Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: LJb35p4QtWL7UyeHezSMsA17NoVqgdNaHq78FC4FVFk=
Subject key identifier: D9:A1:E6:DB:C5:B1:A7:E5:84:13:8B:1B:06:BA:C9:11:67:99:3A:17
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019A247910F1FCB8D4457747E2B0B7A7C678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 07:01:45 +0000
Manifest this update: Mon 27 Oct 2025 07:01:45 +0000
Manifest next update: Tue 28 Oct 2025 07:01:45 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: eX09VqitFWHMCKM6hWR/4bO88K9hcP40jY3dAyUOCss=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:10:f1:fc:b8:d4:45:77:47:e2:b0:b7:a7:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Oct 27 07:01:45 2025 GMT
Not After : Oct 28 07:01:45 2025 GMT
Subject: CN=d9a1e6dbc5b1a7e584138b1b06bac91167993a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:41:76:68:6d:8f:34:ad:47:76:64:b9:96:
38:ac:50:00:b5:d5:28:ea:11:9c:a4:e4:b8:f1:f5:
8e:72:12:24:4e:f5:70:e7:cc:be:d2:59:0f:e6:2b:
16:6e:af:46:c2:a4:77:a2:21:5c:b4:8f:96:3b:b1:
bc:91:c8:d5:43:4a:54:e2:8a:97:29:d8:87:ce:46:
a1:fe:76:89:c2:8d:0b:2f:f4:df:9f:33:6c:3e:92:
21:3e:10:06:ff:67:30:a4:15:21:64:f7:97:89:43:
0b:5d:e8:f5:58:b4:af:53:b1:c4:09:01:d4:86:41:
04:8f:ec:f2:7a:d0:50:64:7b:62:e6:92:6b:c9:b9:
bd:f5:bb:40:00:08:fa:bc:4a:f1:85:a7:05:ce:98:
08:3c:c5:d1:b2:d8:a8:b4:83:da:35:ac:2a:c5:ee:
6b:a8:26:11:50:4e:2c:ee:76:be:98:b2:e3:4c:f3:
17:c3:78:f4:b8:f4:a4:d9:ef:29:15:2e:51:ad:b8:
55:16:cc:68:07:8a:b3:88:56:3c:00:a4:8e:26:2b:
e2:e8:e2:1c:b1:50:1e:0b:52:cf:64:04:53:bc:5c:
35:f5:e0:3f:cc:41:96:52:a4:e6:7f:ca:92:d6:6e:
2c:1a:c8:0f:30:4e:d1:63:22:14:36:d6:ff:9a:c9:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:E6:DB:C5:B1:A7:E5:84:13:8B:1B:06:BA:C9:11:67:99:3A:17
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f3:78:74:d2:d0:53:76:53:3b:d6:01:ff:b4:98:22:a7:98:
41:a8:6b:7c:d0:09:9b:35:ec:53:57:1c:37:42:6e:1d:d0:95:
3e:59:30:88:80:c3:99:16:a6:f0:f7:52:7c:a0:f7:6f:7f:3c:
33:17:22:a5:b1:ce:f9:6f:15:92:b1:e6:f2:72:64:f6:6e:20:
1f:d0:7e:8f:bf:e9:5c:2c:1b:df:f3:6b:bc:b6:6c:27:6c:9c:
06:36:ff:88:47:66:24:71:6a:3a:2a:46:6d:74:c0:a4:86:02:
0f:e0:44:28:c0:96:08:be:a0:a1:50:e5:12:a1:33:b9:e2:c6:
e9:bb:89:c5:cf:89:f8:c8:ea:7a:e9:3a:62:11:60:85:be:2b:
ca:7d:82:f7:e4:77:07:f6:d4:55:8f:a5:73:f0:c9:91:94:0a:
b7:57:a4:64:b4:57:08:d1:d8:54:b7:b2:05:f5:3e:56:89:46:
89:eb:5f:90:76:54:92:69:5c:6f:f6:4c:37:6e:f2:61:93:68:
36:b5:6f:09:4a:53:7d:ef:8f:0b:db:a4:06:26:71:d1:b8:b5:
cf:c2:60:26:fb:d2:9d:6e:49:7a:57:d3:13:2c:12:7e:cd:1b:
7a:13:1c:08:04:99:7a:29:ab:81:7d:3f:d8:1c:84:d9:be:25:
a6:97:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:51:05 2025 by rpki-client