Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: y1XnRr9aS9wppnta7P4xHXClPA030uopkrBf21jLf28=
Subject key identifier: 86:85:DB:55:CF:F0:0E:A7:65:40:FE:A0:85:89:B9:FA:09:F5:E3:66
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0199FFC8891DD1B22874F1AC9B224D00F92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 062A
Signing time: Mon 20 Oct 2025 04:02:36 +0000
Manifest this update: Mon 20 Oct 2025 04:02:36 +0000
Manifest next update: Tue 21 Oct 2025 04:02:36 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: Xa4IcGDdStqt2DeW0GUzGoLakl2haaNo96v4CDfk+uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:89:1d:d1:b2:28:74:f1:ac:9b:22:4d:00:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Oct 20 04:02:36 2025 GMT
Not After : Oct 21 04:02:36 2025 GMT
Subject: CN=8685db55cff00ea76540fea08589b9fa09f5e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:08:78:a9:32:b0:81:03:e8:a2:5a:9a:ea:
d3:c0:97:a1:fd:71:73:8a:12:e4:f3:e2:5c:54:35:
2f:6a:4e:41:e1:a9:53:47:b7:ee:1c:eb:cd:93:fe:
9e:a0:21:a3:49:aa:c7:1e:6a:2c:cf:b0:a2:dc:4c:
e0:5d:b7:db:58:29:9b:d1:f5:a9:c2:0e:5c:00:5d:
a1:72:12:29:b5:4e:ce:85:a0:7c:a9:23:3d:b8:69:
12:b0:dd:d8:71:74:47:7a:8d:a4:b0:f6:db:77:e5:
3a:b4:ae:3b:59:a9:45:03:12:7a:87:7a:6a:cc:dc:
03:53:b1:6d:44:60:0f:9b:6a:14:af:de:e9:aa:77:
fa:84:e9:a3:57:55:3b:99:59:2a:87:30:fa:c6:00:
75:7d:13:c1:4c:23:c7:84:49:6f:c0:33:9c:2a:25:
66:0c:d8:14:9e:5c:49:9f:ed:ca:1c:00:10:c7:3e:
18:9b:93:d3:e3:14:f0:f3:5f:06:c2:cb:eb:f6:a3:
6e:0e:9f:b0:71:69:27:a4:f3:65:27:07:2e:d7:6a:
17:0b:49:61:c6:f5:68:de:19:63:d3:64:fd:a0:f0:
c8:05:c2:a8:76:68:9b:4c:22:07:ad:f4:bc:d3:7c:
44:c7:db:52:bb:55:17:8a:38:ec:65:ad:f8:27:1a:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:DB:55:CF:F0:0E:A7:65:40:FE:A0:85:89:B9:FA:09:F5:E3:66
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:85:0c:29:71:df:b1:64:2f:e0:22:d0:24:06:2f:97:3d:22:
40:5f:cf:ec:54:65:fc:0a:94:e4:6c:e3:09:93:ca:80:48:ca:
38:34:34:24:2c:98:8b:cc:15:dc:bf:9c:6f:52:11:ff:2d:6c:
0f:34:1a:ef:31:d9:71:db:bc:97:5f:35:d8:e9:45:6b:40:2f:
f9:93:53:8a:05:b3:eb:c9:38:bc:31:51:fd:37:2d:80:57:a3:
de:99:c4:f1:d9:d6:ce:15:4f:80:60:7c:19:cc:c5:08:9d:6d:
91:2f:c2:98:29:df:08:9f:0b:ed:c2:93:68:2b:40:e6:df:e1:
45:29:8a:e3:2e:ec:44:d9:ce:8f:28:bb:71:a9:2f:ac:80:6e:
a9:2d:c5:89:33:be:39:37:33:1d:9e:e6:70:b3:c2:19:81:aa:
9f:41:52:f1:39:26:3f:d6:ac:cb:e0:3e:c6:5e:c6:34:ba:e2:
12:ec:5e:7c:82:41:57:17:20:33:f2:82:9e:63:9c:ee:ae:97:
f1:6e:20:7e:cd:ab:b8:0b:01:87:eb:96:9f:c1:fe:94:6b:0a:
f8:31:e2:5c:c9:28:ae:46:81:02:ae:1c:4c:c1:43:55:95:83:
d3:87:c2:6a:6d:6a:38:c8:c5:7f:61:d1:c8:73:2f:33:02:35:
d8:b9:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:45 2025 by rpki-client