Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: jhToTs/bNvzJl3kOaWdSjFrj4YeIu94A2FS4QUDw3fc=
Subject key identifier: 98:A2:A8:BC:2E:73:01:45:61:DC:FF:C2:46:F6:FF:CF:71:34:83:A1
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019A1C1945C5534B7903C7D8317F26F863D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0EA3
Signing time: Sat 25 Oct 2025 16:00:09 +0000
Manifest this update: Sat 25 Oct 2025 16:00:09 +0000
Manifest next update: Sun 26 Oct 2025 16:00:09 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: uvWMUQlAOLuQhmM3NBo+c/HfiUYQfhF2mLAZS3dzyhA=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:45:c5:53:4b:79:03:c7:d8:31:7f:26:f8:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Oct 25 16:00:09 2025 GMT
Not After : Oct 26 16:00:09 2025 GMT
Subject: CN=98a2a8bc2e73014561dcffc246f6ffcf713483a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:6c:42:bb:78:8c:06:63:72:ed:be:26:3b:
00:48:f7:d8:1f:aa:b5:95:4c:c4:15:64:b1:be:c2:
17:d7:16:e2:52:1b:bd:d6:fb:a8:29:ca:ec:29:fc:
e8:af:bd:f4:ad:63:19:bf:f6:ca:ac:75:73:36:c9:
38:af:df:47:bb:6e:66:ce:6c:64:bf:60:ad:f4:91:
44:d9:44:15:15:49:37:4a:26:f8:aa:89:d8:76:da:
99:bc:ed:0c:4a:fa:15:50:52:7e:37:3b:11:8f:58:
bd:f7:ff:b7:77:4c:3d:ba:6d:bd:60:8e:e1:a1:f4:
0f:50:df:2c:d7:ae:6d:ae:52:b5:43:8b:38:bc:bf:
c6:16:6a:fd:6f:10:f3:74:34:5b:48:31:cd:78:a2:
22:6f:d7:76:54:39:8f:76:6a:c5:ee:2e:0b:35:84:
de:89:d2:11:37:db:db:4f:d2:39:0f:4e:da:f6:4d:
fd:fa:f1:fa:2a:ae:41:f0:7b:56:29:d3:18:61:8c:
1b:0e:88:0e:c8:73:26:a1:3d:a4:c7:9d:2e:34:89:
ba:51:9e:86:a6:c7:83:96:67:57:c0:8c:b4:95:25:
58:67:d7:48:db:eb:1e:6b:1c:f7:9b:bd:2c:e0:73:
58:0a:85:24:3e:15:1a:9e:f2:21:0f:23:d7:83:a1:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:A8:BC:2E:73:01:45:61:DC:FF:C2:46:F6:FF:CF:71:34:83:A1
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1d:bc:8c:98:4d:ca:bd:1a:b3:a6:44:c8:d3:77:ef:af:c5:
45:3d:7d:f3:0a:29:a0:e7:17:78:d0:58:53:17:ba:79:48:d9:
62:d1:05:6d:1e:b3:3d:e4:5f:08:f3:79:e2:da:8d:b8:1e:aa:
97:4e:d9:e5:5e:1a:3a:3b:f2:14:df:92:57:f3:07:c6:86:a2:
95:db:2b:f7:56:93:05:24:f6:52:60:24:7f:4b:56:f0:2c:b2:
b6:c9:09:7c:04:00:ea:25:05:cc:20:eb:ce:26:f6:97:da:1d:
71:f5:eb:3d:3f:c5:b9:36:9d:81:84:fe:4d:dd:1b:5a:15:50:
91:07:1c:51:af:23:bd:8e:d9:7f:50:60:53:2d:5b:bf:c4:f0:
25:44:60:b8:ee:1c:77:5b:0c:95:6f:fc:a4:b8:b9:00:8e:38:
55:dd:c2:8e:54:fb:1a:2f:ac:01:0c:4e:f3:5e:ce:bf:68:d2:
08:57:69:a5:a5:5c:35:34:a2:46:5d:1f:23:59:74:80:8a:04:
49:70:2a:1d:93:d6:dc:69:24:dd:fa:59:60:4e:86:b4:d9:99:
37:ff:6a:cd:f5:b1:9f:bd:2f:08:4e:ae:8c:cd:f0:01:90:15:
6d:b8:eb:50:9f:e4:72:5c:db:f0:03:f7:2a:ee:64:8b:e4:3f:
06:78:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:33 2025 by rpki-client