Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: jMY2syOmz15t5s3i7wnt2e/vqkIca3HMM2LcerHklQ4=
Subject key identifier: AC:60:28:71:5E:F0:BF:90:2B:5A:BA:00:26:14:D4:F1:A2:49:9F:EF
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 019A2AB0A8C7BD71614CBB8E5D62A93C456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 0AFB
Signing time: Tue 28 Oct 2025 12:00:11 +0000
Manifest this update: Tue 28 Oct 2025 12:00:11 +0000
Manifest next update: Wed 29 Oct 2025 12:00:11 +0000
Files and hashes: 1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: /+/jjYp4bt+zu1cQoFcg7hLhvwJseHU/xmRXlDL9yvg=)
2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:a8:c7:bd:71:61:4c:bb:8e:5d:62:a9:3c:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Oct 28 12:00:11 2025 GMT
Not After : Oct 29 12:00:11 2025 GMT
Subject: CN=ac6028715ef0bf902b5aba002614d4f1a2499fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:a5:0b:93:10:a3:ea:f6:3a:90:9d:7c:17:
53:01:37:c9:b9:8b:d1:49:cb:ff:eb:45:77:37:64:
75:0b:db:c6:6f:40:31:89:fb:45:35:ac:a7:43:4e:
ad:4c:e8:36:63:5e:93:f6:d1:b7:dd:70:71:4f:19:
71:84:fc:5a:97:b4:ca:e6:f2:24:84:5c:70:2e:eb:
93:d5:8f:7b:52:3c:c9:69:9c:4f:97:74:f9:08:25:
45:89:47:14:22:34:c5:70:1c:65:4a:21:bb:1b:5a:
a1:3a:7f:d8:8e:34:85:89:48:da:f1:d9:b2:64:fb:
8e:15:a1:07:ba:5b:2b:53:f3:88:8f:4d:48:79:af:
bf:eb:0d:2e:8e:ec:4f:c1:cd:2c:94:bd:e3:25:54:
f2:02:a2:f4:89:7b:27:c3:e5:2b:be:d9:47:64:f1:
23:5a:06:b0:90:b0:fb:ae:7f:a6:86:9d:96:5e:07:
66:25:66:87:d8:30:1f:ef:53:3d:22:3e:02:e0:c7:
f0:a3:2b:dd:32:7b:be:bf:5f:da:cd:c7:88:0a:06:
2e:46:11:4b:11:2e:a4:db:57:54:bb:82:e0:0c:ff:
7b:c8:04:05:b7:15:f7:f6:96:da:53:d5:bf:cd:36:
83:75:82:17:63:91:a3:5c:b2:db:11:9d:d0:3c:fd:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:28:71:5E:F0:BF:90:2B:5A:BA:00:26:14:D4:F1:A2:49:9F:EF
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9f:4d:d6:00:34:62:ab:a3:2d:66:2e:a1:06:91:27:24:36:
d2:ca:0e:8d:93:36:a8:d0:40:01:5f:82:c1:b8:15:4d:b5:63:
e3:43:74:06:99:5f:39:d8:1d:3b:45:7d:a9:44:34:76:3b:12:
0f:45:75:a3:e4:3f:1f:d4:95:c6:01:4a:63:08:cf:2e:cb:13:
e4:a2:60:e4:d7:fd:8a:61:74:a0:b0:7b:66:e0:04:69:34:15:
61:50:2b:9b:0d:2b:42:49:da:e7:0e:fd:2b:51:38:b1:74:59:
ae:a1:d9:04:52:63:ff:ce:d7:6f:60:a4:6a:2b:77:7a:6f:9b:
36:5d:a4:3b:0e:13:bd:db:44:4b:e4:60:64:bf:b3:a3:20:4b:
a1:9c:c7:eb:91:22:50:62:7e:2e:8f:61:68:a2:bb:1a:d7:ee:
e2:4f:c2:1b:00:65:56:f6:f7:9f:75:49:30:73:21:32:e9:8b:
8c:15:91:c3:d9:b9:7f:dc:50:95:40:05:5e:6b:fd:5d:67:f6:
5c:09:6c:cb:7f:7c:32:8e:1d:9a:92:24:10:93:17:e1:16:d9:
88:96:73:69:5c:a5:75:e9:64:8f:6b:e0:75:f8:0d:8b:6e:4b:
1e:14:3d:d3:aa:60:5b:5b:75:ba:d0:b2:1b:62:72:12:70:22:
15:34:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:16:42 2025 by rpki-client