Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: otpnPxnOJTNL0x83BRwuDMIX5PQYXKvOAM5B7XgwQd0=
Subject key identifier: 73:61:AA:FF:EB:F4:4E:E9:5A:05:A0:31:CD:AF:63:66:19:FF:52:4B
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019A71EE86BACF0494EC7CFEDC314D7A51E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0D75
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: 7ExFr0dUxn/CL8AvDfmFeFGLtBAyFmlf6x86/vIPjBY=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:ba:cf:04:94:ec:7c:fe:dc:31:4d:7a:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=7361aaffebf44ee95a05a031cdaf636619ff524b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:fd:76:00:8f:b4:26:31:23:d6:16:38:22:
21:55:77:59:ea:0b:b2:a5:d2:db:ca:aa:7f:ae:60:
11:2b:d7:94:e8:23:4a:4d:5d:5e:59:a2:a7:9b:20:
9c:99:72:d8:fe:1f:7c:6f:e3:8a:5c:bd:9f:d2:74:
17:f9:f9:32:76:7f:84:1d:e5:1a:38:d7:5d:69:c1:
0d:44:0e:e8:08:98:d0:10:20:61:e2:cf:0b:a1:b4:
fb:d1:dd:39:a3:9d:b2:4e:c9:e2:06:a0:a7:34:97:
b8:42:18:26:05:bf:6c:f9:cf:e5:a1:3b:a9:6c:f9:
39:e3:33:3c:9d:5c:8e:f7:af:fe:af:11:f8:10:03:
71:47:76:e0:78:2c:2e:84:c3:e2:62:7e:22:90:a2:
79:c3:e4:8a:6e:33:c6:7f:4c:dd:4c:80:24:0e:8e:
e2:2b:45:b1:fc:75:f8:96:de:2d:20:1f:44:83:a8:
bb:56:85:e3:28:b9:6a:a9:ed:75:19:ba:ac:e1:e7:
09:fe:53:4f:81:4a:8c:62:b7:4d:0a:79:9e:66:b7:
39:1d:57:14:f8:c9:d1:41:ed:49:a2:41:35:21:b0:
06:88:3c:e6:24:85:9f:17:d1:ee:34:36:df:e9:70:
1b:f5:f3:7d:79:48:5f:23:b5:e1:43:03:bb:da:2c:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:AA:FF:EB:F4:4E:E9:5A:05:A0:31:CD:AF:63:66:19:FF:52:4B
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:d8:b1:3d:ab:65:45:ae:af:9a:d0:6f:e5:94:f9:d5:6d:
30:e3:b1:ce:7b:5d:b2:1e:22:67:fa:17:9b:f1:b4:f6:28:d2:
d8:3c:0f:55:ff:12:a5:00:b4:fb:a1:db:51:d5:bf:c4:e0:69:
0d:29:91:89:ba:58:cd:ab:35:fe:7d:6b:fa:84:ca:d9:36:ae:
a8:c2:9f:57:c6:f5:0f:81:75:be:6b:67:17:cf:81:30:8d:e7:
f9:ca:02:ec:36:d6:aa:24:d6:62:d6:48:4d:a4:37:75:d0:46:
9f:b5:13:fc:ee:e3:a2:f7:e0:1d:fa:0c:7c:e2:54:b6:d4:0d:
94:ee:d2:7e:e0:2a:bb:58:cf:78:66:a8:aa:94:1c:9b:b8:f1:
0b:bd:2b:d7:a8:ab:57:b4:c5:b4:f6:f7:3a:68:96:ae:9a:ca:
b8:cf:0a:88:c7:2d:92:24:b3:12:f2:54:3d:1b:6c:07:87:c9:
0d:a6:cf:9d:74:d3:8c:65:39:a2:ac:a5:ff:45:ed:49:07:1c:
a6:29:23:51:a1:dc:fb:a7:fd:de:43:2a:48:e6:87:6f:56:8f:
a9:96:6c:6c:0a:e2:4c:71:cc:c4:26:19:8c:7d:59:bb:f2:a0:
90:5d:ff:b3:32:92:a0:4a:e2:0f:62:5c:f2:03:c2:b8:ac:c3:
4c:8f:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client