Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: MXBfb26KGJCslDdd0jZMUqhfwOL4l4OrpzlClMc0ahA=
Subject key identifier: 17:D6:E9:BA:D7:24:72:A0:CA:44:27:4A:C5:57:DA:C2:6A:97:50:1B
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 0199FB4580D43E223F0E1B4A5887697237D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0E92
Signing time: Sun 19 Oct 2025 07:01:00 +0000
Manifest this update: Sun 19 Oct 2025 07:01:00 +0000
Manifest next update: Mon 20 Oct 2025 07:01:00 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: mv7AlKAWlH7nWR89a69v43N2Gt+KQM1pXRqIp70Y2zk=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:80:d4:3e:22:3f:0e:1b:4a:58:87:69:72:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 19 07:01:00 2025 GMT
Not After : Oct 20 07:01:00 2025 GMT
Subject: CN=17d6e9bad72472a0ca44274ac557dac26a97501b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:23:2d:2e:0e:61:b4:be:7c:d5:35:4d:6d:
1a:06:4b:91:cb:4a:eb:cf:56:ec:06:63:a1:3b:b6:
c7:72:a0:45:9c:b4:e0:d9:a8:82:1d:24:06:72:70:
0d:a3:50:46:53:3e:e9:b4:a3:78:35:84:08:bf:3f:
71:a9:c5:aa:47:ea:2c:52:66:a9:fb:78:62:9b:63:
aa:17:ac:d2:86:15:80:7d:e7:5d:ad:78:77:6b:a7:
0e:28:e7:db:a5:96:bd:88:00:8d:ca:91:bb:29:8e:
12:cb:6a:1f:86:ed:8b:1d:c1:66:d5:7a:64:0d:f6:
b2:85:bd:a5:d1:6a:6d:d6:b4:f7:74:09:82:d4:a2:
aa:41:5a:33:c9:a5:de:83:65:29:cd:ec:48:62:03:
e5:76:91:f8:7a:7b:63:90:a9:da:57:0d:a4:54:0a:
c1:28:58:c8:24:4b:3a:5e:88:1c:96:61:24:38:93:
fb:fb:b8:be:43:3b:0c:04:03:ed:71:fb:a5:b0:a5:
e1:d9:ae:0d:92:4e:64:23:f0:5e:68:93:d5:7f:2d:
ce:7c:c4:15:bb:c6:f9:28:38:14:d8:86:da:06:8f:
af:16:95:10:bb:0a:b3:15:49:2a:90:75:8a:94:5e:
ff:d5:d2:2a:75:ae:59:f5:aa:ad:88:9f:4e:30:92:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:E9:BA:D7:24:72:A0:CA:44:27:4A:C5:57:DA:C2:6A:97:50:1B
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3f:75:6b:52:82:f0:b4:cd:58:71:11:8a:21:33:6f:21:54:
bc:dc:d1:5d:7f:88:ac:ae:13:2d:68:19:ec:b0:89:5e:15:98:
af:8c:60:7f:ad:62:90:35:d6:f7:89:29:58:9d:10:ee:ad:38:
30:02:61:2c:9d:fe:7b:e3:6c:14:33:df:85:82:98:36:3f:78:
e9:37:b7:3c:09:70:58:36:f0:ec:cd:a1:e9:53:6f:0e:de:b8:
4f:b1:3e:0b:4a:ef:4c:7c:71:0b:5f:c5:4a:14:eb:1d:1c:a5:
92:08:db:f1:9a:44:9a:b6:ca:1b:2d:eb:77:cd:5f:59:78:ee:
5a:80:0b:10:95:de:36:f4:e0:a1:e1:96:83:cf:68:f3:04:1e:
df:1f:3e:a1:80:ef:27:b1:76:b5:68:51:29:4c:4a:82:c4:51:
d3:7f:40:f3:b6:82:d0:a2:10:58:d9:63:ea:2c:fd:6b:fa:23:
1c:b8:32:e7:65:0a:bb:eb:db:86:6a:c3:60:12:91:6a:41:d7:
24:9b:40:0f:be:d4:4c:c4:a6:81:d5:b8:f1:c0:9e:b3:95:92:
11:2b:93:b3:8c:13:f5:ca:65:a9:d9:c3:8c:3c:b9:a2:a2:3c:
27:42:63:70:f5:bd:be:63:8b:21:4a:8d:2b:d6:db:1e:e1:0e:
f1:52:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:16 2025 by rpki-client