Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: IhX5SUVAs7DoQ2Iya2H8IsELGm+5CCYGtfeNB/+6YEM=
Subject key identifier: 09:EB:77:22:F5:22:0F:13:75:CB:C4:85:86:FC:F1:F5:BF:C7:85:12
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 0199FB45A6DBC8D79FC3FAE5B19C6E3C6A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 07A1
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: dPuPPUAyOGW6RzZui/7gioq3wH6Foo1jgS0NsTzeisw=)
2: IoLDWpZjj6oD1gt6nT7kXI9BcpA.roa (hash: O3dblJBCfC0orY3rYiRzkRU6RkAUIy5FR+b3VhRRXis=)
3: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (hash: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a6:db:c8:d7:9f:c3:fa:e5:b1:9c:6e:3c:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=09eb7722f5220f1375cbc48586fcf1f5bfc78512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:a8:28:21:0e:b1:c4:86:01:2e:e7:75:62:
d4:9c:d4:67:1f:e2:4c:8a:50:d9:c4:80:6a:48:b2:
0c:5d:87:d2:8a:11:d9:84:76:08:02:70:15:f1:ed:
c3:13:a7:cf:8e:58:db:da:51:06:40:1e:04:3c:3b:
f9:42:6d:ec:95:16:48:cb:af:8e:66:86:70:f9:ff:
da:79:14:15:0e:20:76:4e:1c:25:5e:1a:e1:e4:36:
e4:05:c0:63:00:1a:62:d7:37:d9:92:2a:37:5d:20:
7d:e0:fa:5b:16:bb:75:7a:2f:7d:1c:ee:97:69:93:
34:76:2a:1e:51:28:ed:30:cc:9b:1b:1a:1a:c0:70:
f9:95:44:e4:b1:91:3b:39:10:ad:1a:80:f6:77:ed:
19:3d:dc:16:c9:d0:55:29:5b:4d:c4:5b:1b:5b:a3:
b0:92:06:da:9f:4a:93:f3:9e:b0:b2:a8:0b:f5:b6:
f0:27:75:4d:b9:5a:8e:30:f4:f1:be:2f:3d:2c:c3:
e0:50:8d:50:82:51:9c:63:f0:21:07:55:ee:ec:1f:
b7:75:be:e9:b3:8e:f4:6d:5b:74:83:8b:ec:15:f1:
fc:71:7e:dc:75:b0:3c:96:d8:06:a6:87:d9:1f:be:
1f:da:dd:ee:be:62:fe:cf:d8:84:35:c5:c4:0a:7f:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:77:22:F5:22:0F:13:75:CB:C4:85:86:FC:F1:F5:BF:C7:85:12
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d2:ce:10:37:e8:7d:20:5a:23:7a:c2:dc:45:e8:18:7e:51:
3f:f1:31:1e:77:13:06:6f:ac:ff:98:33:fc:8a:07:70:30:5f:
79:43:43:54:3e:51:15:73:21:0e:fa:9b:5a:f8:fc:5a:e6:b2:
fa:fe:0a:7e:a3:e3:0e:26:6a:9f:04:59:11:0e:5b:22:b9:e2:
3f:14:97:99:38:f8:26:96:de:40:f9:cc:eb:5c:58:d7:b4:57:
b4:f4:27:19:f1:48:71:04:40:2a:46:32:80:ec:42:95:ee:a3:
90:48:24:26:72:bb:63:24:83:4a:ae:28:ae:a4:b0:75:00:a6:
e3:27:d3:a7:28:52:33:7c:fb:05:e4:1d:90:ce:cd:09:34:cb:
31:83:cd:3c:48:f4:18:2b:82:87:fa:fb:7f:df:3c:64:26:5f:
fa:0f:bd:34:05:c9:70:e4:75:0d:ee:5a:0b:01:8a:5a:fa:c8:
45:cb:c2:66:75:87:bc:c6:1e:a4:77:e7:36:ea:e6:58:b7:c1:
e7:c8:48:5c:1b:93:76:5b:d3:e4:4e:26:3f:c9:7f:60:81:e9:
b6:5d:61:0c:08:1d:29:fb:51:a4:e6:58:b4:51:93:9b:4c:7c:
a6:09:af:f5:57:1b:f0:d3:09:84:1f:81:97:89:1f:dc:ee:5b:
36:b5:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:42 2025 by rpki-client