Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: FVPS/hodjIQFUACfS9YdvqYrhNUMVhP89XkqbIaQl2s=
Subject key identifier: 97:C0:81:F3:9F:BA:B8:26:E3:AB:E4:0A:8A:99:1E:82:76:E3:B2:FF
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 0199FA6A948E54B0CEA32C5595F17D0FF8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 03:01:52 +0000
Manifest this update: Sun 19 Oct 2025 03:01:52 +0000
Manifest next update: Mon 20 Oct 2025 03:01:52 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: ep5RXdEcU6ynhfr6+ymyp23AxI3y7pdHrC8qyqXN5oE=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:94:8e:54:b0:ce:a3:2c:55:95:f1:7d:0f:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Oct 19 03:01:52 2025 GMT
Not After : Oct 20 03:01:52 2025 GMT
Subject: CN=97c081f39fbab826e3abe40a8a991e8276e3b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:32:ed:5b:84:49:4e:43:22:c7:4f:ef:43:
0f:d2:5d:e7:23:a2:5f:eb:9b:a1:a4:be:1d:1f:da:
2e:c8:f3:71:b1:82:00:09:03:e0:5f:6c:48:28:4f:
79:3f:08:16:c3:d1:26:c4:ce:1a:34:e1:d6:c6:e5:
aa:5e:86:17:29:ae:ea:e2:b9:0f:93:42:4b:c8:e4:
4f:c6:f3:34:1d:8f:7f:df:76:82:75:fa:8c:b4:94:
26:1b:2e:d1:ec:5c:bc:c3:16:3e:ab:89:92:75:a8:
45:2e:c8:79:ca:11:d4:fa:4e:fa:ee:98:9c:6f:5d:
af:01:ca:03:ce:3c:bf:b0:1e:4b:39:11:bf:f8:56:
70:03:e3:09:28:db:5a:74:c1:0b:49:28:94:b0:88:
58:1b:1d:47:21:0a:d2:c2:e5:77:9c:e1:6f:b3:6d:
81:20:f8:2c:d6:d9:2b:7c:89:31:01:56:1f:3a:92:
d6:ec:51:22:a0:6f:15:a0:81:ad:57:45:cc:b7:e6:
c9:16:c1:42:02:c3:6e:4c:53:06:c3:21:2b:3f:aa:
ab:93:f9:46:59:8a:03:aa:fd:29:c9:a8:cf:30:56:
14:ed:bd:fe:fd:dc:8b:96:8a:34:60:df:6a:ba:e1:
41:41:75:94:1b:3f:fc:14:01:90:31:0f:b7:8a:5e:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:81:F3:9F:BA:B8:26:E3:AB:E4:0A:8A:99:1E:82:76:E3:B2:FF
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:37:38:50:b6:f6:65:92:8f:07:cb:28:51:c8:45:5f:d5:0b:
71:05:cc:01:63:88:09:a2:62:ca:a2:fd:d2:60:06:a5:be:79:
c9:20:59:52:7d:4d:b3:e4:1f:53:72:dd:99:de:60:a7:b9:15:
96:bc:23:4e:3b:fd:a2:a2:79:12:34:35:28:2a:86:a1:bd:2d:
41:96:37:6b:e9:6d:41:88:fc:cc:21:48:0a:e6:63:2f:c8:02:
4b:76:75:c5:4c:b3:18:aa:85:96:55:df:d5:aa:93:ab:83:11:
b4:a5:d0:0c:ed:be:51:45:f2:c7:39:f5:84:99:70:39:11:bc:
3c:36:7c:4b:82:86:a5:19:2c:76:70:ee:bc:4e:b0:92:73:a7:
90:50:0a:c6:04:89:8c:80:64:2e:43:36:ce:2f:8a:ea:a2:45:
04:f9:72:f9:7d:09:6f:eb:e0:0b:ff:5a:bc:11:a4:3e:6a:33:
fa:21:1c:76:8c:ba:d2:11:e9:e5:d0:d5:e5:dc:74:d3:19:15:
91:42:2b:91:a1:a7:5b:ae:21:60:26:d0:6f:0d:0f:ab:c9:a8:
a7:67:0d:99:40:30:78:ef:cc:31:50:16:79:40:99:75:68:9a:
5b:05:22:b9:69:05:44:ff:f0:78:c3:8c:75:6f:0b:a1:1a:be:
86:bf:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:17 2025 by rpki-client