Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: 9IY9SB8bKGdtDMZdNWFTOpK1bjnm1fDZ69qZX2sNM10=
Subject key identifier: 7B:15:4A:5D:D9:D8:10:DC:2A:EE:A0:00:53:ED:67:68:AC:6B:7A:67
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 0199D4DCB7D5612285F1B54AFA89793CFC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 02A5
Signing time: Sat 11 Oct 2025 20:00:58 +0000
Manifest this update: Sat 11 Oct 2025 20:00:58 +0000
Manifest next update: Sun 12 Oct 2025 20:00:58 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: h8/Fh9vX/JqTRc0f5C2vn+vXLminsRG7EDaFFs+6WGw=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:dc:b7:d5:61:22:85:f1:b5:4a:fa:89:79:3c:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Oct 11 20:00:58 2025 GMT
Not After : Oct 12 20:00:58 2025 GMT
Subject: CN=7b154a5dd9d810dc2aeea00053ed6768ac6b7a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:ba:01:d2:a9:26:0a:20:cd:cc:79:eb:c0:
84:91:d5:9e:47:6a:29:33:07:84:17:ba:ce:e9:a9:
73:57:48:d5:6e:2b:db:cb:a8:53:20:19:de:78:5a:
3e:84:2b:77:ad:b3:55:42:46:9c:9b:ab:19:52:92:
32:ec:d9:64:7f:45:04:28:e9:b0:46:05:44:3f:b9:
6a:ed:19:4c:75:45:b8:24:12:4f:5a:45:69:35:2a:
10:88:b4:80:e5:ce:4c:b9:ee:0c:ec:de:80:4e:74:
f7:88:01:24:d0:63:39:9f:02:b8:ad:c2:fb:09:8d:
7a:15:72:36:db:b5:ae:c1:fa:42:4b:f2:8f:74:f1:
1d:ab:c5:a5:2e:ae:1a:05:b1:7b:ae:ed:df:d8:f9:
42:e4:33:b3:cc:41:52:39:67:70:a4:11:48:42:3f:
9f:c1:25:5a:a5:99:89:cb:41:07:b3:51:0c:f4:1e:
44:03:d8:7d:5f:99:24:b0:30:08:25:e0:95:cd:04:
68:2c:d9:aa:2b:22:e5:33:c2:f9:f8:ee:ae:8b:78:
0c:e4:95:83:9a:0f:81:c1:d7:2a:9d:24:0e:60:3e:
9b:34:37:71:0f:3d:59:0b:c3:3b:8a:52:9b:12:9c:
70:d6:e9:7a:2a:e7:03:16:84:1a:dc:46:b6:e6:ec:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:4A:5D:D9:D8:10:DC:2A:EE:A0:00:53:ED:67:68:AC:6B:7A:67
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:37:fe:e1:bd:28:38:79:a5:29:d2:c9:85:dd:2b:69:7b:b8:
27:c0:69:53:36:fc:d5:24:bc:ff:7b:9a:f8:36:a4:a7:19:5d:
78:8d:82:cc:67:fa:6b:bb:8d:c0:df:29:ef:20:be:20:44:89:
39:80:b4:03:47:af:f2:43:a6:d3:e7:78:17:91:9a:e9:89:14:
9c:24:93:00:63:19:55:be:1d:56:b1:2a:ac:ad:14:13:67:c8:
37:31:c2:36:2c:6c:cb:96:49:04:c1:63:ff:94:02:cc:f0:d6:
a7:eb:ca:db:4c:fa:fd:bd:60:4a:20:28:40:f1:12:9a:e7:cf:
52:32:64:d3:b5:83:28:43:2f:0e:7b:13:52:a0:8b:8a:00:67:
1d:3a:56:80:75:4f:3d:85:e8:25:24:d8:e2:12:ae:5f:73:4c:
cc:26:87:0f:ac:5b:ae:97:d3:09:e8:fd:5f:67:8c:1e:4c:d9:
91:05:b4:b8:b8:14:82:85:f0:7e:cf:0a:cf:8f:03:26:eb:06:
e7:d7:a5:9c:16:fe:42:d3:e8:30:76:19:01:05:11:2a:90:78:
d7:ca:fc:ab:de:11:93:e9:d1:38:78:2b:a9:4f:08:f6:b3:f5:
e3:d3:a1:3e:d3:bd:79:29:17:0e:19:19:4f:95:ee:bf:34:ec:
ab:24:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 12 04:22:03 2025 by rpki-client