Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File: GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier: x1dsXxLsU944sYtQO2gxtHqkixZDlap21EQcuBdutWY=
Subject key identifier: A7:DA:2B:CB:0B:08:78:0B:88:73:84:69:4E:A8:E8:A8:72:CA:EC:A2
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer: /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial: 0199FBEB0591AE4389DC67B7781C9F46B108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number: 0FA7
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: 5hALSGTQj4t9VLOMdpgK8emhXaF2X8gdGZjJXnmFc8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:91:ae:43:89:dc:67:b7:78:1c:9f:46:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=a7da2bcb0b08780b887384694ea8e8a872caeca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:ca:5f:0c:cd:e1:99:e6:a2:5f:5f:b9:9f:
0a:25:64:3f:ce:c0:e7:f0:eb:01:ca:40:22:b0:40:
2d:47:6b:44:7f:e3:4a:ff:14:d0:bf:12:13:96:e0:
89:d7:20:1a:47:e5:74:0b:4f:b4:79:25:22:ed:8c:
51:bc:b5:51:0b:fc:47:38:fc:ea:f4:c2:2c:55:3b:
51:52:4a:b0:0e:7e:34:fb:f0:b6:2b:94:f1:12:df:
a3:b7:87:92:d2:7b:21:c7:da:f1:06:01:d0:24:94:
42:44:8c:76:fc:82:ed:fd:a5:44:66:9a:60:65:1c:
4e:88:9e:6e:b7:28:33:e7:5a:9d:e0:f8:67:17:5f:
58:b4:cd:5e:c4:b7:d2:91:01:2b:fb:d6:27:70:41:
75:50:a0:16:7e:9f:14:ef:de:fc:0b:4c:40:d9:3a:
48:38:76:d3:06:e8:38:ad:89:6e:df:a4:a9:5a:70:
02:31:ea:12:0e:4b:cc:89:45:a1:b9:48:f7:0a:7a:
c9:e8:91:b3:69:94:76:09:91:79:2a:d2:47:c7:75:
88:ca:fa:c9:89:52:0f:b3:30:82:a5:92:61:3e:36:
db:ab:f1:59:72:ff:5f:50:b4:d2:36:25:c5:92:b4:
8b:41:51:aa:81:5b:af:d2:74:c1:45:4a:e4:6f:ca:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:2B:CB:0B:08:78:0B:88:73:84:69:4E:A8:E8:A8:72:CA:EC:A2
X509v3 Authority Key Identifier:
keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:90:62:6c:15:3c:76:36:67:9f:f2:20:f9:32:14:86:d7:83:
65:2c:fa:db:96:5d:5c:25:83:ec:a4:5d:a1:b5:01:98:85:56:
41:80:5a:66:19:30:ca:1c:1d:cc:80:4d:07:ac:eb:6f:b1:ec:
cb:46:d1:5d:9f:a0:95:d9:97:f3:da:7e:42:f1:80:f1:ef:36:
38:35:39:02:ef:25:d4:47:96:89:4a:25:2a:93:9c:07:3b:92:
39:82:a8:c5:43:3c:76:5f:a4:c7:85:97:89:6a:eb:5a:2a:78:
f7:35:1a:c1:2f:31:3e:d6:5e:57:aa:2c:ca:97:80:f3:b5:b8:
ae:28:32:24:2f:cd:bd:f0:e9:a6:dc:71:cf:db:2e:d6:89:f1:
a4:d3:5d:6c:65:1b:51:e2:4a:48:ca:a7:6e:ac:10:99:e8:b6:
16:e9:17:e8:03:4e:70:fd:ea:8f:fb:ef:08:3c:03:fa:fc:13:
3b:d6:11:4e:8b:01:41:1f:88:f5:8b:30:03:8c:e8:df:81:a3:
4a:38:14:02:f4:fc:86:22:10:7d:f3:b2:2e:07:bd:2e:bc:1c:
8d:94:29:a7:aa:f5:ba:89:b1:d8:59:52:78:41:0d:b8:28:73:
0a:ee:88:51:ae:69:60:7a:f9:07:45:e0:aa:04:fa:fc:4a:d9:
5c:88:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:02 2025 by rpki-client