Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: +oBX1orWuTQD2LSDwwdICqQ7oENEve87gc6jT6xgtWc=
Subject key identifier: B2:75:D4:97:21:8B:53:57:BE:F4:E5:36:BB:8B:41:92:4A:56:AA:4F
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019A01B5E3FF29F51322607C4489F571101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 13:01:28 +0000
Manifest this update: Mon 20 Oct 2025 13:01:28 +0000
Manifest next update: Tue 21 Oct 2025 13:01:28 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: b847Jyf3JBwx77QQB585ESGhZG1b4mg5uMdVm04eIOU=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:e3:ff:29:f5:13:22:60:7c:44:89:f5:71:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Oct 20 13:01:28 2025 GMT
Not After : Oct 21 13:01:28 2025 GMT
Subject: CN=b275d497218b5357bef4e536bb8b41924a56aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:15:01:33:6d:17:40:02:1c:08:70:62:58:
cb:bc:13:d4:07:9c:8d:d7:2f:f7:7a:e1:93:18:d4:
21:33:19:d6:20:fc:2c:ab:6d:e9:7d:e7:99:79:bc:
a3:10:d7:f5:c4:ab:fa:47:1a:fa:2f:55:f8:9d:02:
b9:ed:c6:cf:b8:46:5f:8a:2c:cb:0c:42:26:4a:26:
ab:7e:1c:1e:ec:b0:87:7c:c0:49:aa:ea:0f:6f:69:
2c:b2:eb:0d:14:1d:9b:04:2c:90:d9:74:e5:7e:94:
b4:bf:97:94:06:02:10:20:e3:fe:39:2d:f2:a4:10:
dc:d2:b1:02:9f:08:8a:11:98:71:ec:cf:2e:e2:20:
c1:62:06:3b:f9:97:e4:3c:9f:bf:b5:67:e5:38:3f:
75:0d:fc:28:74:97:2d:23:2a:be:66:8d:cd:f4:89:
f0:e6:1c:e6:31:e8:fd:ba:87:df:44:16:0b:12:53:
9b:e3:79:41:f2:89:db:26:69:44:1b:55:9c:12:8f:
83:5e:83:ff:62:f4:d9:37:be:87:cc:ef:93:e9:05:
64:cf:75:63:05:ad:e9:e3:3b:52:9b:10:24:a0:59:
6b:8f:61:c7:c1:c8:3a:53:20:57:05:68:03:b3:75:
7f:cb:2b:a1:08:4f:33:5a:bd:3b:0b:49:90:b1:28:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:D4:97:21:8B:53:57:BE:F4:E5:36:BB:8B:41:92:4A:56:AA:4F
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1c:ce:60:a8:3b:f1:ae:71:72:e9:a0:30:58:44:73:b2:c0:
64:af:93:ef:54:10:75:99:9f:69:a7:e3:1a:05:b0:c1:1a:45:
0b:c7:23:57:2a:48:54:ca:c5:2d:35:3c:56:8a:5b:78:2f:3f:
85:52:28:39:93:e7:e3:89:a2:cb:d2:05:b7:d0:68:17:5b:a4:
52:56:6c:62:70:13:66:bb:a4:43:72:73:73:2b:28:0c:ee:d4:
76:86:a9:d5:41:4c:6c:e2:a5:9f:3b:63:cb:2f:3c:37:8a:37:
39:c1:2b:37:88:09:83:c0:47:88:43:4f:c0:bb:40:83:54:87:
b0:38:3a:f9:41:70:3f:19:ca:1d:c6:f2:3f:f2:6a:ae:01:d5:
25:20:85:02:78:6e:7e:6c:e6:4c:0b:da:fb:6b:bf:c9:66:7b:
65:3b:d3:a8:5c:21:d2:7c:39:e6:b4:09:94:3b:a0:ba:a5:b1:
a5:59:68:74:49:58:cb:2c:46:29:8e:e8:7a:5a:91:34:0e:03:
42:38:d0:70:2a:2b:3a:89:e4:f2:66:45:20:31:9d:9a:bb:b4:
89:da:59:42:89:46:67:e4:5e:2d:63:5a:af:92:de:6c:3a:07:
11:4b:d4:38:f4:e3:d9:45:10:16:ae:d4:a2:85:0c:de:c2:c0:
44:80:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:17 2025 by rpki-client