
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: Yrty1OSBgVDnYFL7g08JXkeqUTUpHI/6BaYGYHR598Y=
Subject key identifier: BF:0C:6A:A7:B7:5B:14:1F:83:81:FD:4C:FB:72:01:2F:B6:B7:7F:B4
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0199FC58F98D19F462F2DF101919E8C607F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 1+n6f+ZSBN426GKqnhwojM3POUvBeWmI2H2w5U+UOU8=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f9:8d:19:f4:62:f2:df:10:19:19:e8:c6:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=bf0c6aa7b75b141f8381fd4cfb72012fb6b77fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:5e:9c:64:bc:79:18:a0:1b:99:47:13:2e:
68:3f:04:9b:0e:c8:49:ce:0c:a7:4b:ee:dd:d3:38:
0e:02:09:7d:21:e1:be:a1:c0:0e:1d:08:a7:48:81:
1d:49:45:ad:34:37:56:fa:58:3a:a0:cf:88:26:8e:
74:c6:4d:f6:68:68:c6:a8:c8:ab:1b:ba:47:51:4f:
a3:3e:db:37:3f:13:05:4a:6f:34:6b:bd:df:95:cc:
52:46:a7:d4:d7:c0:0b:3f:f8:21:9e:41:b9:6e:f1:
7b:fa:5e:85:35:b1:0b:f2:b4:8c:fb:a0:6b:84:c7:
e0:74:39:5f:16:61:68:09:13:41:6d:6c:01:bc:24:
e4:52:3d:d4:16:bb:c1:9e:a1:f9:c7:cc:00:79:bd:
02:37:98:78:d3:ab:23:18:c4:69:71:59:98:3e:97:
69:1e:46:fe:77:f9:0f:a6:c0:db:f4:e9:0a:09:ce:
f9:d5:e0:57:e7:d6:6b:c8:ad:1a:f5:3c:7a:8f:a5:
0c:07:a8:cb:f7:b5:43:4b:b7:16:fa:6f:d1:75:c4:
f9:3d:a4:3e:24:eb:ff:7d:b1:71:62:4a:77:3a:91:
27:9a:34:c3:30:30:2a:bf:24:ed:e5:e0:bf:88:d4:
0c:14:c6:f6:02:a4:3a:c5:e4:ba:f0:e4:ca:86:fe:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0C:6A:A7:B7:5B:14:1F:83:81:FD:4C:FB:72:01:2F:B6:B7:7F:B4
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:d7:62:59:91:40:7f:d2:83:59:fc:84:39:af:c6:37:e2:
12:87:84:8e:f4:22:e9:25:a4:91:91:01:13:f2:53:6a:d2:05:
28:75:e4:29:59:60:52:74:99:70:16:44:5c:71:0c:86:c6:61:
ce:0e:1a:67:3d:b4:db:e4:60:45:fd:67:70:e5:69:e0:c3:b7:
c6:80:27:12:63:3c:47:99:ac:13:0c:58:5b:6c:f1:69:39:18:
32:3c:9e:56:0f:26:45:4f:b6:ff:da:58:92:7d:f2:96:83:a1:
0c:fb:b4:c3:de:fe:8b:04:45:9d:d3:ad:4b:54:da:77:1b:85:
41:e4:ad:4f:e5:64:63:88:ba:c9:a7:df:c2:a1:79:2f:c3:8d:
68:c7:6f:8c:16:f3:78:e0:07:c9:32:05:99:0d:ba:74:ed:b5:
5a:e3:4f:6a:92:dc:5a:f1:ce:59:7a:8e:ec:0d:63:7a:88:26:
7e:11:07:bf:a0:cd:39:3f:97:79:92:ac:a6:38:fc:ce:17:01:
41:3f:2d:ef:f9:f8:77:a5:2f:b7:ee:f3:e3:98:e3:f2:96:6a:
57:b4:18:f3:61:64:79:8f:6b:9d:ff:df:80:08:3c:4c:c3:ca:
5e:07:47:d6:64:6a:6c:67:01:64:80:9a:8e:21:4f:2e:18:5a:
eb:e1:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:18 2025 by rpki-client