Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File: GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier: Bz3qkw84j5mfNIdiPf4qqZ9h5H/dXUOcHJYL4s4Gqd4=
Subject key identifier: 6D:98:4A:A4:97:88:69:4C:37:C8:6E:62:0A:36:02:54:8B:73:AD:E7
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 0199C4C4A498A4CD0E1DD7679CC1F40D6FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number: 16C9
Signing time: Wed 08 Oct 2025 17:00:45 +0000
Manifest this update: Wed 08 Oct 2025 17:00:45 +0000
Manifest next update: Thu 09 Oct 2025 17:00:45 +0000
Files and hashes: 1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: Oh9z/1A4CCOmBKBl/6ZsQGUQSFdNRlKGIOchrr6rYIs=)
2: Z3Go8saXwZXXMMYbEYiVPWGVRXk.roa (hash: XTY4+F/77lFXbbIzurIN7oqokSXQvQHevFpVhwO/K9Y=)
3: puaohYxhGlR_ojExuJSBgJp58B4.roa (hash: 1Zbm+b0MGHPeRak+rHKtmgsa3JMwl8hkqHTwmCOmzbo=)
4: ycPqiZgxXZYRWpHXq8sdS66pJ9w.roa (hash: vp55FHfuHOdAmakK1OzqAocvmJ8Vg24tSRWH6j9DsJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:a4:98:a4:cd:0e:1d:d7:67:9c:c1:f4:0d:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Oct 8 17:00:45 2025 GMT
Not After : Oct 9 17:00:45 2025 GMT
Subject: CN=6d984aa49788694c37c86e620a3602548b73ade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:40:4e:fe:11:ad:eb:53:07:97:6c:fa:79:
8b:1f:41:5e:9f:43:12:ab:a3:17:67:3e:5f:2e:b5:
51:9d:64:f4:9c:ef:56:14:f7:78:4f:f2:bd:c3:51:
0e:93:fc:2c:cd:bd:e2:b6:05:48:51:fb:65:6f:c2:
82:90:61:b0:2c:25:4a:02:e2:af:55:87:7f:1c:f8:
15:68:99:ae:ae:e8:04:41:bf:cc:28:91:12:a9:8e:
af:17:8a:03:b1:dd:17:ae:9c:77:41:26:81:79:9e:
45:ec:42:25:7d:0f:fe:8a:f8:6a:06:95:ec:f3:fa:
fe:2a:dd:93:0d:3f:bb:fb:59:ae:e9:6b:65:cf:48:
7f:c9:11:e9:56:d7:1c:40:49:8f:52:4b:73:24:ab:
90:94:dd:4d:dc:f1:8b:f0:4f:8b:96:7d:b6:04:5f:
d3:7c:91:6e:1d:b8:59:c5:02:58:0d:3e:17:b7:f6:
7f:da:42:1e:e2:72:ee:bb:5a:27:7e:be:48:ce:a6:
fb:79:98:b7:ad:b6:84:07:bf:f3:e8:3f:42:48:38:
97:a4:23:c1:e5:48:c2:73:ae:58:bc:a0:1b:6b:41:
a4:04:cd:95:83:e2:2b:c9:c1:a3:cd:45:a9:c0:af:
98:e7:0e:b6:b2:e7:6e:83:fe:c9:ae:ac:91:e0:9c:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:4A:A4:97:88:69:4C:37:C8:6E:62:0A:36:02:54:8B:73:AD:E7
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e9:32:3f:a0:21:2a:88:b1:f7:86:89:00:89:dc:c3:fd:13:
c3:36:44:73:c5:d1:9d:52:89:82:c6:3b:49:7a:b7:f6:c9:45:
72:c4:fb:96:58:7c:3a:ee:bb:6e:dc:80:1a:a2:1f:8d:e3:52:
70:16:7e:26:df:b3:37:5d:36:c4:06:3d:e3:5b:fd:3e:d4:79:
15:8c:0b:2e:6a:06:6e:63:81:4c:73:88:58:83:4b:a4:11:ba:
31:d2:bf:a1:98:8e:29:b0:8b:79:d8:42:37:47:a5:a9:49:b4:
97:f9:ff:1c:96:59:fe:5d:2d:f3:25:f4:80:e4:90:8a:2d:f7:
03:13:74:2e:7c:07:07:0f:8c:94:24:9e:6f:67:a4:31:24:c3:
36:99:76:da:07:b5:fc:60:9c:ab:83:6c:c9:3a:59:32:6f:27:
03:b0:c8:3d:3d:51:c7:ea:ee:9a:54:f5:f3:7b:8e:27:1b:e6:
a0:15:8f:18:32:16:d4:40:31:6f:b3:56:e9:49:04:42:8f:90:
f2:08:dd:b3:83:85:bd:8d:6f:5e:fe:3e:1f:1c:02:23:d5:26:
73:c4:58:94:d2:e8:95:49:c2:a2:ae:5f:f3:45:6f:78:e9:53:
32:cd:3a:5c:df:e9:cd:df:3d:22:0d:25:e5:27:06:94:14:6a:
e4:eb:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:03 2025 by rpki-client