Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier: NPWZni79KC9PUpUSdI1mgK04cnpqVKR9jJYFX4tNGI8=
Subject key identifier: 1A:E8:BB:5C:AB:D7:21:A1:AC:1B:3A:84:52:88:3D:7B:4E:28:51:D1
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 019A2A43C5F646E9FEE025ACC3526013A25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number: 0F55
Signing time: Tue 28 Oct 2025 10:01:15 +0000
Manifest this update: Tue 28 Oct 2025 10:01:15 +0000
Manifest next update: Wed 29 Oct 2025 10:01:15 +0000
Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: /KTTNRL2bL3YU4wYEKp8VCaga2mLpvMSXCTUvnPZRp0=)
2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:c5:f6:46:e9:fe:e0:25:ac:c3:52:60:13:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Oct 28 10:01:15 2025 GMT
Not After : Oct 29 10:01:15 2025 GMT
Subject: CN=1ae8bb5cabd721a1ac1b3a8452883d7b4e2851d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:2c:0d:81:b9:23:cc:ba:15:00:bf:03:94:
0f:5c:80:13:7e:1d:83:98:48:a4:13:14:c7:c5:a8:
f1:ec:a1:f3:01:af:2c:6e:c6:cd:dd:d0:4f:82:66:
b3:57:95:b6:49:c5:25:c4:64:e4:f2:a9:73:be:31:
14:0f:48:5e:96:a5:ea:59:b6:25:34:e8:e0:26:df:
1e:51:1c:ee:7a:57:4d:7a:35:65:2e:54:79:c7:17:
65:7c:c9:a6:74:48:1b:3d:33:e5:62:47:48:7a:e8:
05:27:9a:1a:37:ef:44:67:10:eb:7e:16:27:ac:01:
a8:5a:c5:09:2e:c8:af:41:c6:44:0b:67:d4:34:91:
34:b4:7f:e4:ac:c5:4d:00:db:37:ee:a9:f2:ad:b3:
07:d2:8f:da:e9:9d:96:96:42:7c:4f:df:3c:b8:8b:
bf:70:cb:b2:53:58:14:84:77:37:ec:56:e1:a9:c0:
00:bb:f6:64:c5:24:a1:fc:99:d1:2f:3b:6a:1f:19:
ba:a0:90:55:0c:7a:b0:aa:d2:9c:f0:19:c9:0c:8f:
1d:e5:e8:7b:01:3a:b0:1d:11:95:30:c3:94:9b:98:
dc:36:9b:1a:9f:7f:81:dd:bc:7d:d2:95:a4:aa:f2:
66:6a:c0:72:fe:de:ce:56:42:1b:a1:cd:be:87:9a:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:BB:5C:AB:D7:21:A1:AC:1B:3A:84:52:88:3D:7B:4E:28:51:D1
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fa:8c:d1:74:96:85:53:7c:9f:6b:4b:4d:ed:81:83:91:70:
5f:f9:2d:63:e1:69:82:83:c0:68:fe:bb:46:2b:15:4b:71:09:
b4:63:22:dd:07:48:08:ad:1b:e1:6b:ac:4d:d7:40:4f:90:9f:
eb:05:4e:50:d6:5a:eb:30:eb:ab:bd:47:37:c9:ce:4f:7b:2a:
fd:aa:0e:c5:d5:25:59:c1:8c:2d:a8:1c:db:af:e9:71:60:38:
b9:ec:76:f2:34:d7:8d:fe:77:5e:c9:ea:8a:e6:50:5c:67:2a:
b1:13:b2:0d:9a:f6:07:01:16:24:56:c1:70:6f:4c:bc:ac:aa:
29:b9:5a:8d:7a:25:26:bc:7c:b7:79:c4:78:98:8c:bb:d0:a9:
0a:59:76:33:71:b9:8a:d3:07:a8:fe:02:6b:71:ca:6f:c5:ae:
00:3c:41:86:5c:e3:e8:49:dc:27:f4:e7:8b:1b:f4:99:7c:9b:
cd:15:85:8a:fd:e1:95:9a:f7:b3:24:4c:96:ad:0f:f9:1a:fa:
6e:49:e6:b9:d2:30:01:3a:c4:0e:e3:4a:e4:6d:22:84:e9:e9:
1b:3f:48:b7:2a:cc:48:0d:87:c3:8c:30:14:58:35:0b:a4:61:
88:1a:ac:1f:95:c9:fa:3e:a9:12:d9:f4:72:f3:61:a9:eb:79:
5a:9e:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:47:19 2025 by rpki-client