Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: j+lKZn026orIayc1TwEZSuP0li+UVW6B+6j6ekFE4oY=
Subject key identifier: 63:DE:D9:F9:AE:88:28:6A:37:D3:42:91:49:38:E2:6B:9A:AD:07:6B
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019A21090C73AC6A3A96D33511EEB9F873B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 15:00:32 +0000
Manifest this update: Sun 26 Oct 2025 15:00:32 +0000
Manifest next update: Mon 27 Oct 2025 15:00:32 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: Q86yVqMYdIK9OQGcO2FGYWnsRsKF605JsUcQXn8oDIM=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:0c:73:ac:6a:3a:96:d3:35:11:ee:b9:f8:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Oct 26 15:00:32 2025 GMT
Not After : Oct 27 15:00:32 2025 GMT
Subject: CN=63ded9f9ae88286a37d342914938e26b9aad076b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:51:13:f2:06:3b:c1:2e:df:0a:e7:0e:6a:
9c:9b:86:a2:9c:30:20:a5:55:0e:c2:a0:d4:b5:07:
f3:0f:80:1b:d1:13:d8:b1:2a:9c:92:c0:26:53:69:
5c:02:3f:47:45:ec:d0:03:d5:60:00:b6:ae:46:73:
50:fd:c8:30:88:2c:5f:73:a5:8b:ab:ce:a2:38:48:
24:9d:00:ba:d4:d7:90:e5:ff:82:65:f3:e3:ed:0a:
41:2d:eb:88:4a:3b:ea:59:62:7c:46:3b:43:a1:f4:
51:33:58:fa:91:56:22:69:0a:62:93:f3:26:4f:e7:
5c:1e:26:9a:0c:3a:a6:34:ee:1c:65:6e:34:db:86:
4d:86:e4:1e:26:6e:43:4c:be:b8:96:ff:da:0a:17:
3a:93:f4:38:56:70:95:34:ed:a6:f1:9b:ae:fe:c5:
7f:3b:84:ee:4c:b7:f6:75:cb:31:85:5e:67:81:96:
b5:24:00:57:6c:f2:b9:1c:fb:7b:ca:ee:0b:00:7c:
17:69:f9:ef:51:33:a9:13:35:57:82:57:6d:f3:d3:
3c:33:48:d6:39:a0:16:4b:29:be:74:d6:26:a4:89:
7b:ba:03:6d:65:05:f8:af:3c:d8:9c:f1:2a:5e:6f:
22:c7:f7:28:3f:b8:a1:a6:cf:a4:3c:63:0e:12:d2:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DE:D9:F9:AE:88:28:6A:37:D3:42:91:49:38:E2:6B:9A:AD:07:6B
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e7:d6:d6:a9:e9:c3:40:df:02:6b:71:54:23:93:d0:30:80:
1b:a0:8a:97:c4:fd:f3:e8:03:9c:bf:a9:e9:b6:23:73:ee:87:
b3:71:96:9b:b3:4f:1a:ef:bb:33:d0:5e:0f:5e:c4:14:26:41:
d2:b9:e9:30:03:8d:c3:7b:82:7e:ec:cf:83:29:94:07:88:b3:
55:93:56:30:00:71:2a:c0:b3:1d:6c:c2:90:71:5f:36:44:74:
22:42:83:d6:ee:a3:d2:51:3d:43:49:f0:b4:b3:04:60:f6:d4:
21:d9:d0:ef:9f:77:f3:9a:79:a9:ea:cc:50:10:23:d5:9f:52:
93:b5:f0:1f:25:c3:d8:ed:7e:e0:cc:06:6d:96:05:0b:0a:f3:
48:23:e7:d0:6f:40:4f:eb:d5:a8:eb:4b:89:db:98:b1:62:a0:
ef:94:d3:89:27:83:78:c5:4f:e2:af:4d:3a:5c:cb:5d:0a:5a:
aa:35:a7:1b:37:db:dd:69:48:88:34:f7:5f:fa:e7:56:47:60:
de:0e:6b:c6:d5:8e:d9:4b:f0:3e:c9:06:13:86:4e:20:82:43:
b8:98:5b:13:b3:25:ec:ed:6f:2f:ba:85:bc:46:bd:c8:7b:4e:
a4:a6:10:27:91:72:c6:60:82:c3:e4:8c:0a:02:6d:0b:1d:a1:
2a:12:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:42:52 2025 by rpki-client