Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: svAq3Vp+IY76kG9Dm7m5m/AzcrdwOCYHDcbeHU53Wuo=
Subject key identifier: 73:F3:4C:C6:1A:95:A8:7D:E0:D0:86:12:8C:5F:43:5D:3E:9C:7E:46
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 0199FBEA80366CC20D67A7BA905F07A94AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0BD6
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: 2TDlPtKAPLOChH67xrAEkWsuL1kBigJohvBkZlRKbRA=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:80:36:6c:c2:0d:67:a7:ba:90:5f:07:a9:4a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=73f34cc61a95a87de0d086128c5f435d3e9c7e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:ce:b9:06:36:ad:41:71:69:7b:c9:94:ce:
6f:e8:8a:cd:35:6c:a3:6e:90:28:d4:8b:df:43:e6:
d0:e3:43:53:25:7c:11:f1:98:18:11:8b:12:b9:54:
c2:89:45:47:d3:a3:79:3e:eb:1e:14:ad:69:9c:6c:
f6:cc:6f:b7:9b:14:f1:11:1e:6c:a3:26:b3:a7:cb:
e0:93:9c:3c:e2:9f:4a:21:cb:0f:dd:42:74:c0:cc:
fa:1a:08:ae:ae:c4:a6:d6:f0:b9:ba:4d:b0:8c:50:
7e:78:d6:30:69:ba:a1:77:c7:9e:94:00:90:3e:7b:
31:88:2d:e9:56:86:30:92:3b:66:c7:c6:4a:88:f7:
58:a5:dc:c3:41:33:ae:cc:e8:6b:c5:df:80:c8:64:
10:d5:08:bc:33:7e:e8:a2:c6:42:7f:81:76:86:4a:
24:0a:e7:c8:7d:91:4f:d4:3d:6d:bd:c2:bf:46:7a:
e4:04:1c:60:f9:92:f0:fd:9d:11:73:a4:c9:5d:51:
67:93:1e:66:40:e4:f9:6b:af:75:b2:db:87:ca:e8:
17:27:9b:46:f2:b4:b8:4e:e6:fc:24:c6:11:fd:04:
1f:c3:4f:a9:a6:64:d6:43:aa:08:b1:7a:dc:c3:a4:
7e:a7:8e:d1:57:75:c1:a8:69:97:f2:d1:c7:bb:7e:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:4C:C6:1A:95:A8:7D:E0:D0:86:12:8C:5F:43:5D:3E:9C:7E:46
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8b:45:74:a0:42:c3:36:83:3b:4c:b8:0b:e9:12:0f:c8:13:
42:7e:6e:a0:4c:73:14:2f:e3:a0:68:d6:7a:25:ac:2d:c8:4b:
3a:ba:93:2f:09:43:4d:9c:dd:a4:fe:21:5f:83:c3:39:06:81:
dd:72:fb:df:15:ba:72:d6:d8:ce:4b:ef:6d:47:46:cf:07:10:
8a:65:4e:45:0d:61:bb:77:b8:de:c8:2c:cb:cd:4f:4a:f9:5d:
a8:34:89:7b:8c:d9:5e:92:ff:94:bb:92:f8:a1:28:4a:e8:c4:
f7:a9:f0:41:e4:8a:20:61:2c:c6:f9:0b:4f:ab:e0:b4:70:88:
16:e1:c1:9b:71:3f:89:d2:86:2e:1d:44:25:e4:3d:0e:83:59:
68:05:38:5a:e4:76:64:fa:1f:9c:cd:0e:62:d6:be:dd:25:76:
c5:c5:98:55:d5:92:6d:42:69:f0:de:8e:f6:75:01:75:48:67:
63:fb:bb:c5:7d:4c:fd:b5:e7:21:b3:02:ba:37:c0:52:e7:56:
10:f8:72:52:ed:06:55:5a:0c:54:7e:b5:63:8c:51:1c:ba:be:
6c:b6:fb:9a:6a:d9:ce:a2:70:91:f4:35:c2:6e:8d:3a:aa:bc:
97:0d:02:5a:10:75:65:ce:fa:86:c0:8a:12:3f:3a:f0:e8:78:
69:f4:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client