Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: eNNRfVJis1nXGpT5fbgCoDIZmoqTPXUBf86/EOwGBfs=
Subject key identifier: 21:79:13:17:6F:F6:E7:8D:78:1D:A3:F1:62:CF:E1:D4:57:EF:72:C7
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 0199FC21C33F273AA34E7CCEC8F2B359FA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: ZUaS0yb0Sbv7Nj0diT6GjdgAXVc6vnkB1fVuTvJgnow=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:3f:27:3a:a3:4e:7c:ce:c8:f2:b3:59:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=217913176ff6e78d781da3f162cfe1d457ef72c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:5e:81:5f:2c:c3:6d:0a:78:f6:06:79:73:
43:e7:d6:c4:f2:cd:46:12:c1:8c:4e:91:fb:95:8b:
17:8f:b3:99:b6:e0:40:d3:31:e3:a1:52:5e:2c:f3:
d7:5a:13:f0:d8:6d:5f:e3:cd:da:bb:49:7c:98:fa:
ca:99:8f:2a:a0:9c:db:4b:0a:e1:78:de:4f:97:cd:
7d:9e:8c:72:a2:dd:28:85:29:b3:e7:00:b3:41:73:
79:2d:51:63:eb:c8:8c:1e:6a:7e:b1:c8:8a:e7:4d:
93:b9:07:ce:53:fc:7c:11:75:68:3b:83:80:1c:d5:
2e:15:8b:94:5c:1d:c1:6b:c3:b2:4b:80:05:47:bb:
b1:e0:ba:90:ae:50:33:9f:33:bf:b2:7d:1f:38:1f:
4a:91:32:9b:28:d1:b2:45:b6:31:57:6e:75:27:e7:
a4:81:02:1d:3d:f2:1c:ba:4f:7c:c4:27:2c:1b:b3:
a3:3d:5b:29:0a:9c:fb:eb:c6:57:34:71:4b:bd:1f:
c3:02:bb:5e:69:c8:02:91:54:8f:27:9c:a6:3c:7f:
17:9d:ed:72:54:84:c8:05:53:a5:30:57:0a:75:48:
30:78:a7:6f:20:b9:85:4f:2c:f1:39:53:eb:5a:19:
7c:df:db:4a:87:e5:de:3d:ba:8b:78:b5:d5:2d:53:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:13:17:6F:F6:E7:8D:78:1D:A3:F1:62:CF:E1:D4:57:EF:72:C7
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6c:50:d9:f4:ed:a9:54:c9:83:0d:ae:f8:c4:9e:87:27:e4:
a0:5f:d8:47:df:af:d0:f8:a3:44:74:2b:71:36:30:61:f8:78:
59:13:c4:7d:45:88:60:c0:0f:32:03:ee:28:fc:13:74:8d:e9:
2c:29:c3:f0:8a:4a:b3:43:ac:e9:cb:21:f5:71:fb:12:5b:cd:
66:a0:d0:87:cb:fe:da:13:8a:b3:ab:0f:af:b4:b5:1b:1c:68:
ee:79:30:03:69:27:6a:ab:43:65:c5:34:a2:9f:bc:29:c0:4d:
06:e6:18:95:91:15:ed:6c:cb:19:54:4e:70:c1:ce:17:01:8a:
e8:dd:b1:93:0e:ff:63:ce:d4:18:82:ad:1e:97:2d:6b:4e:d0:
a7:c3:7b:49:d0:62:24:03:72:ce:6b:ad:47:dd:e1:8a:d5:a9:
6d:ea:ce:8b:b3:5c:55:eb:e0:1f:10:ea:43:60:a4:67:37:3c:
87:8b:1a:0a:c8:c6:59:3f:a6:78:e9:08:3c:60:d1:79:78:75:
67:c5:64:82:61:65:2d:07:31:aa:ac:9b:80:98:d3:77:7d:91:
40:ff:15:7e:e3:78:b4:51:3a:c9:8f:81:e1:9c:8c:fd:e9:e5:
15:62:9a:69:2d:a9:8f:f3:39:e6:54:7d:75:a3:9d:26:3a:0a:
13:f9:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:15 2025 by rpki-client