
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: Qja6FM5U0RimtwK5nbuxgsjmx2KRV4tuYg2+vBbarDM=
Subject key identifier: F0:01:1B:20:7B:02:F7:94:73:39:85:65:B1:AD:8B:FD:27:0B:60:4E
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 0199FBEB407956AF784BB08A2199A5B99EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: xmUvKN1aqIRC/E0xxXL8dSmQT4KzLRgTuLD27Hz7taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:40:79:56:af:78:4b:b0:8a:21:99:a5:b9:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=f0011b207b02f79473398565b1ad8bfd270b604e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:f5:b6:14:34:b5:0b:02:fa:8e:b8:7c:24:
6d:ae:2c:82:1c:05:d7:af:65:85:89:cf:eb:47:de:
22:54:45:ea:be:48:aa:13:85:d4:50:07:ef:1e:f6:
79:f6:8a:2f:d1:0e:20:f0:44:5a:ab:c4:2b:99:7d:
96:c3:49:63:c8:f0:95:09:fa:97:35:99:53:b9:4e:
11:1f:84:f8:2e:26:31:f2:c0:47:9f:a6:9d:06:a5:
9f:aa:12:8e:17:fc:2c:48:6b:c4:ea:4c:b6:7d:66:
18:71:22:90:64:81:0c:0d:4b:ec:5c:9c:bc:2e:f8:
28:d9:b0:a6:ef:1e:7e:07:86:8f:f8:93:66:55:59:
35:64:e5:75:4f:36:8a:fd:0b:a8:79:83:dd:d8:f6:
56:96:f3:a6:91:dc:1c:70:ca:7b:9d:fc:ba:40:b6:
39:33:58:93:62:ff:39:1d:b7:05:85:23:fa:4c:0b:
d9:f2:f1:3a:44:01:48:e3:1c:46:a3:4c:3f:f2:f6:
0f:2f:bf:bc:38:b9:81:6a:ba:47:fd:c9:3d:e2:69:
6d:98:68:5a:bb:6d:11:9c:44:ac:ee:75:42:4b:50:
4e:a3:f2:ee:99:50:18:69:58:65:03:c2:b7:0f:57:
9d:15:30:41:4b:ad:fb:28:db:9d:b6:23:de:ed:0e:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:1B:20:7B:02:F7:94:73:39:85:65:B1:AD:8B:FD:27:0B:60:4E
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:44:12:80:b1:81:1a:e8:7d:ad:fb:73:d4:e7:c7:45:63:28:
e7:40:2e:f7:4d:c8:61:c5:73:5c:77:77:9d:7e:b2:c6:71:b3:
81:af:34:20:55:0d:ad:b1:c8:e4:11:12:21:ef:55:c6:6c:50:
b4:aa:a6:9c:a5:3b:e1:2b:8b:6c:f5:62:54:ae:88:39:85:08:
b1:73:88:2b:62:74:ee:6d:0d:89:e0:f6:c8:0d:b6:3c:25:b2:
52:dc:85:f1:2e:e1:a0:cc:00:c3:47:c3:b7:88:3e:b3:77:27:
69:57:78:aa:9a:97:52:07:7b:10:2c:09:f4:bf:b4:0d:f0:57:
a6:4f:a8:a4:72:64:24:af:83:6d:33:d6:e2:7a:ff:62:f8:ad:
81:b9:1c:9d:ef:1a:ef:6f:3a:13:8a:40:39:9d:ed:58:1f:0e:
81:3e:b5:00:6f:ec:1a:ad:5a:b9:31:72:13:3d:93:29:6a:51:
83:b2:d2:b3:15:cf:bd:04:73:99:74:f0:5a:68:3f:f9:fe:50:
8c:52:c0:8b:d7:50:7a:98:d7:53:ef:ac:61:8f:b3:cd:3e:f5:
1c:4a:ad:87:98:24:be:d4:1f:fb:31:4c:96:06:14:4b:11:72:
ab:a7:b7:50:53:d2:0c:d6:e2:10:a8:3e:8a:16:be:d6:50:c0:
15:21:8f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760B5Vq94S7CKIZmluZ72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZDk3OWY4OTJmZWI4MTk5NzZhMjVmZTk0N2Y1ZDdhZjM3
ZWNjN2QwHhcNMjUxMDE5MTAwMjAyWhcNMjUxMDIwMTAwMjAyWjAzMTEwLwYDVQQD
EyhmMDAxMWIyMDdiMDJmNzk0NzMzOTg1NjViMWFkOGJmZDI3MGI2MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAH1thQ0tQsC+o64fCRtriyCHAXX
r2WFic/rR94iVEXqvkiqE4XUUAfvHvZ59oov0Q4g8ERaq8QrmX2Ww0ljyPCVCfqX
NZlTuU4RH4T4LiYx8sBHn6adBqWfqhKOF/wsSGvE6ky2fWYYcSKQZIEMDUvsXJy8
Lvgo2bCm7x5+B4aP+JNmVVk1ZOV1TzaK/QuoeYPd2PZWlvOmkdwccMp7nfy6QLY5
M1iTYv85HbcFhSP6TAvZ8vE6RAFI4xxGo0w/8vYPL7+8OLmBarpH/ck94mltmGha
u20RnESs7nVCS1BOo/LumVAYaVhlA8K3D1edFTBBS637KNudtiPe7Q4QqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPABGyB7AveUczmFZbGti/0nC2BOMB8GA1UdIwQY
MBaAFBjZefiS/rgZl2ol/pR/XXrzfsx9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAt
YWU2YWJjZTU5YWMxLzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9mNTBiOTAtZjAzMS00MTJlLWEwNDAtYWU2YWJjZTU5YWMx
LzEvR05sNS1KTC11Qm1YYWlYLWxIOWRldk4tekgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkQSgLGB
Guh9rftz1OfHRWMo50Au903IYcVzXHd3nX6yxnGzga80IFUNrbHI5BESIe9VxmxQ
tKqmnKU74SuLbPViVK6IOYUIsXOIK2J07m0NieD2yA22PCWyUtyF8S7hoMwAw0fD
t4g+s3cnaVd4qpqXUgd7ECwJ9L+0DfBXpk+opHJkJK+DbTPW4nr/Yvitgbkcne8a
7286E4pAOZ3tWB8OgT61AG/sGq1auTFyEz2TKWpRg7LSsxXPvQRzmXTwWmg/+f5Q
jFLAi9dQepjXU++sYY+zzT71HEqth5gkvtQf+zFMlgYUSxFyq6e3UFPSDNbiEKg+
iha+1lDAFSGPxA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:45 2025 by rpki-client