Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: HZcqMsdq26FzEcr/gZWxeS8Oh8INK0FFJ/R/n0LfSfU=
Subject key identifier: 16:C2:79:5C:72:11:6C:03:15:84:D0:82:55:1D:0E:E8:62:AE:A5:5A
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 019A2478E0AE057AA8C1B6EF1CC3AC366E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:01:32 +0000
Manifest this update: Mon 27 Oct 2025 07:01:32 +0000
Manifest next update: Tue 28 Oct 2025 07:01:32 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: P6XaJ4UYhVwkdRQbK3N6TuZAa70R1KILhmXtzrpychA=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:e0:ae:05:7a:a8:c1:b6:ef:1c:c3:ac:36:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Oct 27 07:01:32 2025 GMT
Not After : Oct 28 07:01:32 2025 GMT
Subject: CN=16c2795c72116c031584d082551d0ee862aea55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:e9:99:53:f2:ed:d4:b5:ff:25:38:4e:9c:
8c:99:43:ac:22:62:5d:b6:42:a9:e3:dd:bb:e9:11:
42:a6:ae:4e:b8:b4:c8:f1:e1:35:d2:31:25:d2:67:
3a:61:af:da:d7:ad:4e:85:66:ae:63:f9:4c:e1:b9:
fb:09:32:42:f3:bf:1b:97:e8:17:ac:11:af:e0:3b:
87:3a:30:bc:30:96:56:66:72:36:79:2e:66:bb:04:
15:30:b5:60:69:2b:b8:77:6f:4c:62:b0:37:9b:f1:
28:4c:3b:70:ee:55:f7:e9:c9:57:42:1f:1f:c7:0c:
ed:e2:fc:85:1e:b5:67:15:f3:e4:d3:e2:1d:dc:a7:
80:04:c6:7b:ed:ee:66:85:15:f4:fb:d5:5a:02:db:
b0:f1:b0:c2:4e:64:67:8c:d0:81:e7:ad:3f:74:04:
72:6b:8d:db:c4:2d:f6:62:87:d0:c0:b6:2b:4d:6a:
d4:79:d3:20:6c:c9:16:99:b5:06:23:86:46:33:87:
e5:fe:5d:c3:1b:4a:a8:ec:7d:89:0b:5e:b8:83:9c:
e5:6d:e3:f6:05:a0:e2:be:2a:dc:e5:aa:d0:5b:cd:
b3:61:c9:cc:fe:bd:6a:5f:6d:e0:1a:ce:10:ae:64:
d2:72:06:b5:69:e3:17:39:d2:30:e6:73:20:68:30:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:79:5C:72:11:6C:03:15:84:D0:82:55:1D:0E:E8:62:AE:A5:5A
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:10:d3:6a:7d:cd:af:47:68:b6:2d:9e:01:24:2c:29:78:58:
0e:64:fa:a2:3d:12:33:af:cd:44:6a:c7:98:04:c7:6c:11:54:
93:f7:0f:63:67:8a:7e:13:33:41:6f:fa:7b:d9:2b:4a:32:74:
42:78:b8:52:a7:31:eb:27:09:84:e6:6d:6c:44:c1:19:d8:35:
92:d1:ea:41:5b:84:94:65:fb:fc:69:14:27:2a:02:45:d5:cd:
97:4b:96:2b:36:ac:bd:14:a7:d1:0d:46:14:d8:28:68:48:f4:
71:f9:75:9d:e9:d5:cb:3c:95:4d:56:02:7e:cb:fd:09:9c:59:
f3:14:a8:5c:53:2b:b0:ac:6c:14:d4:a7:a3:0c:2b:01:9c:67:
6d:0c:c7:58:a4:99:af:dc:db:05:aa:cc:c2:63:87:a1:1f:27:
de:e1:d2:f9:4c:3d:61:11:77:bf:f1:ff:2a:df:a8:9b:04:7e:
ea:2a:5d:b3:6a:cd:2e:6a:93:d6:6c:68:ec:48:fc:19:e8:af:
76:cd:19:f9:7b:55:15:62:2a:26:2a:05:79:0e:7d:fe:7d:63:
be:29:89:30:cd:2e:b4:d2:a6:80:9b:c7:47:9e:7a:16:51:7f:
fb:57:72:ce:01:3e:ee:e5:28:c4:3a:9f:e9:4c:7b:13:93:c4:
5c:d0:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:06 2025 by rpki-client