
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
File: GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft (raw, json)
Hash identifier: hUUjQKKVg8ZSftmqKiPkcCxJUhgd/+JIt34BtmG0jwA=
Subject key identifier: D3:10:58:48:1C:16:DD:75:52:0C:6C:B1:5F:7E:4E:33:D8:DE:E6:94
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial: 0199FDD95AE11E9242F768EBA78FF1690498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
Manifest number: 1629
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl (hash: PDowrUH111u8QAy4id4cTGYj6ezje6bmFA91GwdORzM=)
2: tSP2AeN0TTzbNNS7U3ruVH8nDu8.roa (hash: 294+y86DARdCbg7v10Yetnf9+9TavVZ0zHk0HRwiUus=)
3: uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa (hash: lyMZrr+5NelerEo1KC88KcN/f2W5wCKFdUhMA++xkyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5a:e1:1e:92:42:f7:68:eb:a7:8f:f1:69:04:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=d31058481c16dd75520c6cb15f7e4e33d8dee694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:8b:e2:dd:75:13:11:b7:df:aa:8c:a2:a2:
71:1a:62:0b:a6:13:4f:97:72:b2:49:e3:d4:0a:6f:
db:e1:11:c8:8c:ac:23:2f:4d:42:3b:c1:6a:85:fc:
43:b5:dd:50:0b:2c:aa:95:6e:f0:ec:4d:aa:b6:77:
7b:2b:68:e8:a4:fa:25:3e:85:b9:03:e2:e3:df:8f:
50:45:a0:fd:cc:07:1d:4f:04:47:d1:ed:31:ce:eb:
1e:42:67:e6:89:18:28:ea:2e:86:0c:b9:58:86:0f:
7a:91:7f:36:5f:90:50:cf:70:d5:62:17:83:c6:12:
02:03:76:dd:bb:0b:bb:e5:b0:9d:4b:95:b9:03:82:
72:5f:0c:31:e2:76:32:58:9c:f4:80:41:d0:37:3b:
56:67:08:66:eb:aa:8c:bb:e6:df:63:1c:d6:6d:3f:
58:5b:12:32:6f:6f:d5:2c:89:b7:db:bf:01:b4:02:
3b:8e:b1:d2:f4:95:2b:b5:85:ca:60:8f:68:ac:38:
a9:f7:8b:00:ca:7e:79:a3:3d:d6:65:62:4b:2a:fb:
44:bd:d8:6e:85:ce:db:eb:d1:39:57:46:8b:ae:4d:
08:4d:7a:fc:a8:63:26:31:8c:ee:d8:a8:b3:15:af:
39:43:71:a8:6b:5a:92:8c:bd:63:2d:8b:58:43:3f:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:10:58:48:1C:16:DD:75:52:0C:6C:B1:5F:7E:4E:33:D8:DE:E6:94
X509v3 Authority Key Identifier:
keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:c9:88:17:05:85:0f:ae:a6:50:61:fa:d4:c2:52:70:7e:
e7:06:71:60:26:b2:e4:6e:ca:0a:3b:1c:29:d2:1c:3a:8c:1d:
c3:bb:ad:8f:7e:2f:af:41:2f:19:0b:61:c9:38:05:7c:54:3c:
73:8b:6e:0c:bb:81:9e:b6:fa:26:2c:99:20:dc:4f:d0:bf:3f:
63:15:9d:ba:16:8f:82:87:cb:a4:8a:65:3f:39:01:1a:68:a3:
ed:29:05:b4:99:22:0d:b3:fa:3f:4e:7b:ac:79:48:e4:0d:a8:
a0:ed:b9:1c:0f:34:72:8c:bc:13:bc:7b:36:d5:82:42:b4:e3:
eb:4c:13:b6:fe:54:23:5f:81:8a:b7:b9:7d:14:37:49:69:b7:
36:4a:34:78:70:2f:73:88:6d:a4:9b:69:99:03:50:2e:44:ce:
c8:00:4d:66:52:a7:a5:3e:ce:43:be:16:97:ee:59:82:57:6a:
62:84:36:d0:95:a4:08:9c:65:b6:63:08:41:65:7d:1f:98:44:
bd:17:ea:b7:05:ad:d7:0d:86:e7:63:d8:bb:5b:e5:45:ac:de:
1d:7a:52:32:ec:98:9c:3d:bc:0a:69:6a:70:7a:64:08:6d:aa:
85:09:97:dd:ef:c1:a1:ec:3a:33:e3:0a:94:79:ab:c2:f0:a3:
8a:be:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:38 2025 by rpki-client