
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: KSbaUOZth4wUGE04iRKmDFSP3FztFizl1HbxBnYbvSw=
Subject key identifier: 0D:29:B1:CD:04:EE:48:AD:1B:FB:AA:DA:B1:5E:4B:A4:C6:21:31:F8
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 0199FE7D9DAE66C95BC32D5E420E9941E5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0DB6
Signing time: Sun 19 Oct 2025 22:01:09 +0000
Manifest this update: Sun 19 Oct 2025 22:01:09 +0000
Manifest next update: Mon 20 Oct 2025 22:01:09 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: Sk/Uq0lmgxvBovhhgrCM9n0hL+KUE9SGyjvo0J15BBQ=)
2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9d:ae:66:c9:5b:c3:2d:5e:42:0e:99:41:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Oct 19 22:01:09 2025 GMT
Not After : Oct 20 22:01:09 2025 GMT
Subject: CN=0d29b1cd04ee48ad1bfbaadab15e4ba4c62131f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:f4:29:d1:b1:67:d7:55:48:ef:64:0c:b6:
96:c0:86:29:1f:5d:c6:09:4b:b6:9b:7b:73:78:bc:
02:90:60:6c:6c:f1:31:99:06:bf:80:1d:9b:e7:57:
ca:34:49:f1:dd:d8:ed:04:af:90:93:c1:2a:a5:e8:
15:9c:2e:e7:0a:d2:29:ff:9c:a6:5b:f9:f9:5b:d8:
f1:29:20:3b:67:27:8b:8b:c6:5b:84:6c:82:c7:a9:
b8:0c:30:16:fa:6b:1f:bd:45:1f:70:f6:f0:2b:97:
d3:92:d1:81:58:42:7f:f4:6d:67:95:e1:30:ec:00:
b6:b0:84:13:37:d4:0d:1c:9f:aa:40:27:81:87:43:
9a:a7:d8:46:1d:8c:dc:9b:4d:38:1b:db:eb:08:10:
f8:a3:3c:26:9b:4f:ea:c2:07:df:c5:37:70:82:da:
79:60:68:62:1e:1d:4c:9e:1a:d3:15:bb:d0:cf:df:
5f:bb:40:10:71:93:ad:d6:71:03:ee:5b:94:ce:cd:
f8:23:7b:6c:38:8e:9d:33:1f:43:7b:c6:8d:9a:23:
01:2e:e1:2f:ac:ee:46:78:75:d5:0b:c3:ba:f6:e3:
45:4f:45:55:40:89:71:6c:b7:7e:9a:ec:31:f8:2f:
4e:47:c6:51:47:cc:88:dd:5b:06:5e:30:72:31:28:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:B1:CD:04:EE:48:AD:1B:FB:AA:DA:B1:5E:4B:A4:C6:21:31:F8
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:8a:c0:2d:c6:34:6b:0f:4f:c9:24:8f:d5:5b:09:c1:5e:
f9:00:35:d1:74:05:c9:99:a4:b7:bf:9a:4b:75:d9:4b:4c:4c:
30:e8:ec:c8:f5:d4:2a:6f:35:34:48:af:54:c0:60:86:e0:8c:
4c:14:00:ac:2f:46:ba:cb:d9:b1:d9:04:7e:e4:2a:3f:6a:a7:
5f:03:75:84:2d:0b:ae:4a:4d:a8:46:fc:8a:2d:ea:5a:be:87:
c6:2f:d8:ac:b7:b8:9d:4e:0f:ee:2d:04:23:ea:17:a1:2a:b5:
85:f4:d5:66:fc:9c:c5:fe:95:d2:7c:8d:98:82:5c:1b:cc:92:
50:14:ad:42:1e:a8:a6:0a:9f:ce:f0:43:07:bd:0c:7c:79:21:
c6:b5:0a:30:29:16:64:d7:c2:ee:83:d2:c0:5d:ee:0d:04:ea:
c1:ce:3f:d0:b0:cb:58:29:cb:90:9a:ae:c0:2f:8c:23:03:29:
ec:6e:7c:bd:71:52:2a:fc:9e:0f:91:d8:82:65:b3:3b:6d:19:
ad:6b:25:0b:95:b0:ae:5a:79:1c:35:1a:c6:5b:0f:97:f7:d0:
2d:a3:1f:7d:c1:ad:0e:3d:a9:29:e1:a2:b8:11:df:d2:d7:52:
e9:f6:f6:f4:06:d0:4a:4b:24:0a:a0:52:15:00:ee:9d:9b:59:
73:90:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:52 2025 by rpki-client