Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: z1uqHagzr/cb0b8FT1onWUHm9JCB1fkWLnv1mWQoUiQ=
Subject key identifier: C4:BA:00:11:32:7D:AE:9C:62:92:E6:4F:0E:FE:3C:E8:09:ED:15:70
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 0199FE472D92D45EEF00AAE0FD298D989738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 0666
Signing time: Sun 19 Oct 2025 21:01:41 +0000
Manifest this update: Sun 19 Oct 2025 21:01:41 +0000
Manifest next update: Mon 20 Oct 2025 21:01:41 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: Qt88vbTM8JUwJo34t4vCEYR7toy8JOAZ4TdK9fXggaU=)
2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2d:92:d4:5e:ef:00:aa:e0:fd:29:8d:98:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Oct 19 21:01:41 2025 GMT
Not After : Oct 20 21:01:41 2025 GMT
Subject: CN=c4ba0011327dae9c6292e64f0efe3ce809ed1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:17:d0:a1:b7:f5:47:53:e1:1c:bc:83:68:
43:8a:0f:00:7a:5a:f9:8d:8a:02:b7:1e:37:53:61:
f9:33:fe:c4:21:10:4b:e7:f9:8f:1e:1c:83:e8:98:
d7:78:ba:ff:0c:6f:b6:ba:19:56:d2:f5:fa:a9:5b:
c2:b0:35:d3:43:38:67:7f:13:9e:16:55:da:2d:ef:
98:b3:b9:5e:04:ff:53:bd:a6:66:57:65:24:6e:48:
aa:37:b2:2c:44:0e:77:95:41:e9:9c:aa:9c:8a:89:
3a:6e:55:99:f6:52:c1:2f:ae:95:05:58:d4:2f:4f:
f6:c6:61:ab:0d:d4:e4:05:00:ce:87:78:8b:df:ab:
3c:bb:9a:4a:44:dc:bf:3b:d3:bf:d1:f7:62:e6:e8:
48:71:c9:55:56:4f:cc:d6:68:bb:63:fb:b6:89:33:
9e:f0:20:b7:2b:a9:f8:ff:7e:42:45:6a:d1:c8:29:
a9:9e:d0:ec:75:98:5c:ff:8d:40:70:df:1f:8f:8f:
27:81:f7:2a:c9:51:2f:b1:9e:3b:e2:48:b2:82:ea:
14:a5:f7:81:40:f8:7c:23:fd:23:b6:e6:eb:59:e1:
e4:07:e8:f9:74:95:24:82:2a:fd:67:29:0f:1b:91:
ed:d2:44:b6:3a:27:56:6c:5e:b0:4f:83:e9:16:d9:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BA:00:11:32:7D:AE:9C:62:92:E6:4F:0E:FE:3C:E8:09:ED:15:70
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:8f:35:f9:2b:8d:03:e3:27:17:01:4b:96:a6:20:e0:39:
ea:18:a3:f3:ac:0e:a1:78:c8:af:c9:0b:19:0e:e2:8b:26:08:
e2:cb:25:df:65:32:3f:f3:b7:3b:d5:46:06:67:73:dd:ad:a2:
33:ec:58:83:f5:e4:00:f1:e5:72:41:77:cc:3b:05:73:d7:68:
0f:bd:8f:46:13:24:91:14:2d:88:0f:35:09:43:21:a6:9e:cd:
e6:48:99:06:d4:9c:7f:5b:74:2c:63:21:66:54:35:5f:83:f2:
e5:2b:64:b3:c4:41:98:16:b0:47:92:e5:f1:d6:cf:8e:68:99:
2f:e5:70:e5:ea:36:52:bc:b0:5c:b0:b1:45:02:c4:92:ea:e9:
ab:6c:b6:40:6d:0d:32:d5:89:83:4c:98:6b:27:c5:d9:65:69:
ea:e7:3f:32:80:8b:ea:5d:e3:40:f5:28:0e:82:78:fc:4a:53:
72:5e:3b:cf:8a:59:83:d4:51:c9:e9:b7:b7:56:0d:36:7d:96:
b8:9c:26:e7:89:63:df:f5:76:8a:2d:9f:00:8b:74:43:65:ba:
3c:5d:6c:da:6d:74:fa:23:b9:8b:82:9d:a9:7a:37:00:f7:29:
3e:22:d7:99:08:aa:69:f6:00:9f:9b:31:cd:9e:66:21:e9:0c:
a8:9d:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:08 2025 by rpki-client