Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier: aqvbHLRQaF2hFhU4W2eloSWpUMpy0ttQ2tcMLFMLBB4=
Subject key identifier: 24:71:4A:6C:B6:EC:99:87:EC:55:E4:48:3D:32:98:BD:93:A8:8D:CD
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 019A19F44B601FE7B1AACE9C0AF3EA13B151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 06:00:31 +0000
Manifest this update: Sat 25 Oct 2025 06:00:31 +0000
Manifest next update: Sun 26 Oct 2025 06:00:31 +0000
Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: iTryxyUoz2IxCA7L+1ubRpvlvzDLRK3/GMYsf+nuHfo=)
2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:4b:60:1f:e7:b1:aa:ce:9c:0a:f3:ea:13:b1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Oct 25 06:00:31 2025 GMT
Not After : Oct 26 06:00:31 2025 GMT
Subject: CN=24714a6cb6ec9987ec55e4483d3298bd93a88dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:02:9b:33:e1:cf:47:8e:6d:2a:4e:42:8f:
c7:d8:32:15:60:7a:88:7b:33:36:d8:2b:7f:97:2c:
61:55:67:a6:79:49:59:11:25:e6:28:51:4e:34:81:
b8:7c:48:52:4c:6b:9d:ef:e3:04:46:c9:5f:41:d8:
3a:ef:e5:e6:b6:4c:7e:5b:86:a0:e9:7c:91:6f:ee:
b3:ff:e7:41:eb:0e:31:2a:a7:bf:33:7b:e4:f1:fe:
6b:37:de:5b:d7:9d:a7:c3:c7:a9:59:c0:6e:e8:46:
69:df:35:ea:70:9d:48:67:18:b6:6a:41:a7:18:45:
d7:89:c4:21:d9:2b:e3:4a:be:b5:40:82:26:80:dd:
ff:d4:cc:7a:39:a3:6b:62:ae:ac:03:80:79:ec:64:
ba:69:f6:7b:45:9e:43:1a:69:75:b9:f0:32:e9:68:
30:39:1a:56:38:59:cf:92:32:90:93:6a:fc:18:e1:
e0:c8:87:67:43:62:15:c7:bd:de:26:39:ab:59:9f:
da:4c:ce:ed:15:cc:7a:95:8b:de:8c:58:5a:b2:01:
9f:c3:8d:19:38:d2:ff:6d:eb:20:43:aa:8b:0a:a7:
e6:99:33:d3:1e:be:89:87:4a:4a:b6:6e:7d:19:a7:
ab:36:07:c7:dd:11:0d:13:43:df:3f:66:37:a0:08:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:4A:6C:B6:EC:99:87:EC:55:E4:48:3D:32:98:BD:93:A8:8D:CD
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:72:86:42:c3:7b:e9:fe:42:02:f6:ef:bb:8d:5c:8e:14:
83:40:c3:c1:ee:22:46:b5:00:9a:f2:05:24:a8:4f:93:51:a7:
51:83:1b:c2:6d:26:e3:55:26:ce:bb:ea:22:ee:d8:72:6c:bd:
91:53:14:3a:ce:79:3b:10:10:64:22:35:be:cd:68:46:8f:0a:
b9:c6:f0:9f:96:de:38:d4:74:88:c1:e7:ff:0c:6c:90:3b:71:
30:77:45:80:ad:f0:d3:f1:29:8d:3f:75:eb:01:01:23:24:5d:
e2:cd:66:af:5c:83:98:66:11:0f:b9:16:4b:bd:c1:09:0b:20:
7c:38:36:39:9f:47:dc:b4:af:00:12:2b:ed:19:ff:d3:91:c6:
2d:90:8b:1b:05:e9:a4:95:99:ca:b5:18:7e:a9:f7:f1:03:bb:
85:29:f8:d5:33:6a:60:6d:1a:e9:de:c2:ef:cc:3e:0d:8d:14:
bd:35:42:35:58:3b:4f:cd:21:a3:e6:a2:22:ca:d2:27:d3:1e:
5b:5b:a1:12:39:89:44:53:f5:58:fc:81:27:8a:36:c0:8a:55:
c6:0f:89:97:5f:7a:f5:eb:50:38:69:55:9c:b3:3f:22:a8:e0:
b0:80:46:7b:26:c6:0a:2e:41:5e:14:5a:2b:42:a2:80:59:8f:
0a:6b:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:34 2025 by rpki-client