Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: KGtJio+bmVxw00QQhMTnXI6XXm1QcV2Ka3U3qaKf3s8=
Subject key identifier: B5:CB:AF:58:20:3E:11:CD:4F:91:9E:89:11:C8:51:0A:C8:18:5D:66
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 019A00A2E87A93591B043541DDAD88E4E604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 068F
Signing time: Mon 20 Oct 2025 08:01:07 +0000
Manifest this update: Mon 20 Oct 2025 08:01:07 +0000
Manifest next update: Tue 21 Oct 2025 08:01:07 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: K8ytCmFpCbbSXzvW5TLd1aLWc5rIoUhK2Zn2Iy4zv0s=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:e8:7a:93:59:1b:04:35:41:dd:ad:88:e4:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Oct 20 08:01:07 2025 GMT
Not After : Oct 21 08:01:07 2025 GMT
Subject: CN=b5cbaf58203e11cd4f919e8911c8510ac8185d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:09:96:50:71:b7:36:43:ba:6d:4b:84:72:
da:20:6a:a7:7a:6e:f2:86:74:05:46:95:f1:f6:36:
2a:84:2c:e1:2e:3c:68:cb:0c:13:95:17:29:3c:4b:
44:e1:06:b4:b8:b5:ea:66:06:9e:b0:c2:71:00:a4:
cb:cf:c5:b9:27:de:48:b7:eb:ce:32:66:06:01:d1:
ac:81:f5:bc:1b:53:03:8d:a0:66:72:09:d7:1a:e3:
01:a9:bf:e6:5d:d4:49:48:7b:88:65:73:7e:c4:04:
8f:77:49:0e:19:db:3b:92:4a:c9:2a:0b:2f:10:55:
7f:54:5e:94:4c:eb:0c:83:76:bc:64:8a:8e:67:aa:
03:d3:18:41:a6:78:4b:f3:4e:22:33:f3:d0:fa:c5:
5f:e1:4b:83:98:42:28:1b:28:0f:eb:07:2a:44:91:
9e:8b:5a:55:7b:48:9d:d1:12:c0:45:c1:17:5d:0f:
49:c4:d0:02:f8:1c:bc:e8:a7:e7:b2:6d:6d:7e:01:
2a:14:83:cf:ad:5f:7f:cb:7d:b0:fb:5d:a9:d9:62:
8e:70:4c:47:1b:a1:fb:c4:3b:08:83:ab:c0:bb:2d:
13:18:0f:e8:49:46:c9:10:8e:07:58:50:ad:32:59:
d7:d6:c2:9d:c3:d8:89:41:60:7e:a6:e1:1c:ac:6d:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:AF:58:20:3E:11:CD:4F:91:9E:89:11:C8:51:0A:C8:18:5D:66
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:39:ad:38:58:cd:b8:ff:3a:e1:9f:b0:a1:bd:58:63:07:
b8:48:bb:a3:68:4f:0c:a5:ec:bc:b6:3d:05:30:9c:c1:e1:45:
cc:b3:3e:56:de:7a:f0:62:4a:e6:a9:74:80:17:88:8d:27:8f:
49:4b:22:78:5c:62:0f:b9:76:63:35:b3:f9:67:27:c3:e3:bd:
80:83:65:6b:7d:ae:69:79:58:28:b8:d7:92:c0:a7:ed:d8:31:
08:3a:af:1f:38:b2:89:ab:28:6a:1c:d2:62:a3:b1:e4:6c:d5:
b5:9a:33:86:84:6c:6a:c2:0e:0a:47:84:6c:60:d8:7e:b5:aa:
de:ce:c9:21:ca:a0:a4:56:79:c0:25:ac:ff:ef:f8:4a:b6:61:
2e:38:30:2f:9c:2b:17:ec:d2:10:91:1f:35:89:3f:dd:03:90:
95:fa:f8:c0:91:56:a0:b9:f4:c8:24:09:5e:ec:4e:c1:27:5f:
e8:20:90:7f:00:c3:5d:8f:92:9a:50:5b:09:f5:3f:a9:25:3d:
7b:39:ed:85:5b:07:19:22:fe:44:a1:7a:23:48:07:cf:3f:a4:
e4:a3:2e:03:46:22:88:17:51:b1:bb:63:04:93:e8:3e:c6:45:
81:af:53:71:02:70:3c:34:ee:1b:de:6e:ae:46:0a:64:3e:d5:
4f:14:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:19 2025 by rpki-client