Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File: GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier: I6Ucl4c5JH2mcory35no+pXPJovjFtMlYoTMQmoByPU=
Subject key identifier: 0B:DA:ED:22:A6:38:C2:9B:6B:B6:E4:3C:9A:11:CC:25:DF:08:D5:AB
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 0199239F529403AF3FAF819FA79CCEBC582D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:07 +0000
Manifest this update: Sun 07 Sep 2025 10:01:07 +0000
Manifest next update: Mon 08 Sep 2025 10:01:07 +0000
Files and hashes: 1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: NKF3uXQ8DBNRbTxN0ROT7O+iks73/EzSR5UerqXgvRE=)
2: qMZKQsm86k3APveafN2OHKFVdlc.roa (hash: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:52:94:03:af:3f:af:81:9f:a7:9c:ce:bc:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Sep 7 10:01:07 2025 GMT
Not After : Sep 8 10:01:07 2025 GMT
Subject: CN=0bdaed22a638c29b6bb6e43c9a11cc25df08d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:e5:09:7c:5e:fa:c8:c5:d1:61:60:44:15:
81:c1:33:cf:73:15:c3:1e:57:a4:06:b0:e7:0e:92:
d8:fd:59:f8:8e:4f:5c:ef:9f:63:d2:53:bb:a3:53:
3e:c1:82:ab:fe:2d:3a:8e:b2:61:04:c9:4b:28:0a:
0d:6c:2e:c4:0c:11:02:05:57:5d:7e:3d:c2:66:19:
0d:ea:15:38:64:ad:c2:64:21:a2:a2:5c:5a:b1:7f:
c7:ae:ac:c9:e0:b7:65:d1:14:f4:e9:aa:c4:9c:59:
62:bc:82:38:ad:88:86:58:96:f9:e6:85:97:25:40:
b4:df:cb:7b:c0:a1:05:14:2c:cd:51:7a:13:c1:bf:
64:f1:ae:5a:cf:8c:f2:02:a9:ca:c1:9d:9c:28:56:
0f:d8:6e:57:9a:ff:c2:b1:24:e3:76:ec:43:e0:fe:
06:4e:00:7c:fb:3d:96:1e:2d:22:cc:dc:73:9c:9d:
80:1a:4b:45:c7:0f:2e:23:5d:77:8f:e8:8c:d0:f3:
43:bb:6c:f3:9e:c9:bf:46:8b:9b:56:35:39:71:bd:
16:1e:7c:29:80:cc:05:7a:97:5d:cb:58:f6:43:5f:
b4:f5:e7:62:bc:f2:36:de:de:31:36:a5:cc:94:82:
69:e7:39:75:68:3a:30:2d:f8:34:79:e7:45:9a:d0:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DA:ED:22:A6:38:C2:9B:6B:B6:E4:3C:9A:11:CC:25:DF:08:D5:AB
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:b2:fd:45:34:77:eb:cd:f9:17:cf:8f:0b:12:c9:2f:e2:
4e:fc:ea:73:53:60:ea:f5:58:e4:39:61:67:cf:9f:f3:e1:d5:
13:bd:c9:16:32:bf:f5:f9:55:e2:10:34:e1:bf:a7:5d:0e:84:
2a:de:d0:51:f3:c8:3b:31:db:ac:ae:bb:09:50:41:43:db:67:
7e:89:41:cb:59:bd:f1:1e:70:76:ba:40:99:1b:19:04:00:5d:
db:4a:5a:3c:62:5d:93:57:05:cb:35:3c:72:73:83:35:9e:29:
60:29:c0:91:ae:cd:43:fa:a7:2f:fc:d4:34:57:7b:b9:ab:b8:
d5:82:61:43:34:58:5a:f3:4d:b0:d5:94:9c:09:ca:d8:a7:23:
17:54:af:64:5d:a5:ca:22:fc:17:da:d9:2e:7c:03:54:d7:8a:
bf:78:c0:b9:f9:6c:07:1e:e1:fb:e5:ac:0c:d1:dc:4b:c8:cc:
1b:9c:5b:e7:27:48:09:db:74:5b:bd:30:cd:1d:56:13:58:73:
bc:cb:df:42:54:48:06:82:15:34:0c:8a:e6:88:8e:16:31:37:
c2:01:f7:79:2f:c2:20:81:a2:40:40:ce:33:be:8e:c4:fd:07:
3e:2a:7a:6f:d9:53:d6:ce:d1:57:8e:4e:3f:74:4b:71:ea:52:
26:8e:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:23 2025 by rpki-client