Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: ibDCmrJMZ3cgz2+kklvzhYL/4dMY7fIx0DjUkd8fuVU=
Subject key identifier: 89:6F:39:F0:C1:9B:F9:C9:63:87:A6:3A:B5:33:E3:E5:E7:62:DB:33
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019922C32EEC75D6DE2C82E075B3DAA1AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:40 +0000
Manifest this update: Sun 07 Sep 2025 06:00:40 +0000
Manifest next update: Mon 08 Sep 2025 06:00:40 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: jq+7/moK1WWHerVJQFaoMPxAoNcIivS+4rN/fVuIVa8=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:2e:ec:75:d6:de:2c:82:e0:75:b3:da:a1:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Sep 7 06:00:40 2025 GMT
Not After : Sep 8 06:00:40 2025 GMT
Subject: CN=896f39f0c19bf9c96387a63ab533e3e5e762db33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:d9:60:f6:21:aa:a2:1c:dd:db:5c:8c:35:
99:42:2c:e4:da:35:c6:40:7b:33:56:8a:cc:e2:05:
65:77:5a:64:4d:3d:9c:5a:a3:73:cb:d9:bf:8e:b5:
8b:18:5c:88:f0:69:d2:7f:28:ad:3b:7e:4e:e1:c1:
14:fb:2d:fd:dd:99:e1:bc:b7:42:e1:c3:8c:3e:9c:
fb:05:d9:93:8c:71:fd:09:1d:ac:d8:4b:b4:8a:f7:
97:ac:0b:77:f8:cf:c1:75:9b:21:0b:cf:b2:26:d5:
79:08:f8:7b:c9:cc:52:cf:33:e9:cf:c9:57:69:00:
c3:c5:11:e9:19:64:03:76:77:ea:d0:83:8e:d5:7c:
47:08:05:ed:31:5e:4a:57:e2:a5:f2:20:92:de:8e:
d7:82:0b:f0:5c:dd:21:ac:fa:38:58:25:93:47:43:
a5:ff:41:4a:13:d5:f5:1e:10:be:45:b5:b5:78:c8:
e6:7d:a1:0b:b2:bf:1e:9f:11:23:31:7c:98:b3:be:
d1:09:e1:c4:88:cf:8a:14:20:91:03:a5:7f:a9:0e:
ba:8d:5f:c6:37:15:e4:ed:cf:25:15:0b:8f:6e:84:
bf:34:34:39:98:85:a0:c4:87:d3:8e:61:56:54:ab:
b8:a7:7c:04:0d:65:70:39:be:d2:ae:cb:af:79:57:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:39:F0:C1:9B:F9:C9:63:87:A6:3A:B5:33:E3:E5:E7:62:DB:33
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:7a:d6:8a:c1:ff:d7:a7:11:c9:14:96:37:12:41:de:da:
d0:96:da:bc:a0:d0:35:b0:0d:43:55:db:10:a9:d6:41:ce:82:
56:9f:0f:92:36:b6:22:94:ac:ad:9c:6b:a1:f3:43:2d:fa:cd:
53:4a:0b:fb:3c:79:a7:1e:5e:62:db:03:d8:fe:60:6d:c3:00:
2c:91:f4:c4:9e:f2:37:f7:5d:8d:09:2c:20:71:13:b1:02:89:
cc:75:5d:f1:37:b2:85:28:03:ec:a2:ce:58:9b:6f:8b:c2:02:
6d:bf:40:9d:fe:d8:87:d4:77:9c:56:6b:43:85:cc:fc:fc:6b:
0b:f9:22:20:3d:78:6d:4a:0f:65:8c:ca:81:93:37:f5:01:81:
59:c2:ac:52:5e:6c:cc:a9:52:02:47:b6:25:36:0b:c9:95:1c:
a8:ac:4e:3c:ed:38:d0:94:48:55:56:07:b1:f1:a1:90:3b:e2:
a8:1f:74:a2:25:45:76:3e:5b:0b:1b:0b:57:db:e0:84:83:a9:
46:0c:e1:00:9a:f4:d2:3d:4c:4a:7d:f0:1b:62:5c:c3:53:1b:
1c:37:10:f8:46:9a:c6:2c:75:a4:d4:dc:8b:e5:fc:28:eb:8b:
7a:08:20:86:cd:4e:d9:8e:8c:55:0b:35:50:19:08:bd:af:03:
f3:ab:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:40 2025 by rpki-client