Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: E0FRERBmEjONNETCb6CgPaSuZ2zjJLRlOBX9bQSq2s0=
Subject key identifier: 52:3B:EA:A6:1C:FD:FD:6E:58:FB:BD:A6:B0:D9:D7:C0:5B:22:50:42
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 019A424B73B4B2EF58B95918AA3D162C765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 06B1
Signing time: Sun 02 Nov 2025 02:00:32 +0000
Manifest this update: Sun 02 Nov 2025 02:00:32 +0000
Manifest next update: Mon 03 Nov 2025 02:00:32 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: 16fKzWxAXGEdB/7ALZK/bAvQfCewZ+epsLk9W5P/cG4=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:4b:73:b4:b2:ef:58:b9:59:18:aa:3d:16:2c:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Nov 2 02:00:32 2025 GMT
Not After : Nov 3 02:00:32 2025 GMT
Subject: CN=523beaa61cfdfd6e58fbbda6b0d9d7c05b225042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:4c:72:e7:1a:af:b8:b0:07:e8:e1:2a:e4:
81:e0:9a:f7:b4:e7:4e:83:41:29:78:db:d7:9d:0b:
af:56:46:fc:ed:46:e9:a1:91:df:a5:8b:d1:d5:5b:
71:db:39:b9:78:0e:b6:2f:04:2a:3e:a9:3e:bf:de:
7f:0a:3c:39:96:2a:7e:2a:e9:a5:7b:21:e9:b0:cf:
6c:06:5a:2d:32:c5:c3:cf:3a:3b:80:b9:78:1c:3d:
a7:34:92:63:54:7a:87:7b:4f:50:bc:44:0f:50:da:
15:6c:b8:63:f6:3a:37:ef:0d:17:51:9e:b7:5c:c6:
68:69:dc:fb:b8:ab:33:4f:2f:e1:22:68:b2:90:ca:
0d:ac:70:71:69:36:54:f2:56:2e:22:85:a9:ed:c3:
a5:35:88:13:05:90:f4:fd:b5:b4:c5:6d:93:37:b2:
80:ad:bb:97:d9:bb:3c:f4:f8:ac:a5:10:1a:5c:3d:
b5:5e:36:3c:79:70:77:e9:7b:6c:76:49:41:2c:69:
20:f9:3e:ae:b6:81:86:bb:5e:40:a3:0a:4b:37:ca:
c6:54:c8:ca:0d:0e:ee:29:cd:81:a6:8e:fd:ea:a1:
02:84:a2:4c:a3:89:68:e6:c6:09:0e:05:d3:1e:08:
c1:f4:42:74:5a:f9:f7:e0:3a:d3:df:86:48:18:82:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:EA:A6:1C:FD:FD:6E:58:FB:BD:A6:B0:D9:D7:C0:5B:22:50:42
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:82:84:39:12:16:c4:90:2e:3c:30:ed:bb:3c:1e:1e:7b:
87:9e:41:3a:f6:a0:c4:c8:2a:b6:af:31:d5:0b:82:42:7a:5b:
86:54:36:aa:af:62:0b:80:aa:3c:0e:aa:19:44:c1:bb:52:e4:
72:cc:b3:50:00:c5:d1:4d:0c:64:20:6b:72:06:5a:b5:0d:fc:
cf:9d:a3:31:a7:3b:42:20:69:8c:dd:61:b5:3d:3e:0c:a8:c8:
ac:cd:be:03:01:09:86:e8:5a:b6:7a:4a:28:68:1b:9f:4a:aa:
6f:3b:22:44:4c:5d:cc:81:6d:c5:f6:d1:23:b7:83:c0:ef:b5:
b1:51:12:77:06:88:3c:06:fb:05:e0:91:b5:81:10:c4:32:c4:
43:22:5f:3e:e3:2c:77:4e:0f:c8:8f:ce:12:df:17:8f:c9:59:
75:e2:ed:60:c3:f2:9a:e5:76:6e:9d:fc:47:32:c5:34:5b:12:
65:01:fa:dc:e4:8f:ce:72:85:c1:08:1a:96:3f:48:4e:f5:de:
1a:11:19:51:89:3d:fd:e0:0e:51:26:82:08:77:12:a4:80:6f:
ad:ad:4d:d4:c9:4f:df:c3:dc:b3:22:b6:19:29:8c:9e:f2:d4:
44:80:8b:35:ce:91:4f:a9:88:2d:14:ce:d1:9c:b7:18:7d:63:
9d:c6:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 04:36:27 2025 by rpki-client