Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: AsPpl0ZBikeW3tn3omY6BOuVEaEriDhbCfELtBpM4zs=
Subject key identifier: 6E:8E:E8:EF:46:37:8C:FD:47:BB:EF:69:87:C1:63:71:F5:B1:E8:23
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0199FB7CFD42A5B69657B3BAEE44D26095FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0C3A
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: 76ifC8wtVS3Xmvud0m+qFNThwa4m9Yt67ovDAqJSAYE=)
2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fd:42:a5:b6:96:57:b3:ba:ee:44:d2:60:95:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=6e8ee8ef46378cfd47bbef6987c16371f5b1e823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:1f:f1:24:78:98:34:2a:58:3a:65:c0:f0:
6e:93:92:ba:fb:ae:e6:de:fb:07:5d:d8:f4:db:08:
57:ee:d6:88:57:25:3a:09:02:7b:5b:86:50:bd:4d:
c4:d3:4c:31:37:2c:c4:90:48:dc:10:4d:48:57:d1:
cb:b5:e4:a3:fd:16:5e:48:83:64:50:5d:3d:fd:ad:
7d:0c:71:58:8d:2d:04:cc:90:e4:60:61:dc:2c:76:
6b:16:6f:2c:0e:5f:5c:91:38:75:db:68:79:67:c5:
d8:0d:b2:88:ca:06:7f:b2:84:bb:bd:c1:89:d3:ff:
5e:14:b9:52:4f:cd:b2:29:96:ed:52:fa:b0:5d:0c:
e4:65:a8:30:b9:03:e2:e2:77:27:25:52:99:7c:9d:
bb:3b:14:73:25:fc:de:dc:bc:26:8c:74:a5:f0:ce:
e5:e1:ba:2f:fa:63:67:dc:1e:56:fb:8c:ce:23:c0:
f8:64:79:7d:3c:69:47:3f:6f:f7:9c:71:9e:67:c5:
03:06:e3:17:b1:a8:86:e5:2a:d7:2f:2f:d9:2f:67:
90:3e:25:dc:fd:e7:23:36:d5:70:55:c4:dd:b7:25:
01:6a:71:e4:21:79:1b:2e:53:21:be:1f:42:a2:4c:
15:b7:28:d9:6c:69:7a:98:83:a0:ae:86:46:8e:7f:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:E8:EF:46:37:8C:FD:47:BB:EF:69:87:C1:63:71:F5:B1:E8:23
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c1:c8:35:16:f9:09:7f:08:cd:b7:81:b6:38:79:1b:13:11:
d8:9a:4a:25:26:b0:54:a5:0e:16:87:80:7b:37:9c:81:78:cb:
ca:25:db:ee:bb:98:55:83:38:d4:9c:c9:15:97:66:34:17:25:
54:17:1a:ba:4a:60:f0:a9:38:1e:08:43:45:49:01:20:06:2c:
16:1b:14:97:bb:b9:e8:d9:51:23:4c:94:4d:c1:60:02:af:57:
e9:b5:7c:f9:d5:3d:f1:37:73:48:ef:7d:9d:cf:c7:4b:90:26:
69:9e:9a:b3:c5:61:dc:4c:dc:0f:9d:d5:9f:1c:00:45:7d:6e:
48:76:87:21:8b:d4:4f:5b:f2:b4:4b:8d:1c:c4:4b:f7:fd:05:
fc:09:ef:39:89:36:4e:bf:80:eb:3a:b0:e5:5b:da:02:9f:cf:
0c:7b:75:47:73:bb:dd:f1:49:9b:8e:83:5f:80:4e:80:41:5f:
b2:ff:a6:ea:e6:5b:8e:2e:08:41:d4:04:0f:10:77:7d:31:92:
c7:13:17:80:d2:97:e4:76:1a:c3:37:c2:f0:6e:9f:2e:c6:bb:
07:67:e9:1b:dd:8a:2b:76:7b:44:e7:a9:25:36:8d:9d:e8:90:
ed:c1:60:e5:41:b2:20:03:9a:ca:82:46:19:5c:81:17:e2:d8:
15:c7:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:02 2025 by rpki-client