Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File: GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier: pH3qseSXP+23rdEJT/ILVhLtYkf0Fgl3Xnl02OpKZj0=
Subject key identifier: 38:4B:9A:E6:1B:83:A4:BA:03:64:5D:B1:F2:9D:C7:9F:20:B6:91:66
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer: /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial: 0199C6B3AC8E5410AE4182410FE4F09695B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number: 16C3
Signing time: Thu 09 Oct 2025 02:01:27 +0000
Manifest this update: Thu 09 Oct 2025 02:01:27 +0000
Manifest next update: Fri 10 Oct 2025 02:01:27 +0000
Files and hashes: 1: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: o20D7kS6knkPWDGoHSl2UuQcrOyT7TM0/3wR+0pVr5w=)
2: UkXF7s7wvZTNugO0xMbM-tho3CU.roa (hash: haf3+lwW0Ofrlk+CxaFcagM4HVa+8i2mqBkmuNQ3QQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:ac:8e:54:10:ae:41:82:41:0f:e4:f0:96:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
Validity
Not Before: Oct 9 02:01:27 2025 GMT
Not After : Oct 10 02:01:27 2025 GMT
Subject: CN=384b9ae61b83a4ba03645db1f29dc79f20b69166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:bb:6b:81:fd:54:18:15:1a:ec:81:fc:34:
a1:71:1c:40:65:85:cc:8a:2a:56:a2:c9:a5:f4:d8:
92:d1:1b:6f:0d:86:8f:53:29:ae:4e:c9:c5:17:0c:
ab:16:6f:4e:ca:b5:d8:40:c2:78:c2:47:ce:6b:cc:
41:85:72:65:b9:14:1f:59:c8:03:33:df:8d:4a:27:
b3:89:ea:d2:ab:c6:1b:31:4b:7e:5f:bf:5c:01:d6:
b8:28:a4:83:21:8d:83:ca:aa:df:84:4b:f1:34:9b:
fc:2d:52:b2:b2:fb:b8:36:ac:25:7b:28:b0:70:05:
d1:72:68:9d:c3:82:64:90:b8:ea:41:17:1b:8e:f3:
b1:82:7c:53:d5:9c:72:e8:ba:11:39:32:70:59:06:
e7:69:0b:c0:2a:85:37:44:24:a2:ea:f4:45:5f:fe:
67:99:bc:61:c9:03:93:d8:e8:35:bc:9c:a8:1e:6c:
a3:be:a5:f6:c1:f0:77:3e:57:d9:fb:d4:a4:0c:8f:
d9:50:6b:aa:16:f3:f9:64:a2:7e:f3:3b:7c:80:94:
74:98:c8:6d:30:f3:eb:58:70:3d:47:8e:1a:bf:d6:
d1:38:e4:4c:2d:af:b2:71:78:7e:a3:26:cd:bf:3d:
03:42:82:37:1a:21:9b:0c:a9:45:5b:11:b9:61:20:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:9A:E6:1B:83:A4:BA:03:64:5D:B1:F2:9D:C7:9F:20:B6:91:66
X509v3 Authority Key Identifier:
keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4b:0c:12:68:f1:43:c6:f4:a3:3f:41:0c:e2:ee:2a:28:e9:
fc:9c:30:c1:a1:86:93:ec:3f:ac:d7:d5:2b:c8:b1:46:90:b8:
27:b4:55:92:b8:7e:fd:7f:9d:9d:2f:d1:68:fc:72:28:4b:7f:
ab:f0:bf:21:f3:85:24:0d:0c:75:c8:f0:2b:25:1c:04:65:bf:
2c:f7:b6:77:44:ea:dc:eb:9f:13:ab:70:f6:da:7b:e7:8c:f3:
b0:03:10:01:42:d1:ad:96:ba:55:32:84:e9:de:28:a3:69:1c:
e6:18:8c:75:85:0f:7b:69:8c:1c:75:4b:34:6b:6d:eb:c1:ee:
88:af:18:e3:cd:cc:f5:b7:c9:ea:1a:70:d9:f6:52:1d:e0:32:
43:6e:a8:fc:e8:c6:77:ff:af:c1:dd:08:59:a4:0a:51:eb:0b:
57:af:c5:50:cc:17:28:18:18:ea:1e:f8:74:ec:2b:b1:34:93:
6a:9c:57:7c:38:46:33:18:ee:14:eb:e7:d4:fe:27:37:52:28:
ef:71:55:32:09:75:55:5f:65:39:47:05:d8:25:e7:4f:c9:91:
62:89:f0:76:c0:bf:f4:d5:59:a2:8d:c7:83:3e:06:2c:c3:f1:
59:13:83:b1:f9:27:6a:f1:03:18:55:5c:e8:43:37:82:76:9c:
7b:a8:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:28:10 2025 by rpki-client