Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: 0v5CCtEuuCFtqRcxknAWznds0KLpFuPJcGlZcpN4mG4=
Subject key identifier: F4:1F:4E:4A:59:83:97:E8:39:99:26:34:B4:85:D0:4F:1F:28:B9:C2
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019A71B8DD986CDAA3E526F092CFB734D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: GORsIJ/gvcp8ppCLySK1jgHDC5oa8ylYyfdfnsw0ydQ=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:dd:98:6c:da:a3:e5:26:f0:92:cf:b7:34:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=f41f4e4a598397e839992634b485d04f1f28b9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:63:e3:65:09:e5:d3:29:d7:02:4d:1d:7d:
28:0c:d8:30:86:20:a5:77:f5:84:d9:40:45:be:4d:
68:60:de:bb:56:75:b9:9f:02:33:65:90:59:23:61:
07:28:59:4c:46:75:90:f9:6b:31:77:0e:ea:cc:8b:
d0:29:d9:3b:1f:37:cd:3e:ef:0f:6a:db:ea:56:d8:
fd:4d:b3:9f:62:1a:e0:36:24:d0:a9:0a:dc:87:39:
97:11:5f:9e:10:e6:90:9b:91:05:ce:ac:92:d0:5d:
53:6a:b2:21:ab:d2:09:0b:20:c5:e6:bd:b7:d1:10:
2f:07:40:03:5b:19:f3:b8:7d:ff:db:73:0a:02:1b:
19:51:73:af:b0:ae:36:17:1c:1a:7f:aa:7c:91:ed:
24:72:6a:f2:fb:df:11:11:db:26:fe:fe:85:6e:5a:
be:c2:e0:c1:e9:1f:5c:d8:e8:21:22:b1:d4:91:78:
b0:3e:01:7d:cb:b7:bd:92:90:95:4d:14:3c:d2:3c:
e4:c0:10:fe:32:fc:be:8b:8d:be:a8:71:0a:a1:61:
eb:4f:97:2d:2f:2c:cf:ae:67:86:e2:17:fe:53:8b:
d4:5c:bd:61:8c:af:c9:0c:78:7b:31:b7:45:03:ac:
da:37:1b:26:2e:bb:1c:d0:39:39:01:ed:f6:e9:a6:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:4E:4A:59:83:97:E8:39:99:26:34:B4:85:D0:4F:1F:28:B9:C2
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d8:7b:5b:11:d2:42:58:f5:74:a0:99:9b:4f:8d:1c:96:05:
cf:8b:3e:64:f5:ba:60:2f:d4:a1:e2:e1:8b:09:49:e4:4c:f3:
a1:a3:e4:e8:55:3d:c7:73:d0:91:a1:0c:86:46:b9:25:d3:32:
a3:15:d0:db:5e:aa:92:d4:d4:3e:14:d5:df:91:31:51:b7:33:
37:d2:d0:4a:e9:5f:8b:97:72:f2:d3:4c:a4:a5:ba:97:de:ef:
91:4e:0f:b0:bb:fa:59:a5:26:be:08:99:a2:f0:1a:61:f8:37:
41:8e:05:87:6f:d5:3d:26:78:dc:82:9e:51:66:29:89:45:90:
b1:d4:b4:d7:54:5e:8e:7e:b3:5d:68:67:c3:33:4c:8b:25:c8:
a2:5e:c3:fb:ba:9b:75:dc:2e:d5:9b:fc:3e:c7:8f:b8:3a:0c:
1e:e7:31:8e:4d:da:37:fd:62:7e:78:14:ba:2e:56:a2:9b:0e:
83:10:dc:a5:4e:02:08:44:8e:85:48:6a:9e:aa:71:e0:be:77:
01:73:84:06:84:08:8c:ab:6c:79:ed:40:c3:bd:4b:23:9f:d1:
d7:75:95:0d:7e:82:56:7c:a9:c2:df:c0:7a:25:a4:bc:ab:51:
a5:37:b2:58:68:de:62:e0:87:db:f8:18:c9:aa:13:94:40:d7:
b9:da:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client