Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier: W27tRzf7a0NQlSfPHsQYMssW5fcTbBiH+oVezSpfBZc=
Subject key identifier: F3:F1:9D:20:A2:CE:03:B3:EE:28:D2:7E:66:D7:25:8B:33:66:B9:12
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 0199FBEBE7F8AF97C283AD2A4EC69FE56083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number: 0F3D
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: LxOnorHT1Cd8DPjUU4W5K8NYlFHaPuFh9S8We2EXCc8=)
2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e7:f8:af:97:c2:83:ad:2a:4e:c6:9f:e5:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=f3f19d20a2ce03b3ee28d27e66d7258b3366b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:e0:f8:58:6e:ec:cf:ce:86:16:b4:6d:55:
4c:02:a5:44:7c:78:18:4e:3b:41:11:a3:1e:60:33:
39:12:3d:f8:35:b8:3c:ae:f9:21:f1:77:2e:36:b5:
96:12:fa:49:cb:57:7c:20:3f:23:1d:da:90:ba:b9:
aa:c1:c9:64:da:4b:eb:11:b8:f7:8c:31:09:d9:1e:
89:32:b8:a3:d0:09:d0:6a:0c:db:67:9a:29:62:37:
cc:f0:e4:94:64:ed:99:9c:92:75:99:f2:c2:a8:d5:
09:cd:df:1e:81:7b:08:64:8f:c7:66:97:15:9f:31:
3d:e9:7b:23:b2:c3:5b:fd:b6:f3:f0:6f:35:1f:69:
12:30:17:1a:79:1f:9d:9f:57:6c:0f:fd:af:e9:1c:
3c:5c:a5:90:ba:e3:46:54:a6:c3:fa:8f:b2:94:6e:
f8:c3:ef:71:d1:ce:fc:04:6c:c7:6a:51:0d:77:5d:
5f:7f:95:80:a6:c4:42:d3:74:6b:f8:d1:ca:7c:10:
8f:2d:87:b2:5f:66:cf:72:6d:c0:50:85:fb:bd:d9:
f3:88:b1:27:7e:57:d6:99:d2:d6:fd:61:ca:03:14:
a4:4f:fb:c0:17:d7:fd:14:bc:d7:63:b9:a6:37:5e:
71:59:01:3d:41:f8:fc:ef:0b:6b:6a:5f:c6:10:4d:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:9D:20:A2:CE:03:B3:EE:28:D2:7E:66:D7:25:8B:33:66:B9:12
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:90:41:f2:78:e3:1f:5c:0e:0c:5b:8b:bd:f0:22:50:58:
68:44:4e:f5:86:88:5a:c9:6d:60:d8:42:c3:57:6f:b9:3d:12:
29:8c:e3:82:08:12:b7:a3:e0:15:0f:ed:1e:2e:dc:b4:0e:3f:
e0:c2:45:7b:0f:99:c5:38:c1:a0:47:85:a7:88:1d:28:5d:a0:
06:34:88:11:ac:3d:17:88:e1:ce:36:9b:71:1e:d2:c8:79:c3:
db:ce:af:a8:23:40:26:64:91:70:7f:8f:ad:db:16:55:c5:fd:
52:81:14:df:61:8d:7b:3b:c1:cd:16:82:57:d6:6c:bd:65:4c:
a5:34:bc:91:cc:38:d2:52:26:29:26:d0:3e:4f:c0:2d:22:98:
4b:fe:d9:62:c0:99:5e:97:f8:7c:41:8d:ec:5f:49:fb:57:0c:
52:ee:ab:5f:14:d2:71:46:13:d0:bb:93:98:9b:29:d6:40:e0:
34:2f:13:00:da:23:dd:2c:13:7a:6c:a0:75:aa:98:63:75:71:
71:c5:9e:0f:e7:b3:61:d4:5f:8a:43:b4:60:d7:cc:21:e4:05:
f2:bf:2c:80:fe:91:31:77:a9:59:bd:e3:1e:10:89:97:5e:48:
e0:40:69:26:5d:d9:99:16:de:bd:dd:53:30:31:1b:bb:b5:85:
e6:5a:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:37 2025 by rpki-client