Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: 0UdUYZhS3Xavq5nyVM3C8UasvWgbDAePTIqwHFQCalk=
Subject key identifier: DA:FF:91:C2:EF:C4:22:BC:AD:79:DD:F1:34:01:03:B9:6A:36:D3:B6
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 019A7225C5E16293CDC3142D178BAF771923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 011A
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: UJpDmf3xROXX0dbDa17OsD5t8cbw7UpxMaHh++x1izg=)
2: XD5kSDYeMfY8LIHhbfnJvruSBPc.roa (hash: 7oUWV+LyugwjeCoSmfoHPMTejsb+0njHiDkg9kgwwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c5:e1:62:93:cd:c3:14:2d:17:8b:af:77:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=daff91c2efc422bcad79ddf1340103b96a36d3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:67:b6:b4:26:77:0a:ba:96:5b:51:3d:be:
f1:46:32:c2:94:a4:e5:b9:16:dd:e5:aa:d4:1d:13:
34:db:31:bb:a4:cf:0f:98:75:7a:90:1a:74:c5:33:
82:58:30:28:b5:02:d6:a4:c0:9f:c0:5f:7e:c4:70:
aa:a3:60:3e:7c:7d:d9:6a:d5:e8:4e:22:cb:8e:a6:
53:3b:18:44:f0:ae:85:95:c2:2a:ca:be:bd:a9:46:
ee:41:40:60:e4:eb:b8:9e:86:fe:55:8b:b0:b7:d2:
a4:ad:50:2a:ba:c8:06:68:10:35:9c:ad:03:15:3c:
5e:81:d9:90:f4:d1:9c:fa:72:f2:2c:32:d8:20:ec:
c8:cc:3b:a9:fd:e7:f4:96:16:4a:9d:1c:af:24:8b:
1b:bd:24:31:94:bd:b5:56:8b:ed:e7:e6:e9:e6:52:
5d:f6:de:ed:c1:3d:4d:58:69:64:24:21:40:53:c7:
ac:99:7b:e4:76:48:31:59:c0:0f:45:8d:f8:82:93:
67:d0:45:a6:60:70:a4:0b:ac:90:64:dd:65:be:7a:
cd:e5:8c:c9:84:8e:6d:f6:b1:8a:e4:24:25:a4:86:
db:84:4d:25:cf:b6:30:8b:fe:1e:e1:68:7f:80:c3:
c3:6c:e3:17:6b:be:6b:58:f1:bd:35:0f:4c:ca:45:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:91:C2:EF:C4:22:BC:AD:79:DD:F1:34:01:03:B9:6A:36:D3:B6
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ab:ed:e7:01:7e:a8:c2:8f:4c:e8:c3:fb:8c:6c:74:bc:6e:
b2:bf:0b:e7:3a:3e:d1:c5:e9:0b:15:05:13:c8:8b:6d:b3:2b:
73:43:5d:27:59:4d:d4:06:7d:fa:11:2c:d1:c0:99:77:48:84:
83:5c:ce:8f:01:7c:7b:b4:b6:f7:57:13:9c:da:dc:21:cc:39:
32:2a:ab:4c:fa:4e:6c:06:f8:89:29:49:06:d9:76:39:35:10:
c7:13:6f:06:43:01:fd:1d:cc:41:d3:d1:5a:ae:2c:10:be:46:
99:c8:68:94:2d:2b:77:66:46:0a:0c:35:ae:3d:26:c1:32:47:
60:bd:9e:d3:fc:7b:10:08:5e:66:07:26:36:68:6a:f8:23:f7:
8e:97:e3:bf:c0:a2:a1:01:cd:46:4e:72:c3:3f:ae:06:87:a2:
c1:0e:84:ae:57:c1:4a:f2:a4:1d:62:b2:b2:31:4b:c0:2a:69:
29:32:52:d1:8d:ce:8b:6e:0d:05:c4:28:1a:13:b1:a8:7c:67:
5d:eb:3e:c3:55:4f:b1:03:7d:5b:e9:7e:e9:96:7c:cb:2a:30:
68:e0:58:7e:cb:af:22:93:3b:72:42:3c:08:95:5d:e7:c9:0a:
dd:db:b6:7a:96:e9:f8:c5:b2:9d:3b:ea:94:a3:43:d3:27:dc:
c7:41:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:46 2025 by rpki-client