Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: rVRWNAG8f1S82ZlXh47g+hbVB23XtAWTVSRjB8uzxoc=
Subject key identifier: BF:BC:74:B0:A5:3D:66:D4:2C:B7:93:AC:88:52:10:BB:60:B3:A7:CC
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 019A1CF5989655521C48BDA85E2C193CAABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 20:00:48 +0000
Manifest this update: Sat 25 Oct 2025 20:00:48 +0000
Manifest next update: Sun 26 Oct 2025 20:00:48 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: cm0Y09whO91rlakCxYQXpnAcASoxNCiU4ZI+r4lu0Ms=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:98:96:55:52:1c:48:bd:a8:5e:2c:19:3c:aa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Oct 25 20:00:48 2025 GMT
Not After : Oct 26 20:00:48 2025 GMT
Subject: CN=bfbc74b0a53d66d42cb793ac885210bb60b3a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:65:9f:ee:c4:90:e5:79:9f:26:24:af:06:
04:99:15:a7:68:0f:17:76:b8:74:43:37:9d:08:a2:
5b:de:6f:d4:f6:f9:b7:92:b5:6d:69:e4:36:e3:d9:
99:aa:8e:83:1e:da:68:0e:cf:92:03:0e:87:96:42:
78:7d:60:ee:20:53:11:99:f4:4e:72:97:c2:a2:21:
c9:17:7f:27:17:cf:90:2a:f7:19:d7:d1:0b:4f:6a:
eb:56:62:0f:08:50:1c:83:a0:50:d7:af:aa:d3:8c:
6b:7f:7e:18:57:41:ae:76:01:ed:9b:ec:7a:ab:a8:
98:d3:58:f8:b5:01:df:42:ea:a2:f4:a4:db:79:40:
4b:ea:d8:77:eb:b6:d6:8f:5b:db:5f:ca:f3:10:69:
10:52:f1:e6:64:6b:3d:06:9e:c6:cd:40:cc:ea:22:
30:ad:bd:4a:62:bb:b7:60:5d:a1:f8:9b:14:66:8f:
fa:88:2a:40:e8:13:21:b7:cb:c9:e7:95:96:85:0c:
d4:f0:c1:bb:c7:08:d0:78:ba:1c:d6:c9:8a:0c:60:
e9:3b:6b:a3:5f:90:07:a1:33:55:60:42:1c:74:9c:
f1:ad:8a:ac:bc:97:a1:40:b9:81:57:c3:57:2f:24:
9c:b0:aa:7f:15:35:dc:1b:69:5b:8b:2b:ed:29:e2:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:74:B0:A5:3D:66:D4:2C:B7:93:AC:88:52:10:BB:60:B3:A7:CC
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:27:1e:f8:18:62:74:ca:d4:54:2e:56:db:1d:95:ef:49:e2:
76:ac:a1:7b:d9:bb:47:f2:59:17:d8:7a:9f:98:d2:fc:ea:ef:
8e:d6:94:fc:c1:fd:53:46:0f:bd:d0:a4:c4:54:95:4d:88:7f:
9b:ee:9a:49:c9:51:da:0d:88:cc:a3:38:8b:d6:61:f6:c8:98:
7f:f5:4d:2e:8b:33:4d:71:99:a1:54:58:84:01:d8:c1:4f:a7:
5f:2a:f8:f3:a6:fb:41:43:b1:86:2b:44:dd:cc:e7:e3:2b:7a:
5f:ac:d5:ea:ad:a8:85:71:c0:1a:91:47:51:1a:6b:50:c6:64:
cb:0f:a1:33:cd:58:c4:1a:78:7c:8d:34:f4:1b:2e:49:cc:e4:
e7:21:f5:e0:31:3d:ef:fe:3f:2f:28:a9:93:0c:43:72:35:6e:
67:76:7a:74:c8:18:8a:b8:f4:a3:5b:7e:bb:ee:dc:f3:d9:99:
1f:74:88:e2:f3:a2:e2:7e:40:03:ab:90:f4:d6:6e:76:89:79:
97:98:6a:27:bf:06:89:4e:33:18:cd:78:b9:81:1d:06:32:78:
6a:44:49:fe:ba:4d:ec:0d:2d:a6:f6:8f:0f:a1:7d:46:f6:5a:
c5:e8:be:89:32:b6:f5:8f:ae:bf:cf:d1:75:c7:da:24:2c:fd:
da:1a:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:59:38 2025 by rpki-client