Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier: qM6Pdm05kmUB7eV6qR+Q4d/qoheE/3o7DDv5Xvdep00=
Subject key identifier: 67:F8:43:68:52:49:00:2F:FA:38:E7:8D:1D:74:E7:9F:B9:1F:A2:56
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 0199FEB50CCFE3E65FD73AB88B51F3F77588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number: 0136
Signing time: Sun 19 Oct 2025 23:01:42 +0000
Manifest this update: Sun 19 Oct 2025 23:01:42 +0000
Manifest next update: Mon 20 Oct 2025 23:01:42 +0000
Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: saBVlG9LdVyBDlnGXgkrq8v7lBC2bXkTdqL6jj0l3z8=)
2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0c:cf:e3:e6:5f:d7:3a:b8:8b:51:f3:f7:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Oct 19 23:01:42 2025 GMT
Not After : Oct 20 23:01:42 2025 GMT
Subject: CN=67f843685249002ffa38e78d1d74e79fb91fa256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:39:60:7a:c3:0d:e6:52:dd:ae:84:5a:92:
ca:5c:02:a9:96:0c:88:1d:d5:20:bb:3f:1f:b2:1f:
c7:ab:57:6e:0f:da:37:cc:5c:63:c0:db:02:a6:ea:
b7:37:47:a2:31:a6:40:43:7c:ef:b6:c8:c3:a8:63:
62:df:1b:38:73:67:de:4f:3d:bf:b7:6c:8f:cd:fe:
77:f0:6a:e2:dc:05:02:37:c9:00:f1:b6:8b:35:9f:
80:a0:56:9f:16:de:14:b5:16:51:1a:b3:02:50:c8:
c8:1c:2c:89:2a:c9:fb:a6:25:6f:69:88:78:09:d3:
58:ab:4b:af:5b:e0:d8:19:53:3c:7b:96:85:1a:18:
1b:3e:b4:44:93:0d:01:3b:76:b4:4b:b6:da:96:0b:
a0:63:cc:f2:4b:75:8f:75:6a:83:b3:8c:9c:ec:ff:
d2:d7:e5:86:00:9d:0a:66:a6:87:16:32:24:4a:e6:
23:da:39:0d:73:35:9e:06:f0:ab:9c:96:e6:6d:13:
42:fd:da:06:9f:01:c9:dc:70:60:b0:cc:72:27:d3:
41:ea:09:00:13:a0:2b:95:e3:85:54:80:a4:12:6e:
85:9a:6d:25:82:62:a5:32:61:c6:01:80:82:3d:da:
32:e8:db:36:8d:be:66:08:b0:d3:c2:69:6c:ff:4c:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:43:68:52:49:00:2F:FA:38:E7:8D:1D:74:E7:9F:B9:1F:A2:56
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:91:f0:60:4a:67:15:5a:b1:ce:5b:36:20:31:5c:bf:21:
b8:0f:c3:b6:c7:47:68:b8:e3:3f:c3:ea:22:67:46:31:71:bd:
4e:4d:0e:f8:6a:bb:25:91:07:d0:b6:65:8c:6b:04:e7:91:71:
48:b2:91:d3:b0:1d:4a:0c:8d:bc:34:db:3f:a5:f0:69:91:53:
4d:80:80:83:92:30:6c:4b:3e:e7:80:32:27:54:fa:5a:dd:bd:
92:af:29:af:2f:01:3f:40:d6:99:22:f5:b3:2d:91:1c:65:26:
a1:56:30:22:ca:79:45:91:4e:8d:85:4b:3b:dc:a6:09:53:41:
b4:6c:27:21:0d:e1:22:f4:d0:00:1d:91:33:a2:fa:7d:ca:bf:
0b:23:02:0f:3d:c2:e8:70:42:bf:91:1e:af:a1:c3:0a:ed:f9:
22:08:08:8a:eb:c7:9e:5f:15:07:f7:88:20:8f:b5:d6:18:1d:
e3:20:54:70:ce:f0:23:99:bc:2f:55:b3:d0:01:16:d2:8c:e2:
e4:53:f2:81:18:58:77:a4:5f:4e:dd:e3:3a:ac:93:02:4b:6b:
a0:e5:2f:fb:1e:08:06:b0:dc:0a:68:a6:f2:29:99:48:3c:24:
57:14:c2:1b:63:54:f1:a6:d3:f6:6c:e6:46:bd:70:d5:13:b2:
e9:2d:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:27 2025 by rpki-client