Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier: G7B7UrmVX/JzRZYWRZLz5j24/CEKx+TUamJh+4EEu/U=
Subject key identifier: B6:1E:13:48:C8:46:82:81:33:BB:5E:90:BE:ED:F1:0C:3F:69:02:32
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 0199FF229839A32F153EF13AC775CAAE281F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number: 0A68
Signing time: Mon 20 Oct 2025 01:01:21 +0000
Manifest this update: Mon 20 Oct 2025 01:01:21 +0000
Manifest next update: Tue 21 Oct 2025 01:01:21 +0000
Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: Pixm4nI1TRwUf4EXrWTlnletTj0PnWHI0YuzBBsmAyw=)
2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:98:39:a3:2f:15:3e:f1:3a:c7:75:ca:ae:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Oct 20 01:01:21 2025 GMT
Not After : Oct 21 01:01:21 2025 GMT
Subject: CN=b61e1348c846828133bb5e90beedf10c3f690232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:49:b6:ca:ab:8a:3f:14:37:6a:e6:4b:03:
d3:06:80:ce:16:07:0c:7d:a7:4f:0b:54:7b:89:78:
55:73:62:21:0f:8c:3d:a2:88:34:04:e6:71:f9:56:
77:98:0d:f8:ef:fe:71:43:de:d1:8e:65:49:1b:35:
78:24:0b:21:98:7c:86:2a:71:d4:22:f7:7f:cf:ac:
42:d9:a9:0e:04:02:1b:e9:83:73:59:f5:f6:10:aa:
61:27:ce:40:a2:2f:e4:fe:b0:bc:b0:ac:39:a6:cf:
b7:a7:9a:e8:5b:fa:5e:57:e9:b3:c6:62:d5:4a:60:
f0:a4:d6:e0:cb:fd:39:8e:42:eb:e8:02:85:46:c6:
d9:96:74:3f:e9:be:c3:85:2a:e8:fb:6b:9d:58:50:
fe:cd:8a:40:e5:39:b7:3a:2f:95:04:e6:63:0e:63:
dc:ee:d1:60:0e:3f:6f:0a:e9:24:70:4a:0e:33:7d:
e6:6f:fe:4a:5d:e2:5b:a9:e2:4c:00:ed:2c:7a:01:
22:3e:ba:ce:a0:b7:0a:83:3f:33:58:f4:f5:05:32:
4c:fa:06:f5:e7:91:64:51:39:f3:6d:ad:fc:4f:72:
d8:5c:38:10:c9:0b:3c:7e:29:1a:ad:8f:2c:4c:10:
2a:2e:cb:a6:af:04:1e:c6:12:50:ff:fa:00:51:00:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:13:48:C8:46:82:81:33:BB:5E:90:BE:ED:F1:0C:3F:69:02:32
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:67:30:82:3a:de:a7:cc:20:24:42:ee:6f:8d:e1:fe:a3:8f:
93:c4:5c:91:65:d2:b5:6d:d2:b6:09:32:b0:22:3f:ef:5d:f9:
be:2d:f3:00:76:2e:da:95:d2:df:53:61:ec:ed:bc:40:d2:34:
ff:12:a6:42:a7:5e:ef:19:cf:0c:5f:3d:d1:2a:a5:ac:50:13:
76:4c:7b:d6:6f:89:52:07:01:0f:0e:31:0d:77:40:15:ea:72:
b0:83:17:ff:4a:92:78:8d:2b:bf:48:17:6c:52:b4:65:ae:54:
e3:50:e2:66:ca:23:01:d0:f8:52:b8:13:a7:cd:12:a6:39:16:
52:8b:6f:f3:5a:8c:a6:d7:69:13:fa:af:49:b1:e9:43:f8:27:
4d:f1:98:a1:4f:bb:e5:b4:dd:3f:79:43:44:90:08:2f:40:bd:
c4:6e:e9:dc:8e:2c:25:7f:65:99:a6:11:19:38:35:f9:3c:39:
49:fe:a6:bc:92:20:e7:2f:bf:85:af:b5:12:fd:54:eb:7d:96:
fa:4d:04:32:3d:30:d9:db:6e:c5:69:7a:7a:a6:06:8f:52:fe:
b6:96:d7:fd:da:33:d6:e9:7a:08:79:ea:e5:ac:65:7c:ad:f0:
c0:47:fa:30:86:f3:d9:32:07:8a:e6:a7:0a:6d:05:9d:1e:1a:
cc:b4:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:11 2025 by rpki-client