Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File: GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier: JKVk+Xze53H2oEU/HXPPiHgDIMiYxKiSjeVl7KLaerQ=
Subject key identifier: 3C:97:34:B9:E3:C4:AD:91:FD:29:3C:E6:8C:47:F3:DD:FF:2C:AD:87
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 019A0A4ACB556FDFA6BFD1B1286E3572CA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number: 16E7
Signing time: Wed 22 Oct 2025 05:01:05 +0000
Manifest this update: Wed 22 Oct 2025 05:01:05 +0000
Manifest next update: Thu 23 Oct 2025 05:01:05 +0000
Files and hashes: 1: BegdDrTAjfq3QF_xE0SFA-JsmmY.roa (hash: UdhM2lVwgozCDdJmvHRy0hTuIS1j9lD7X7Mun/eqHgw=)
2: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: LaO7Wje56RmTE4w0VkzzOV8bSxU+iU1uFSGETVPxyek=)
3: Q-JTW2pMbNHJuQzQ3GB1MFwgWco.roa (hash: Lazq6w2zk0BI/gQTS7LpUxVn4e7nb0oKSy4DjZT1z9U=)
4: czVnbZc92doWqy2gBGIdv1iBjnw.roa (hash: FGIHMIe1fM4M87IQciBzvSamGa61S/MPL+xAE/AMTyI=)
5: h31D8UJNE_u1sTKbKP1SFsGVcFY.roa (hash: kwansroYJJGhl0jfhBp7y2GRUoE1YU2JrM6J/UDWiVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:cb:55:6f:df:a6:bf:d1:b1:28:6e:35:72:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Oct 22 05:01:05 2025 GMT
Not After : Oct 23 05:01:05 2025 GMT
Subject: CN=3c9734b9e3c4ad91fd293ce68c47f3ddff2cad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:e6:70:43:f3:0e:55:8c:5f:6d:8a:03:93:
75:0c:8f:11:f5:b2:74:19:9b:2b:cc:bf:bf:66:c0:
bb:69:77:43:93:16:a4:c8:02:43:11:2d:21:dd:fe:
77:d6:a2:ac:57:19:7b:0a:29:f3:33:30:71:d6:49:
fe:62:9e:2a:ce:34:8b:83:ef:9a:f8:27:3a:6d:aa:
21:6a:4b:02:f2:f2:89:8e:9d:4a:5d:00:99:0a:5a:
f7:53:6b:e2:3d:d1:bb:55:f5:d4:d4:0a:8f:38:6f:
4c:be:ce:01:2f:37:31:9a:c2:03:e4:73:73:27:f7:
8c:6b:53:36:c6:32:47:db:3a:e8:fb:73:10:69:b5:
99:9b:30:69:20:bb:14:5d:26:e0:37:be:8c:0e:83:
1f:00:4d:b4:d8:69:22:45:ad:81:04:25:72:3a:82:
82:81:bd:60:4c:4f:05:b8:d8:ad:6b:b3:ae:86:b5:
07:33:fa:b5:35:f4:b9:9c:15:58:ad:43:e6:da:05:
6c:95:92:19:b1:2c:42:bc:b4:06:6e:c2:4f:d2:e2:
25:3f:2a:dd:b2:94:ce:4b:fc:60:8f:f0:62:7a:5e:
5c:eb:1d:ba:1c:5c:ca:d6:b0:0e:06:7e:b3:78:cf:
d1:4f:ec:b6:af:78:00:a6:ad:32:58:1a:27:4f:38:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:34:B9:E3:C4:AD:91:FD:29:3C:E6:8C:47:F3:DD:FF:2C:AD:87
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:1b:e0:9d:40:5b:1a:e1:55:f1:b4:d2:37:ef:03:76:a3:
ad:25:75:af:ea:ee:00:f7:88:01:7b:72:23:f6:c1:ff:45:69:
0a:64:e2:1f:da:5a:ab:5b:84:50:64:f0:64:98:d3:0f:55:cf:
39:e5:99:d3:7d:39:1d:14:fc:b9:a9:92:76:2f:a5:f7:e7:ca:
ef:33:42:09:15:dd:6f:00:33:a7:c0:70:43:9b:e0:2c:55:2b:
07:cc:2f:fb:df:e5:0d:b9:24:8a:7d:d9:4f:a0:c9:37:fb:12:
79:a2:aa:df:65:66:50:7d:ab:3f:66:33:d4:62:79:be:8e:38:
8c:6a:de:9d:45:db:3d:bb:3b:68:21:01:c3:1f:09:4c:bb:99:
01:6e:4b:4c:83:c1:3e:16:35:88:45:5e:b7:60:d5:31:9d:56:
f1:2b:0c:61:92:d8:7c:5f:03:30:5f:ed:72:6c:4a:49:1f:2a:
8c:41:2e:5e:ee:65:f7:9c:af:5f:32:b7:86:81:17:0a:56:b0:
1b:09:44:ba:ba:75:7d:56:9c:51:0d:7c:f0:ca:38:3c:d4:c4:
11:ce:79:0f:2d:76:c0:70:ee:0f:3c:fd:c8:2d:6a:95:e8:04:
f9:1b:2f:c4:fc:ef:ca:2d:b0:5a:fc:bf:66:64:3b:f1:8b:1d:
b6:57:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:51:12 2025 by rpki-client