Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: GTzvpA5nLZxgsP5BAUYObYcFrrM3BU5ZvgbNNoTZKGs=
Subject key identifier: 2D:DE:C5:88:21:EC:DD:15:3C:3D:6F:E8:EE:2E:D2:9D:F3:7D:0E:34
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 019A01B4FEBB83284C86EFBA86408DE08048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 13:00:30 +0000
Manifest this update: Mon 20 Oct 2025 13:00:30 +0000
Manifest next update: Tue 21 Oct 2025 13:00:30 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: n8SDY/+B3NtBXaqgu6AFVLsuBbqZDezv/ZGMhL9w8+g=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:fe:bb:83:28:4c:86:ef:ba:86:40:8d:e0:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Oct 20 13:00:30 2025 GMT
Not After : Oct 21 13:00:30 2025 GMT
Subject: CN=2ddec58821ecdd153c3d6fe8ee2ed29df37d0e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:4c:9a:66:1d:e6:6d:f1:50:3a:f2:01:b9:
d8:ed:d2:8f:59:f6:0f:b7:12:6d:64:9b:17:90:1f:
f0:8b:af:75:78:45:6d:03:42:b1:43:15:13:6e:9a:
13:ec:7e:99:22:a9:5b:f6:57:10:b1:d6:92:e7:5f:
7e:a6:de:26:27:92:af:4a:52:0e:c2:dc:9d:35:39:
bd:d6:3a:b7:14:d9:f7:ee:96:4b:b0:c5:72:10:68:
0a:8a:c3:d1:b8:c5:87:c5:31:1e:5a:f8:2b:6a:1e:
72:03:ac:f0:2e:48:b2:d7:dc:f2:fa:32:c5:33:9e:
88:a0:a2:e2:bf:ef:2d:16:94:90:ca:28:38:32:9b:
8c:5b:87:0e:d0:fc:ac:62:0a:fd:89:bb:a6:a9:c5:
5a:02:9b:8a:1f:b4:16:e8:03:76:65:e3:4c:58:6b:
d1:af:97:72:fd:bc:cd:48:63:4b:86:c9:f4:88:6f:
b0:ba:bd:84:2d:0d:f6:a0:6e:1f:de:8d:19:54:92:
e3:05:b1:87:ab:01:0c:29:74:96:d6:83:88:98:9e:
43:8e:87:09:93:06:0d:ca:b8:9d:35:b5:91:30:e9:
e7:62:3a:ce:1d:2d:46:ed:d0:e6:1a:35:f8:84:95:
b9:1f:bd:18:bd:8d:de:2d:48:6b:08:7d:83:d5:f9:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:C5:88:21:EC:DD:15:3C:3D:6F:E8:EE:2E:D2:9D:F3:7D:0E:34
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:88:46:45:94:32:63:67:d1:44:f9:f6:07:ab:b3:66:55:ec:
dc:ef:ec:61:78:7f:e9:75:7a:3b:7e:ee:5b:63:40:99:6b:86:
42:58:9c:b9:46:e4:53:5f:72:38:88:b6:33:bd:cd:79:13:e2:
c0:c1:1c:39:09:29:3f:9b:db:9d:e8:03:f9:40:fa:e3:0e:b4:
eb:85:2a:cc:2b:3e:ff:e0:ba:35:84:06:ae:ad:de:61:f1:fb:
e8:1c:bf:5f:29:ef:be:ab:36:8d:cc:cf:81:92:0c:08:b3:ed:
18:77:f5:e2:c4:43:3e:e6:9b:6b:26:fc:f2:43:8d:82:20:6c:
7f:14:5f:87:40:ee:78:8f:38:e2:e5:db:81:25:1b:36:9f:69:
90:47:34:ec:af:8b:78:f6:20:5c:45:be:98:2a:35:7e:d4:0b:
55:2c:ed:ec:3d:79:05:d9:fc:19:2d:95:4c:86:60:ce:24:85:
6f:ed:9f:d0:76:d2:42:7c:15:3c:ff:a5:54:40:aa:a7:84:70:
ec:01:27:3a:6f:dc:03:07:1a:82:70:4a:07:06:f8:a6:6e:59:
f9:cc:59:b6:be:ed:91:85:59:fe:04:e1:f5:e4:ef:b3:64:85:
9f:6f:83:64:45:43:c7:5a:44:9f:86:50:0b:94:e5:59:bc:65:
4f:77:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:34 2025 by rpki-client