Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: Rh/wI0+9kJvCVYpBm8todn+3X6YuX3NCSBS3fvpDKQ4=
Subject key identifier: A5:DC:C6:7E:1F:26:02:62:A4:A3:93:A2:53:1E:A6:A1:E6:B1:1B:47
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 0199FD344DF92E819E75FC3274B506253004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 13C4
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: ubNrhLPhgTvDyD5QTBdVJMcifqK8LfP7PxwOBtDH7uA=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4d:f9:2e:81:9e:75:fc:32:74:b5:06:25:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=a5dcc67e1f260262a4a393a2531ea6a1e6b11b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:29:26:05:4c:9a:fb:4d:5c:58:bb:30:64:
3c:17:86:c4:a6:08:08:e9:73:34:1a:06:97:e6:91:
6e:db:24:1e:5a:90:96:5c:3f:8f:fd:c9:64:e0:b1:
d4:3c:b6:3a:ad:cd:ad:9f:ce:b7:8e:09:af:3f:ed:
72:9e:86:c8:77:16:56:7d:79:0c:7f:cd:71:fe:8f:
f4:c4:01:28:1d:cd:88:52:09:5e:5a:f4:ad:93:bd:
9f:c7:dc:08:6f:50:24:19:01:83:6d:fc:10:d5:9f:
e6:b9:a6:ee:b2:74:7c:99:67:45:69:d8:89:ff:d1:
e7:19:e9:2d:20:ac:42:82:ff:09:f9:55:ad:56:32:
8f:e6:ed:e7:3b:0e:4b:85:ec:76:8d:0f:e2:d6:8e:
ce:c8:83:ed:b6:52:eb:7d:8d:0a:20:02:de:13:c0:
41:0e:19:1c:8d:d4:56:8b:6c:68:72:ee:ac:19:a9:
59:19:66:f7:7c:74:b1:d5:00:b8:67:65:21:15:2f:
1d:2d:8d:0f:cf:ce:8a:ef:07:e1:0a:f1:f8:f1:f2:
24:ff:66:59:4e:4a:b4:7d:2a:54:0e:0b:d2:66:3f:
4c:8f:2d:69:bc:9f:ff:0e:d1:03:5c:60:43:4e:ed:
8c:70:0e:ec:95:f0:5f:53:b7:6d:c2:7a:67:d1:e7:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:C6:7E:1F:26:02:62:A4:A3:93:A2:53:1E:A6:A1:E6:B1:1B:47
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:f6:30:7d:01:bf:a5:f3:75:d7:6a:58:3e:ff:0c:22:1a:
2e:15:71:c1:5c:3d:1a:2b:b3:78:ff:56:c6:b6:a1:43:a9:6a:
95:13:7a:10:52:68:7b:ac:b9:bb:e6:20:ff:ef:67:40:ec:61:
a4:06:82:15:66:2c:73:14:b0:86:38:0b:2a:3b:cf:cd:2a:6e:
88:80:e7:00:d4:c7:58:9a:e2:83:0c:a0:92:1a:95:9a:71:e0:
f0:24:aa:e4:90:ba:e6:f1:97:99:34:b0:0b:86:30:3f:43:43:
22:92:1c:2a:9d:a5:c7:ba:75:a1:f9:a7:f0:dd:3f:dc:5a:2c:
39:bd:c2:f9:37:95:e4:02:93:0d:5d:25:b6:60:e3:30:e0:1a:
27:31:6c:8c:f3:87:46:b6:bd:7e:40:8e:45:6c:f6:51:00:b2:
35:ca:e3:1c:7d:d4:0a:c1:c3:af:ee:c6:32:20:99:16:00:e1:
1c:c6:49:6d:15:a9:84:20:9b:73:54:4b:19:5f:2d:98:90:e3:
8b:38:4e:28:bd:f3:97:ac:cc:d7:ef:67:ea:8d:3d:58:b5:4c:
bb:91:77:f3:fc:7e:80:ae:df:5d:c2:74:30:33:20:6f:7b:e9:
d0:c7:f8:11:b7:22:8d:8a:7e:c9:af:8f:27:d3:22:a9:19:5b:
38:24:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:50 2025 by rpki-client