Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: Ybo/yuTcnFRJOICBBG+tHXKUPKZue7+GaQdR0baDlCI=
Subject key identifier: 70:7D:14:77:F6:1C:4B:35:70:A5:26:28:37:40:03:C5:BF:30:CD:2F
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 019A7225FDB2878E7B579DFB0AA75367F335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 0385
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: B3e8vls6Z1zuhh6OHVo33h+ZkO/i+ijHt7Nlbaw4Xsc=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fd:b2:87:8e:7b:57:9d:fb:0a:a7:53:67:f3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=707d1477f61c4b3570a52628374003c5bf30cd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:b2:6c:37:3d:9a:04:d5:f9:ff:da:5c:d5:
9c:e6:d8:a3:06:bb:dd:e3:82:6e:6f:7d:a3:c8:b1:
91:42:ba:e6:99:be:53:a9:1e:f1:b5:64:d2:64:5f:
6f:f8:af:6f:5a:28:81:0b:29:bc:c3:8d:e4:72:f4:
63:3d:64:90:17:d4:2b:a9:8c:64:84:05:eb:19:c5:
cc:54:32:a3:17:bc:97:60:07:e0:cf:fb:f8:1b:5c:
17:95:04:c0:b6:95:ca:d4:69:96:b7:92:cc:bc:bd:
1a:30:51:74:af:99:01:8e:be:1d:80:5f:fa:04:5b:
b2:d6:a5:ef:2a:f5:7a:ed:c4:9c:c8:41:cc:4c:0e:
82:b4:88:ba:66:ba:b9:17:71:c9:3e:8b:ff:7a:a3:
1f:8a:5e:26:c6:1a:28:c3:4a:7a:78:7e:d9:7f:c2:
aa:1d:b9:2e:8c:43:2e:c9:5b:a5:5d:5a:65:78:3f:
8d:33:6e:d6:d9:5c:42:d0:04:ea:0b:1e:00:1a:13:
f0:7a:a0:20:f6:a6:30:32:6f:c3:c3:88:0a:92:aa:
00:18:da:07:59:82:64:94:be:1b:1b:fc:87:5a:e0:
b6:4c:b3:f9:49:e4:33:be:b3:60:43:30:2a:2a:55:
27:c9:f5:b5:fe:f9:3a:c8:3d:4b:cf:57:9f:5d:0f:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:14:77:F6:1C:4B:35:70:A5:26:28:37:40:03:C5:BF:30:CD:2F
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:44:0b:98:39:df:d0:10:2b:93:4b:35:ee:42:f9:3b:81:
3d:d6:0b:99:f7:61:cb:13:7e:bc:45:e4:3e:45:d6:34:26:a9:
d9:67:89:1f:c4:da:c7:c8:c8:78:c0:2f:28:95:d0:9a:30:f7:
15:02:70:ed:d5:b1:5e:1a:51:b2:5e:e9:a3:93:85:d4:87:72:
41:ad:96:63:6d:00:d2:ba:05:68:75:a5:82:31:ed:a2:db:f7:
d2:1a:cc:14:8d:a4:74:e5:fb:a3:a8:a3:fb:b4:e3:2c:3c:e4:
dc:ae:15:ff:2c:b7:7f:73:12:69:0a:09:96:fb:fb:9a:cb:ea:
3b:37:06:5e:d5:42:00:01:01:d7:32:2a:71:fa:fa:2a:85:c5:
12:f3:eb:fa:46:7b:c4:5f:41:5b:9b:66:98:cd:ca:a2:eb:90:
5d:e4:b5:ce:e4:43:95:b9:2c:85:db:16:57:ac:fc:59:d8:dd:
58:e4:40:c1:d3:4b:5f:99:7e:57:a9:a2:ba:63:5b:7b:f6:96:
f8:87:ba:3f:26:73:a8:28:40:3a:50:cf:f9:01:96:d7:be:12:
75:be:b4:cc:44:aa:0c:dd:1b:53:59:1c:88:a5:25:53:9d:e2:
f4:4f:92:33:56:d4:20:37:fd:c9:ca:1c:d2:df:77:7d:3c:07:
a9:f1:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client