Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: oAs+OBjxCKfm7rNncIdtqMkxJ/btq9O7QKjr2Xo93cw=
Subject key identifier: DD:27:19:D5:73:2A:DF:73:E5:57:E8:D7:68:B5:89:B1:5F:D5:55:1C
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 019A71B7CB96FAFED295EFDA12D7AE4B9694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0C13
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: N+hxFydGPzAbCRe/1LD/9zG+cVQoHfVUYYRrAehX7B4=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cb:96:fa:fe:d2:95:ef:da:12:d7:ae:4b:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=dd2719d5732adf73e557e8d768b589b15fd5551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:67:f6:25:d1:c6:b7:2a:41:46:c4:14:ac:
fe:c2:95:98:aa:b8:69:e8:8b:b9:ec:c4:87:29:c3:
20:56:ec:74:a1:b4:be:2a:d1:6b:84:92:aa:c0:42:
1f:55:d7:84:40:51:98:6e:09:37:cf:ad:14:31:c5:
ec:65:70:c4:21:47:15:e6:a1:d7:1e:b4:19:be:a7:
b3:60:cc:ed:4d:bc:13:0e:f6:b2:36:bd:c8:a3:d9:
7f:bc:f9:ab:45:37:b4:26:82:0f:92:11:38:af:da:
5d:23:ca:98:e7:0e:a0:c5:29:29:34:d9:c9:5d:fb:
0d:a8:48:af:02:99:0d:52:7a:6d:51:9d:55:34:3a:
5a:ed:69:f4:98:2b:7a:bc:a1:ef:3e:a5:f4:d6:2c:
92:db:88:4d:fa:c8:57:83:e8:42:e9:ef:41:44:e0:
2a:9c:b2:6d:ff:c4:8e:d2:6a:5f:65:00:da:c9:44:
9f:ef:3d:13:f6:a4:19:ed:64:d2:6b:b8:3b:8d:8a:
86:fd:c4:c9:e0:bc:ee:e2:c9:70:0a:ac:70:fc:7c:
72:e6:84:fa:5e:6b:67:d9:63:8d:01:86:82:6b:48:
65:d5:2b:83:64:74:9b:43:7c:a4:00:13:5c:b1:3d:
ad:a2:91:86:62:49:0e:a9:70:f6:f4:40:82:28:7c:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:19:D5:73:2A:DF:73:E5:57:E8:D7:68:B5:89:B1:5F:D5:55:1C
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:2f:d1:18:3a:1a:49:c6:6b:46:1d:26:ea:6f:2d:1e:bd:
8e:e3:88:29:eb:95:96:10:ef:3b:95:2b:0c:cd:53:16:4c:01:
9e:ed:8a:58:4f:a4:4e:d7:cb:d4:cf:e7:ee:ca:c2:fb:d5:3c:
5f:5e:f1:fe:fb:df:dc:06:95:d0:a7:15:3a:a5:a5:ab:59:cb:
a6:da:b8:38:12:f9:67:31:ab:a4:e2:f5:a6:12:58:ea:6a:9a:
80:9a:b0:8a:d7:64:27:6e:42:62:83:a1:5a:f4:2b:b9:e9:47:
de:89:b7:63:14:b8:c2:4a:e9:ae:67:9a:d6:3f:03:85:09:cd:
01:fb:a5:8c:69:84:8a:bb:a1:3c:2c:ae:95:05:db:7c:f9:2f:
9f:11:cb:16:47:fc:49:c6:29:83:c2:fd:96:3f:28:59:7e:cf:
2e:5e:f4:c0:fd:2c:27:f8:ae:c0:74:59:1f:e4:8a:7d:36:79:
3f:31:a3:e8:f5:55:7e:87:5d:0a:02:fa:9a:78:02:16:a1:50:
4a:34:9d:ce:d6:d5:7b:b7:d6:7a:7b:0e:dd:c0:e2:ee:49:1b:
64:35:31:9c:83:e4:f7:6c:1b:df:6d:b3:4b:9a:df:12:e9:2b:
22:a8:a8:98:ff:1e:e3:fd:0d:3e:32:27:da:d2:53:f5:d3:11:
80:77:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:00 2025 by rpki-client