Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: X0HDeRt9gJEw54B6jnz1HihJWRGF77vwq3KMffiKAXc=
Subject key identifier: 93:B9:2A:75:C7:8A:A1:9D:EF:DC:9E:63:04:33:82:D2:1C:22:B0:BE
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 0199FCC677FFC3FD33B59B5DC0D94A8628FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 0F3B
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: iDpDjFwCFjeOCZYCCWusoDJqmjsZ7Ad1KiAsbaKoxmU=)
2: Kot_9W-z5W9clQssyO_RwTkY8os.roa (hash: RiAmjKyPe+jYgz0emcbcNd9sovJ3TU3wuyEDxRv4KU8=)
3: T8wfyMdVYO2pjTxLu-sXHav7xb4.roa (hash: wl6nwJQYbPdR2wx0aUH8mDWuK+w6c/DDvIQ/E5ZhcW8=)
4: f1RZXAhEg31a-K2NYzsPeQqdHwI.roa (hash: 08m92bP9sI2GbA9p2mUsOu1DMSTzd+WdkX5Gq/lzuNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:77:ff:c3:fd:33:b5:9b:5d:c0:d9:4a:86:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=93b92a75c78aa19defdc9e63043382d21c22b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:77:d1:48:12:5c:99:ba:de:42:c4:49:33:
a1:09:b5:a7:cb:48:21:c9:3d:4e:11:bc:4d:18:79:
47:74:2c:59:49:f0:87:54:98:ea:4f:27:f1:2f:ef:
6f:4d:b4:22:64:ee:d5:12:85:4e:1e:95:5d:93:98:
53:6b:46:06:d8:8a:20:64:dd:86:97:ec:9e:fb:31:
e7:c0:01:0f:1c:06:a7:40:b0:b3:fe:b7:47:32:55:
34:8c:c7:aa:fc:b3:51:83:50:37:b9:df:b7:2f:f8:
c8:a3:b2:83:4b:fe:c3:8e:96:f8:84:84:7c:2d:a1:
36:3d:a4:bf:a6:50:ec:9f:bf:ac:2a:f3:9f:84:44:
b4:57:0a:d4:40:b0:5d:f0:9d:57:c7:63:be:b2:42:
be:c3:cb:3c:0d:3f:51:8f:e9:42:e0:68:5b:03:7c:
d8:99:e2:50:41:29:f0:f0:53:35:b5:0e:d6:0e:d9:
ef:f0:76:05:60:4e:7d:ba:c5:71:ee:b6:50:86:a3:
b7:d6:b1:d8:85:79:01:b5:56:63:a5:c9:08:f9:35:
ff:86:ca:33:0b:08:6d:eb:6d:3b:9d:fa:0f:f6:5c:
38:84:62:28:fc:4c:a6:4d:96:0e:84:f4:93:07:4e:
49:d5:f5:b3:75:ce:9f:d5:f1:01:75:1f:01:ae:be:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:2A:75:C7:8A:A1:9D:EF:DC:9E:63:04:33:82:D2:1C:22:B0:BE
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:6d:1e:74:f6:a3:90:e6:6d:39:14:ce:00:43:aa:e8:0c:
ba:10:88:7d:87:4b:63:f4:42:6f:ef:19:a4:b0:ce:03:73:54:
f3:24:85:de:91:19:34:78:af:fd:c7:49:48:6d:f3:22:85:ba:
b8:27:aa:27:62:ae:c7:57:35:66:a3:ea:ef:b8:0c:f1:24:12:
ab:69:5f:51:a5:eb:33:97:00:90:6b:64:12:e5:01:a8:9d:fa:
ba:10:2b:06:87:1d:81:05:25:5c:09:a7:1c:07:ae:be:82:3c:
bd:da:2b:2a:2d:af:55:70:f1:9a:e8:7a:79:fb:29:ec:61:79:
42:dd:55:7f:c3:2c:70:42:d4:d3:6c:54:6d:dc:78:a5:dd:7d:
e6:3b:92:bf:f8:0a:03:16:10:82:ce:dd:6b:fa:41:dc:3a:f3:
12:23:18:68:1c:48:59:fb:07:4e:46:ca:fe:4a:d8:3c:7d:f1:
e5:e1:77:d4:81:df:2b:1e:38:fb:6d:0d:4a:27:2d:b9:20:66:
ab:94:fb:12:1f:67:f5:a8:3e:5d:09:5a:51:08:25:78:e4:fe:
55:37:9e:4c:a7:da:d2:65:da:2e:e8:d2:dd:28:ac:30:aa:35:
f0:6d:cf:93:dc:d9:bb:57:51:42:79:4e:49:e3:64:35:cb:9b:
a4:8b:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:37 2025 by rpki-client