Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
File: GnCnIdG1PtkdhbbFNaxytJBPnD0.mft (raw, json)
Hash identifier: 9rPRMLdjeS2xOFgG3h0wxpViQw4SVcvQstWH7PT1FMw=
Subject key identifier: 59:8B:A9:DE:BF:15:BC:A9:2F:B5:3B:8A:D8:3E:52:EA:56:E6:EE:1B
Authority key identifier: 1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
Certificate issuer: /CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Certificate serial: 019A71807F31E511F1A90F2A5853FE01C312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
Manifest number: 3D
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: GnCnIdG1PtkdhbbFNaxytJBPnD0.crl (hash: uPKV1dAauDP4PoufSPa57ZY6kcpbvjCZ1wu6Jv2XmGc=)
2: NcvL-cWiOsIwbHlPpjJOxwZQhdo.roa (hash: Esp//dlbeL22yi1M90HkNJoPvC1Y47F4dd714WYg0sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7f:31:e5:11:f1:a9:0f:2a:58:53:fe:01:c3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a70a721d1b53ed91d85b6c535ac72b4904f9c3d
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=598ba9debf15bca92fb53b8ad83e52ea56e6ee1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:00:52:35:2a:86:0f:a4:31:4d:b8:66:72:
b8:f5:f2:cd:93:a5:ae:79:98:70:fc:0f:cd:1d:a7:
1e:0d:9b:71:ec:80:b2:00:52:12:2c:46:1d:3d:8c:
d5:de:c2:ea:4d:bb:57:6a:b7:e8:ee:9a:e0:dc:4c:
d4:06:f4:28:0c:58:d0:38:f4:81:b5:06:f3:de:f8:
5c:3b:43:dd:20:8a:60:ca:f7:28:6b:2c:72:b9:b3:
08:44:36:8c:7c:89:41:ac:9b:bb:62:29:31:8f:00:
68:8e:55:d3:2e:e3:a4:1b:da:99:f1:75:d2:6e:8e:
34:e2:95:39:e6:8e:99:c7:e0:8c:84:e0:50:9c:35:
0c:e4:ae:a1:dc:90:b0:f1:70:58:84:f4:30:25:e8:
27:92:fb:f4:f3:37:f7:e1:97:4d:00:25:82:11:9e:
c5:0c:6e:dc:a5:10:14:45:bb:8a:80:b9:eb:0c:c4:
44:fe:7e:e8:60:6c:59:88:6a:e6:27:34:29:4c:87:
65:84:8d:20:cf:80:76:71:a7:42:b8:d5:58:29:be:
3c:b9:f1:9e:fa:96:28:01:eb:48:7f:61:58:17:3e:
90:1f:53:47:8e:71:fa:21:fa:7e:e3:e6:60:76:f6:
75:45:3f:e7:79:fb:f3:c7:4a:57:dd:4e:d1:75:a2:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:A9:DE:BF:15:BC:A9:2F:B5:3B:8A:D8:3E:52:EA:56:E6:EE:1B
X509v3 Authority Key Identifier:
keyid:1A:70:A7:21:D1:B5:3E:D9:1D:85:B6:C5:35:AC:72:B4:90:4F:9C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnCnIdG1PtkdhbbFNaxytJBPnD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0e095b-6891-45c5-a3a1-f0c4eb154261/1/GnCnIdG1PtkdhbbFNaxytJBPnD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5d:75:14:b4:c6:ab:90:0d:ed:a7:1d:72:e3:a7:f8:e8:bc:
65:89:8a:54:09:e6:0b:87:dc:6d:d0:b2:9c:1c:e1:77:67:1e:
be:07:02:23:63:d7:b2:f6:b3:ec:5c:49:b3:f2:48:75:04:99:
bf:8d:1e:49:02:f5:a7:64:b8:2b:b9:c9:16:05:6b:73:8f:36:
65:6f:7f:8d:1e:24:22:66:0b:a5:dc:69:f6:7b:b5:58:1c:f2:
79:d8:0c:f6:8e:0a:f0:47:33:4e:52:fc:8d:76:69:03:54:94:
c8:92:f4:af:09:fb:81:07:e6:f4:62:4d:3d:11:9e:1b:6c:49:
c2:bf:54:9b:73:59:28:6d:22:6a:d4:37:fb:97:2b:9c:1e:b8:
95:48:e8:f9:83:f8:a4:1d:23:10:79:fd:1b:32:b2:7f:81:40:
92:ea:22:67:63:0c:5b:2e:33:24:82:8b:b5:d5:9e:67:0f:ec:
17:2e:42:5b:ab:f2:48:54:27:ed:ce:af:59:88:33:fe:a6:dd:
e6:81:f4:9c:40:c0:06:ca:ff:cd:11:e6:6a:35:9e:41:5f:57:
f6:e9:a1:97:81:58:7e:70:27:59:0f:e2:f0:8f:81:c9:2f:d2:
ca:b4:7b:9b:8f:4c:93:61:ec:17:5e:24:f5:f8:f9:c9:92:95:
44:d9:da:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:32 2025 by rpki-client