Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: VbOHt5/1LpdhP+L3zDfD7Elk7O8ynFXoeXqnqFaWJGY=
Subject key identifier: A6:FA:0B:1F:B5:27:39:8F:83:CE:A9:62:4E:27:66:7D:5E:6E:A5:4A
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 019A1C19C7977E5B555EBE375CFBB7E60B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 16EE
Signing time: Sat 25 Oct 2025 16:00:42 +0000
Manifest this update: Sat 25 Oct 2025 16:00:42 +0000
Manifest next update: Sun 26 Oct 2025 16:00:42 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: 1KnOjaPvjLJom57mo1jbrzLcgkgBfOFLGDyclVivi2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:c7:97:7e:5b:55:5e:be:37:5c:fb:b7:e6:0b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Oct 25 16:00:42 2025 GMT
Not After : Oct 26 16:00:42 2025 GMT
Subject: CN=a6fa0b1fb527398f83cea9624e27667d5e6ea54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:8b:07:25:11:a3:45:30:21:83:35:c6:e7:
be:86:c9:8a:81:0f:86:88:d9:33:d7:a5:41:c8:e1:
57:ea:ff:6a:82:4b:23:c3:6d:aa:3d:97:d0:cd:a7:
69:33:e3:1c:98:c2:27:ef:13:ee:af:a5:ac:4d:b6:
7d:5f:ff:50:e7:3c:98:b9:a2:c8:7e:54:a1:cc:e5:
50:99:31:cb:c4:d7:c1:1e:7b:5a:24:db:19:26:df:
11:e9:ba:92:f4:00:2b:11:de:14:43:82:33:90:51:
3f:d1:40:c1:d0:87:81:48:59:81:dc:42:9f:a4:36:
04:6e:3e:f8:ae:a2:4f:f5:a5:da:5c:4f:39:07:b8:
66:05:a8:8a:96:e9:36:a1:b7:ac:42:63:89:d2:4c:
3e:75:07:a0:d9:09:62:97:ec:9e:89:70:00:cc:c7:
fc:fc:79:d0:73:ae:dd:5d:02:44:b3:9d:70:de:f2:
1e:88:ad:98:66:00:7d:c2:9b:0d:02:37:db:44:94:
6c:23:63:d6:ac:7b:ba:65:10:7a:d5:a0:af:a3:e6:
86:f3:a5:7e:2a:76:9f:63:db:7e:82:0a:d0:96:c4:
a7:3c:65:f5:f1:b2:96:2b:8f:eb:51:13:4d:a4:19:
1c:31:80:cf:91:ab:a2:c7:4b:23:9e:4c:54:e5:ce:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:0B:1F:B5:27:39:8F:83:CE:A9:62:4E:27:66:7D:5E:6E:A5:4A
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:e3:6d:b5:b7:f0:4a:11:c7:ab:5b:6e:ff:ef:06:91:02:
04:a6:9e:f9:ae:45:a3:36:5d:e4:22:7d:6d:17:62:32:73:3a:
94:11:99:8c:1d:b6:bd:9f:05:f8:44:54:50:df:be:dc:d5:01:
f6:29:64:e6:e1:48:b2:05:3f:9c:f3:e1:4f:6b:20:58:fd:c5:
74:67:bd:c4:4b:aa:d9:89:0a:a9:f8:30:8b:1d:5c:d0:24:bf:
ae:04:7b:53:80:ef:3b:cd:9b:1a:3e:eb:fc:5f:56:2e:72:7b:
9d:30:74:48:e4:d6:60:02:85:7e:cb:78:cc:74:19:fb:e3:d4:
76:e6:b6:9d:86:df:6b:e5:16:7a:82:3f:7e:ec:66:fa:b2:8c:
3b:92:5f:a2:24:a0:29:3a:14:95:55:3a:16:97:97:46:04:3d:
59:cf:83:05:06:e7:da:57:1a:07:9c:0e:2e:51:06:4e:cf:09:
34:75:da:90:e1:3e:9e:f7:0f:9c:2d:cf:b2:8d:d8:1c:94:b2:
77:50:2c:ae:10:e8:a0:49:1d:21:33:f7:e8:24:a3:9b:1f:cc:
54:80:de:60:bd:05:d3:b0:0a:a7:e7:24:db:8a:f1:8b:91:6f:
07:b0:c3:55:57:f6:eb:02:c2:6a:5a:03:6d:2d:f0:56:4e:c1:
60:f1:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:54:10 2025 by rpki-client