:b8:
68:db:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:58 2025 by rpki-client