Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: m4G5ZWkkYDlevY2H3jtTN/B+XWCgRZmoFBc/YYqvEAk=
Subject key identifier: 8C:FD:58:E9:6F:04:8A:61:5B:06:E7:06:CD:95:91:33:54:A5:1F:57
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 019A71B825FC5F1465D432F802ECFF36FE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0C45
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: z2CMfCbcgDblbV17p1G5h9yyJkXIgsNnPMftzM9m1ZY=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:fc:5f:14:65:d4:32:f8:02:ec:ff:36:fe:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=8cfd58e96f048a615b06e706cd95913354a51f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:3c:12:2a:ca:0b:7d:77:70:d3:6d:7e:37:
4e:ae:5a:04:ec:28:48:0d:29:0e:c9:1b:22:37:bb:
ba:27:60:40:ec:7b:49:36:34:a7:54:56:92:91:aa:
16:54:b1:a8:fd:72:5b:ca:44:cc:1c:dc:51:75:82:
2f:48:88:28:18:11:95:7c:60:65:0d:de:96:cb:4f:
70:b8:5e:b1:6c:52:74:e4:eb:9d:54:5b:8f:00:96:
fa:4e:95:19:2d:f6:2c:6e:4f:85:f7:63:44:10:10:
3e:de:1b:03:f6:fc:56:9f:c2:f4:8b:77:f3:74:df:
3f:51:a2:3d:14:f4:e4:99:46:c2:22:bc:38:96:a2:
39:8b:56:50:07:aa:34:d1:0a:54:13:dc:02:90:47:
4a:a0:a2:fb:e6:08:7c:4e:9c:19:3d:f7:b6:50:e7:
5e:c1:91:a2:dd:c6:7c:46:d2:9b:e5:19:38:53:69:
e3:69:a0:7e:43:a2:82:57:4a:8b:53:31:db:70:3a:
ef:2d:db:c0:63:ba:27:76:a6:af:27:3b:e6:18:2c:
90:32:0d:9c:78:09:f3:46:e1:ae:53:f5:a5:3d:0a:
73:55:7a:44:b2:d3:42:4d:e1:51:54:c9:16:30:81:
19:f9:94:8f:e0:1e:df:0c:64:81:3a:66:ec:d4:be:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:58:E9:6F:04:8A:61:5B:06:E7:06:CD:95:91:33:54:A5:1F:57
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:80:e9:84:3e:0f:46:b5:21:02:8e:5d:7b:2f:53:0b:c5:c1:
81:cb:69:25:a9:7d:3a:1b:f8:71:1a:21:09:9f:d0:a7:76:5f:
10:96:68:cb:2d:8f:e8:96:83:c7:f2:5f:3e:fe:a7:72:50:07:
9d:5c:e1:59:a0:90:e8:de:a6:b1:44:ec:5e:c2:62:7f:3d:3b:
24:ea:0f:e5:e3:0d:4e:48:61:5d:e2:b6:b9:36:05:96:be:3d:
19:30:99:d2:59:94:e8:2e:a0:b4:25:fb:e7:ce:65:34:74:95:
0a:61:4b:d3:af:ba:6f:8c:87:ee:cd:0f:e8:c0:ad:8d:fc:7d:
2e:08:87:47:be:dd:f3:ff:1d:3d:1c:fe:a2:d0:82:4e:f0:e9:
02:fd:62:bc:b8:18:a8:eb:e8:92:69:d8:1e:ee:e5:9a:a1:d4:
51:38:a4:f1:aa:35:54:57:7d:d0:24:24:98:d1:97:42:98:9d:
c3:45:3f:4e:39:88:f8:7a:01:ec:e0:f8:2d:2f:f0:6e:25:8f:
d1:14:02:cb:18:56:81:14:3e:42:d0:a6:ae:74:17:76:76:08:
23:65:d6:99:a9:7d:33:8b:3b:4e:2d:75:e8:b9:48:92:f6:21:
8c:2f:74:21:80:c5:a5:f4:27:46:fe:b3:48:7f:e0:bd:96:98:
38:ff:dd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client