Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: bzFS6/bmBf7qwX5WsDvLjTs4cscdYwHgKzQ8z8Z5vhc=
Subject key identifier: BB:A4:A9:60:45:91:D3:AC:2F:E1:6C:6C:A1:BD:3E:FF:3E:93:CC:C0
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019A72CA28F0C2B42C93AFB0BA0FCD9A473B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:42 +0000
Manifest this update: Tue 11 Nov 2025 12:00:42 +0000
Manifest next update: Wed 12 Nov 2025 12:00:42 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: zESd8/yi7xFa6Q4yiqDn7ajFa0ldakaFcG3KWbjHKpM=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:28:f0:c2:b4:2c:93:af:b0:ba:0f:cd:9a:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Nov 11 12:00:42 2025 GMT
Not After : Nov 12 12:00:42 2025 GMT
Subject: CN=bba4a9604591d3ac2fe16c6ca1bd3eff3e93ccc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:d9:51:f5:d8:c9:0d:e5:05:03:42:7c:48:
2a:3c:d4:9c:93:58:b7:8b:ec:1d:ce:4c:10:37:ec:
a2:29:90:8f:f7:b1:bc:b4:38:65:28:c5:1e:9a:2d:
a9:a5:01:01:a1:a8:07:77:b6:97:05:8b:53:d1:d0:
1b:ae:2a:7e:36:90:4c:dd:33:a1:6b:99:ac:cd:03:
b8:d1:6a:51:c3:9f:e4:bd:99:50:f9:49:d7:6e:38:
eb:c0:a0:28:15:1e:4f:2c:bf:16:56:bb:4d:29:9e:
39:00:e2:61:67:01:1b:1c:ba:4b:86:6c:21:6e:e2:
30:64:57:80:71:df:76:4c:2d:0f:c0:f8:22:47:19:
b6:38:3b:25:84:d6:cb:92:51:6d:05:8d:68:6b:09:
b6:19:7a:83:74:1f:20:6e:bd:7f:66:ba:e5:55:d3:
c5:de:df:bd:e1:1b:11:22:89:ba:79:60:10:0a:68:
34:93:e2:3b:9b:f1:b0:d1:bd:bb:7b:c6:1e:f4:72:
2b:59:13:5a:07:5d:37:65:05:41:42:3b:96:0d:fb:
45:da:08:a8:62:2d:92:a2:3d:65:5c:22:61:d8:59:
5b:bf:67:5d:45:1c:f6:be:86:95:0a:5d:47:90:a4:
75:92:75:ed:9c:6f:bc:c8:fa:16:ec:51:8a:b3:92:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:A9:60:45:91:D3:AC:2F:E1:6C:6C:A1:BD:3E:FF:3E:93:CC:C0
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c8:59:e2:1a:f2:76:4d:50:45:41:f6:f7:e8:20:b8:a9:a3:
96:cc:de:0f:86:b8:2d:74:96:a5:7a:d1:bf:d1:61:91:af:52:
3b:da:e6:53:71:40:05:cc:21:7c:27:53:13:1e:a3:96:e2:78:
d2:7b:a1:bb:da:72:9d:8f:8a:f7:3b:0e:1d:b7:e6:23:c0:38:
34:63:98:78:12:89:49:11:15:ed:ac:7d:ee:09:4c:0b:be:59:
5f:16:00:e5:8b:41:b7:6f:78:aa:80:66:f6:9c:f5:f7:26:8f:
67:13:ed:48:ce:5e:3d:60:60:e1:f2:fb:d1:d9:22:9a:7d:05:
7c:1b:4c:dd:5f:99:06:29:16:76:e4:53:5e:3c:70:80:91:a1:
8f:7e:97:93:a9:6f:38:3f:04:69:ca:16:b9:50:86:7e:46:57:
87:a5:26:b8:a7:f0:53:78:1d:8a:f7:72:45:75:fb:f6:11:25:
17:64:d3:25:d0:ee:43:68:0b:a5:e2:15:90:91:af:17:e7:b4:
cd:cd:d9:91:5b:46:0a:20:ed:36:7b:46:03:17:62:8a:a4:f8:
30:8a:fe:2f:1e:7a:3d:3d:f0:0c:9a:ed:bf:fe:88:0d:b7:10:
32:b7:9d:21:10:d2:53:8c:d9:c0:a7:72:d1:a2:b3:57:f0:e2:
32:00:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:32 2025 by rpki-client