Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File: Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier: lnW0lZhYljUbuZcpxKTtoQqknCQtS8FWSVtm4E30A9o=
Subject key identifier: C8:98:82:AD:09:4F:EC:52:9E:D7:E0:C7:63:E4:DB:E9:64:ED:12:2A
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer: /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial: 0199FBEAE8E94AFB9A2D0A4F9983811CFDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number: 0A0E
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: OYnowjbbc7U2LdicJBmToLiWcDAUxbWOILC2CX0GstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e8:e9:4a:fb:9a:2d:0a:4f:99:83:81:1c:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=c89882ad094fec529ed7e0c763e4dbe964ed122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:84:f9:22:01:0b:9c:52:c1:3f:f6:4f:c5:
3d:06:4a:23:04:3b:9b:79:0d:71:40:12:90:66:d6:
d7:9f:7a:db:e0:5f:14:9b:61:8f:d3:9f:c8:c3:03:
03:0f:5b:75:00:ec:d3:97:9e:7f:61:28:03:6b:6a:
9d:9e:9b:58:0b:ed:f7:b0:b2:8d:8c:cf:34:7a:ae:
aa:42:2c:05:1c:5b:ce:be:8c:18:a7:64:2a:d9:46:
66:76:99:e0:47:c2:ca:26:b5:8e:d5:d8:fe:e4:4b:
91:a8:da:26:38:45:73:36:6b:cb:2f:68:4b:b6:b8:
79:a8:34:78:02:e9:50:16:90:11:cb:f9:45:93:1a:
6e:33:7b:65:4f:d4:dc:e0:62:27:6a:e8:25:79:ee:
94:a2:7b:96:8e:14:7b:64:95:22:49:6c:ff:29:a9:
38:d7:fc:e5:9b:f9:a8:09:62:c9:27:ca:b8:52:17:
ee:93:31:e3:a2:26:01:79:47:45:ce:0b:fb:46:b7:
bb:ee:d3:ad:0d:01:b2:bf:e2:63:27:da:5f:7b:10:
0c:d3:47:c8:28:0c:0d:19:ec:e5:e9:5a:be:2b:0a:
7d:11:71:c5:8a:a9:e2:d5:b3:67:65:cb:b0:07:ec:
bf:12:81:0e:92:21:37:84:b1:7e:7a:b9:c6:4c:b2:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:82:AD:09:4F:EC:52:9E:D7:E0:C7:63:E4:DB:E9:64:ED:12:2A
X509v3 Authority Key Identifier:
keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:09:a4:ac:4c:c6:3b:d4:6a:a1:bc:8a:e5:12:ee:36:d7:36:
b0:cc:2b:63:e2:9a:f7:6d:93:1c:1a:00:16:7f:89:69:db:28:
3f:15:0b:43:9d:5b:76:6c:3f:88:f7:74:98:98:22:41:9b:af:
85:6d:a2:bd:3c:66:fd:62:e8:5e:a5:95:a0:c8:57:83:a4:c7:
39:19:ff:56:95:19:bf:36:16:e2:6f:cb:22:d9:dd:3c:47:c8:
39:5f:c3:56:40:c7:84:17:0c:62:a2:4f:6e:8d:be:bc:dc:fe:
5f:a3:fb:05:0e:d1:20:39:3f:4e:56:dd:07:3a:ec:e9:c4:8e:
74:84:ad:9f:77:48:9a:61:ec:9e:c8:28:81:e5:d6:06:1e:aa:
07:49:c3:30:d3:00:93:8d:dd:5f:02:22:17:c8:1e:96:82:bd:
7d:60:0f:06:0b:fe:9e:39:96:a6:f6:62:d9:bc:bf:d5:35:f5:
8d:d0:c1:0e:71:94:9c:7a:bd:1b:d2:16:c7:2f:37:5b:41:5b:
65:54:9c:a7:07:5f:4d:cf:d9:f3:42:2b:8d:1d:31:fc:ac:63:
09:bb:a4:8f:79:1c:d3:19:5e:bb:48:8f:a5:6e:8a:cf:66:f9:
ca:d2:b0:ce:98:9c:bd:64:30:89:07:5e:e3:16:60:4a:8d:1e:
b6:2c:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:48 2025 by rpki-client