Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: B6VR50H7l8YbyJ0Djh1ty4gTdVY2ThS0BJ9hOlHeaP4=
Subject key identifier: CE:7B:AD:FA:21:A9:1B:49:42:F3:DD:92:6D:AE:22:E7:3F:52:CE:3C
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 0199FD33EAE8CA4BF273E4C489DA9E275D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 1232
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: PgH3fpNdItBYpmfvq7MeU5fCOlFVujchPbiJKcOa1ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ea:e8:ca:4b:f2:73:e4:c4:89:da:9e:27:5d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=ce7badfa21a91b4942f3dd926dae22e73f52ce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:cd:e4:df:e6:0a:df:93:8d:4c:03:00:a3:
27:60:38:4c:c2:7a:32:9e:a8:9d:bb:29:6c:07:40:
98:dc:91:6d:60:91:12:c5:a1:23:29:b2:97:55:29:
78:3f:ce:45:40:85:1c:2d:93:92:2b:f9:74:52:6a:
a7:42:70:7e:07:37:ee:b0:04:68:b5:52:19:db:61:
0e:6d:f7:24:9d:2a:2a:48:40:54:c5:75:aa:9e:89:
c3:93:aa:ee:92:3e:0e:9f:01:c2:d1:97:1c:90:84:
3c:67:8d:e2:62:c7:8a:33:10:e5:b2:c1:d4:7c:30:
78:23:65:a1:8e:af:f7:47:74:02:8f:ca:43:cb:43:
93:53:97:21:68:00:fd:a8:c0:ac:68:59:8d:48:ee:
12:4e:67:f8:b6:0e:b4:6c:fe:03:77:a7:75:24:b7:
d1:6a:e5:5d:d8:de:e2:84:dc:6e:d9:f2:3b:a0:1c:
34:bd:00:89:cc:07:ec:f1:56:85:4b:eb:08:9f:75:
34:f0:2e:56:03:c1:c2:48:06:d5:82:55:6b:6a:58:
01:df:79:fd:8d:cf:f8:80:0a:fb:58:69:9b:b3:70:
35:98:cc:e9:28:db:b0:63:9f:fb:a8:83:da:28:b9:
9b:be:c4:66:ad:3d:ae:b6:23:a4:31:cd:b1:28:d9:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:AD:FA:21:A9:1B:49:42:F3:DD:92:6D:AE:22:E7:3F:52:CE:3C
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:44:af:a4:ba:5c:43:56:dd:72:d0:c0:1a:a8:88:56:18:
cb:e9:ed:9b:f7:a8:a1:7a:e8:67:b8:97:8b:7d:d9:b1:12:f3:
7a:f5:9e:c1:9c:42:2b:3c:9c:d4:99:60:4b:07:7d:3e:38:e9:
ff:c8:c2:72:14:42:07:61:2a:ff:4a:cb:94:2c:33:c6:b6:d0:
d2:18:c0:15:69:9e:04:56:68:3d:0b:64:6e:e1:d1:6f:d1:e5:
4b:f1:4b:0a:2d:e0:6f:e7:51:9d:6b:67:41:7e:52:be:c0:c3:
36:95:e0:91:c7:51:f9:dd:2b:9c:eb:79:e7:8d:6b:5d:46:fe:
6a:7c:d7:5c:ec:c2:c8:08:df:fe:ae:2d:bf:47:47:b2:8a:e3:
da:8b:b6:ba:ba:93:c2:18:8e:df:9b:af:f7:71:dc:58:20:9b:
10:f3:a3:17:89:63:88:1e:a5:e0:e7:24:65:3f:03:19:c2:83:
ec:3b:fa:0a:05:f9:de:fa:a3:26:7d:8c:06:a0:61:63:a9:e4:
37:42:ea:17:2c:cc:e0:42:a7:ff:ad:5f:30:bd:df:a1:91:f1:
a1:da:60:9e:9a:47:01:1a:75:a3:79:4e:26:c0:f5:82:3e:05:
0d:1d:fa:63:8e:65:20:b6:50:28:ef:dd:ef:28:5e:7d:ad:e1:
34:09:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client