Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier: J1IPrFFylawH1uTig3DAxm72DtX2ST8YpPI4ReqJANY=
Subject key identifier: 68:52:4E:4F:93:AD:3C:61:E7:09:19:BA:13:A3:B0:89:1C:C0:79:50
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 019A00A2F0E1CE541627290E6F8D696B2768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 08:01:09 +0000
Manifest this update: Mon 20 Oct 2025 08:01:09 +0000
Manifest next update: Tue 21 Oct 2025 08:01:09 +0000
Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: JKcSA+J8YHjwdvKIM/EED7OhyzktTYxXtpS7m84N7oU=)
2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=)
3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=)
4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f0:e1:ce:54:16:27:29:0e:6f:8d:69:6b:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Oct 20 08:01:09 2025 GMT
Not After : Oct 21 08:01:09 2025 GMT
Subject: CN=68524e4f93ad3c61e70919ba13a3b0891cc07950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:98:da:72:df:f1:08:d9:84:bb:94:0d:de:
da:64:f0:a2:bf:4a:c2:75:65:ac:b3:5f:63:38:eb:
d8:b3:6c:e7:72:99:68:b9:e8:98:aa:13:b4:94:c2:
b9:ab:fb:bf:de:d0:f1:2d:48:ff:41:bc:29:5f:4b:
27:be:99:56:d9:68:1f:ac:1c:2d:c5:7f:7e:09:b6:
da:73:56:68:92:5f:84:27:d3:bf:1b:ec:bb:2d:dc:
83:9f:6f:68:68:b5:2f:08:a6:ae:63:3a:c0:f0:00:
fa:1e:d6:56:2f:5a:42:45:00:12:7f:6c:3a:99:29:
cf:d4:86:6f:d2:97:d5:c8:bf:98:fb:0c:2f:5b:e7:
ec:2c:0e:54:da:0c:c7:a0:88:78:4e:32:fa:3c:73:
a3:98:02:ce:71:7a:62:30:59:44:08:4e:77:61:a4:
75:af:3c:62:fc:9d:af:40:d8:a3:9f:f5:69:8d:fc:
6b:06:a5:b5:02:6e:ec:46:74:0a:65:98:69:62:fa:
46:d3:d3:08:0c:cb:e3:32:34:86:ec:33:96:7c:e9:
02:e9:17:07:cd:93:af:ee:09:7a:13:73:be:10:e2:
96:bb:80:34:66:46:38:d8:59:a5:f6:33:31:fd:fe:
bb:59:90:99:8a:e8:49:50:0d:11:09:4c:d4:ee:a9:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:4E:4F:93:AD:3C:61:E7:09:19:BA:13:A3:B0:89:1C:C0:79:50
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:92:71:e4:6c:62:7e:5e:98:bc:d4:7a:92:78:a4:f8:c5:14:
f0:e8:0c:b8:73:c2:e0:bd:08:f3:fc:e8:d5:0e:8f:4f:52:a4:
74:12:c7:c1:3b:f8:87:cd:aa:4a:9a:e5:f4:c9:da:54:ac:8b:
30:8d:82:26:84:e8:41:45:1b:d5:41:65:d6:68:3a:66:94:db:
b2:2e:50:11:12:9b:98:f7:e1:72:8e:56:a3:7b:6f:40:43:34:
39:23:76:6c:31:ab:9d:06:6d:e7:ce:ff:16:49:e8:f8:bf:0e:
b0:0b:fe:c2:f4:82:27:29:40:6f:5a:07:07:4a:e8:f4:49:66:
5b:a6:0c:f7:35:9c:78:ee:2a:e1:1f:c9:82:8c:45:2e:e0:fd:
af:c4:d3:02:aa:3a:93:8f:84:25:cb:56:19:06:9c:ad:be:d9:
3b:70:f6:54:49:39:be:01:82:c2:89:1c:33:8e:33:b5:fe:a5:
a6:bb:16:56:5b:8d:e3:9a:0b:53:f5:9a:93:1a:63:e8:82:99:
88:a7:be:4d:59:68:30:8d:fe:78:da:61:20:5c:bc:b2:62:51:
3d:99:39:14:72:ce:ab:e2:40:8d:25:66:b7:74:76:71:9d:0d:
bd:73:ee:af:46:17:e9:c3:64:3a:e5:49:99:c6:0c:eb:b0:67:
e1:94:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:57:47 2025 by rpki-client