Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: EotU4toJaG3aS1AUMyvvgsiq6khyZCfjQuR5br3OAjQ=
Subject key identifier: 1B:4C:9B:70:8E:93:A4:E0:57:86:67:88:43:D0:8A:CA:14:9B:1F:C5
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019A725CE3482D6E79CF65DA847D1CD7911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 02BF
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: PjUf9PCIW8v4u++Bz3wf6dJcGionaQM2RF1HcuqCbLI=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e3:48:2d:6e:79:cf:65:da:84:7d:1c:d7:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=1b4c9b708e93a4e05786678843d08aca149b1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:25:a5:ac:c5:5b:e3:5d:a6:2f:b0:06:10:
03:9d:f3:bf:22:ee:4f:7a:d6:dd:55:75:7e:96:56:
6b:60:bb:09:ae:1b:05:43:4e:23:90:b4:7e:39:9b:
4b:67:e5:5b:9a:77:85:99:5a:05:dd:52:4b:fd:c0:
9e:88:dc:d7:8e:53:5b:6e:f6:08:6a:f0:69:3a:c8:
54:86:ec:5e:3b:45:a0:db:b3:b8:08:d7:bb:ac:9a:
1f:ee:99:79:fd:cb:1a:e6:e4:40:20:d7:40:6e:2c:
88:26:bf:91:22:b7:90:1a:eb:e0:af:79:a7:39:da:
e7:40:8f:8e:4a:13:9f:05:25:35:a2:b1:ed:be:01:
5a:e1:24:6b:d0:66:40:0f:9e:7b:7a:27:de:23:e2:
87:b7:e0:5a:80:30:11:9f:3b:45:42:f2:bd:be:2b:
83:0e:9a:02:2b:5f:cf:84:60:fe:c7:75:d9:1b:d4:
a1:7c:79:40:87:7b:4b:77:1b:6f:18:b9:45:22:e9:
ff:d8:8e:ff:1f:0d:2c:63:cb:88:63:62:e1:0a:64:
f9:59:41:f2:65:54:f4:2c:cc:1c:7f:14:4c:d4:d7:
dc:22:a3:61:42:00:6e:ce:f0:b8:03:e1:21:82:51:
ba:8a:ee:42:f3:c0:ce:86:6f:fb:a3:4f:f5:51:3b:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:9B:70:8E:93:A4:E0:57:86:67:88:43:D0:8A:CA:14:9B:1F:C5
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4b:f9:25:bf:1a:74:3d:33:42:87:a1:89:89:68:7f:c1:3a:
bd:d3:a2:c5:5a:c4:0f:bb:eb:4e:32:41:6d:dc:4e:ac:7a:e0:
75:d4:cd:e1:4a:c5:af:02:57:53:a1:4c:2b:59:97:84:71:04:
3a:e3:c3:53:8f:90:9f:0e:17:c5:54:cf:6d:26:64:89:06:92:
19:87:3a:11:11:49:d3:eb:5b:2a:75:ef:8b:8f:bb:01:72:bf:
03:2c:e9:8d:c3:32:4c:2f:ae:a9:d4:6c:c5:8e:11:fe:1d:52:
00:33:76:7a:2f:51:60:ad:3d:39:d4:cd:0f:bc:82:ad:27:2d:
51:ea:14:f0:28:be:a1:78:6f:8f:ba:46:cf:bc:98:ce:55:52:
94:e5:cb:9b:be:8d:60:2b:6b:9a:b1:e1:4a:1d:42:eb:81:0d:
fc:21:38:15:17:70:ba:06:53:71:10:f9:ea:cd:c5:dd:19:ce:
d8:9f:3a:ea:86:76:7e:84:8d:f6:cf:c7:76:11:ea:10:50:eb:
99:d9:19:ea:cc:2d:80:80:b3:71:5d:52:7e:1c:85:34:ac:99:
2a:59:2a:25:06:c8:06:ab:13:80:b5:26:6a:e5:97:0d:4b:7c:
f1:d6:52:e4:a1:a0:41:00:b3:e4:4f:90:73:72:1b:16:fa:36:
9f:3f:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:55 2025 by rpki-client