Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
File: gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft (raw, json)
Hash identifier: gOSHsDMGRERxByJ0DrXILPXmjaXXCSTFYC5h8bUGM/s=
Subject key identifier: CC:2D:76:CE:07:75:73:41:89:08:CD:D0:15:59:74:03:76:09:34:60
Authority key identifier: 82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
Certificate issuer: /CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Certificate serial: 019A044838280224FA47D6EF4B72A8A5FAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
Manifest number: 0DB9
Signing time: Tue 21 Oct 2025 01:00:33 +0000
Manifest this update: Tue 21 Oct 2025 01:00:33 +0000
Manifest next update: Wed 22 Oct 2025 01:00:33 +0000
Files and hashes: 1: gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl (hash: dWSj76xXzzLfBIRjVKTdc/XwLzlLSD5XgUssy6suPCw=)
2: zc9mGlUiEaGVC19iIgN2XDXM0oU.roa (hash: 66ZgGfl2+whzT8rLI/yRvTXWc5wR69QdejdBE2RoXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:38:28:02:24:fa:47:d6:ef:4b:72:a8:a5:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b6f3b7af87bb8ef6dd843bebd6d81b0559213
Validity
Not Before: Oct 21 01:00:33 2025 GMT
Not After : Oct 22 01:00:33 2025 GMT
Subject: CN=cc2d76ce077573418908cdd01559740376093460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:bc:1f:e1:68:30:80:7a:a0:73:ac:40:ec:
d3:15:f9:29:e1:26:58:39:4a:df:59:8d:33:c9:87:
2c:6c:8b:17:11:30:88:b4:18:87:f3:c8:43:ff:df:
09:f7:4f:2d:42:18:2a:ac:ce:8e:15:63:79:b2:e9:
02:5e:41:e0:d9:b5:60:94:a5:ba:fb:d3:63:12:e9:
71:86:2f:c9:6f:74:aa:a8:ba:4f:63:de:04:ba:75:
16:ef:4f:7d:be:f6:e8:0a:7a:5d:18:8b:b5:7b:78:
d0:01:36:a7:72:44:8b:03:78:6e:80:c5:e9:4d:32:
fd:95:fd:34:fd:d9:e6:32:db:37:b0:7c:47:76:87:
c7:78:d0:ed:0b:3e:82:ac:58:5b:bf:97:8f:6e:e0:
7a:d0:0b:93:29:6b:bb:8f:89:e1:ea:e9:5f:86:69:
d9:02:48:ae:95:fa:f1:ac:fb:74:8f:cb:c6:23:b7:
59:a9:62:3d:53:2e:c8:7a:3f:07:6c:3e:b9:17:c6:
2c:93:29:9e:85:ff:7f:fb:63:e5:e2:c1:12:00:c5:
2c:52:1f:1f:f7:d1:3f:c1:8f:47:c5:08:62:c1:df:
86:7c:54:51:dc:ac:ff:d4:46:99:6d:38:87:88:5e:
4d:45:b3:e2:c2:80:5d:0a:63:c4:42:76:98:f4:2f:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:76:CE:07:75:73:41:89:08:CD:D0:15:59:74:03:76:09:34:60
X509v3 Authority Key Identifier:
keyid:82:3B:6F:3B:7A:F8:7B:B8:EF:6D:D8:43:BE:BD:6D:81:B0:55:92:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtvO3r4e7jvbdhDvr1tgbBVkhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c494cb-2517-41a8-a457-e710c2a14bce/1/gjtvO3r4e7jvbdhDvr1tgbBVkhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:e2:22:97:cc:4c:80:06:18:2e:55:7f:48:fb:cb:0e:c6:
91:51:00:34:be:0f:a9:2f:aa:9c:97:08:fa:c9:dd:b6:42:bf:
d4:7d:08:e5:ae:1e:2b:aa:1a:f6:c3:2c:9d:f3:50:22:51:67:
4f:81:09:96:1c:c5:b0:63:e6:7c:cf:0d:f7:86:8a:8f:bf:e9:
85:ac:fe:41:8c:9d:79:87:57:40:ad:f4:c3:fd:74:09:33:20:
13:1d:55:1a:32:3a:57:9d:6c:ef:32:80:84:56:10:f4:71:70:
af:30:59:40:5b:37:e8:da:1e:c5:f3:a2:61:11:8e:aa:2a:a9:
6d:83:32:8c:1b:1b:a4:19:08:4e:c3:3f:e3:b2:27:a6:4c:08:
44:8e:6f:e1:28:df:5d:41:27:6f:6d:b7:36:71:72:6c:ca:11:
8c:5c:8d:02:c1:c1:46:01:e3:f8:45:55:80:c7:7c:11:1a:fc:
09:b7:36:be:b4:9c:f3:49:94:04:1f:b7:23:cd:16:cb:d1:de:
7f:9a:15:d6:ae:1a:bf:e5:86:68:09:af:e9:e7:75:96:77:8e:
3f:d1:a1:38:3f:b2:f9:48:61:3d:2c:bd:4c:62:70:c4:90:3d:
5f:65:69:b1:4f:05:16:33:0f:f3:72:05:49:2f:39:51:25:e2:
2b:74:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:49:20 2025 by rpki-client