Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: XK7svRqCbXK7y8VOEPJSqpvh7uO+TREaexMUcmmYX44=
Subject key identifier: 21:6F:73:F9:AF:64:CB:B1:90:D2:16:E1:63:0D:C3:6C:06:25:78:C8
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 019A4D7461EF0F376E7CCA666A1229ADFBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 0372
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: /34mwfJvRouwjMOvP6e+YNzlg30vNKyL0/YmMeN9YrA=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:61:ef:0f:37:6e:7c:ca:66:6a:12:29:ad:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=216f73f9af64cbb190d216e1630dc36c062578c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:11:41:1a:14:97:94:bc:46:e8:64:70:3e:
a3:86:d3:e5:bf:d6:91:00:7b:e6:e1:ba:67:ef:a6:
e9:e1:4f:ea:2e:8a:25:1e:39:66:85:89:25:ac:82:
c0:16:9f:ce:99:2c:27:90:22:22:8d:ad:bf:4c:c6:
8f:54:3c:5c:51:69:d2:43:43:4f:70:cf:bc:bd:ac:
83:b7:c4:f3:8b:93:91:d3:22:28:7a:2f:e1:d3:54:
c4:b9:78:7f:e3:bd:28:d3:ab:23:63:ef:68:ff:89:
a0:a0:43:16:3c:de:f6:21:4a:46:b1:bf:40:10:97:
16:28:f9:64:49:b5:a7:28:09:11:ac:cd:df:11:51:
f8:09:4a:a2:3c:fb:64:b7:11:74:a1:c8:6f:27:fe:
82:a6:6b:53:93:3f:6f:a1:6f:b1:30:e9:a5:c4:d9:
37:4d:ce:66:d6:7c:8e:f5:90:fe:c3:cd:e9:81:20:
1f:fa:d2:60:b0:25:6a:a5:0f:52:0f:62:6a:25:d8:
5d:f2:06:8d:13:73:c9:05:de:1e:5c:11:c1:de:f9:
4b:86:60:08:81:8a:5c:19:6e:8a:9d:a1:fa:51:3e:
03:f2:3f:1c:74:78:25:37:ed:ba:58:a8:27:c2:47:
bd:0c:21:8d:b7:7e:ae:41:b5:0d:e1:12:ca:55:c6:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:73:F9:AF:64:CB:B1:90:D2:16:E1:63:0D:C3:6C:06:25:78:C8
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ed:28:93:ae:f3:5e:3d:cc:22:1e:bb:d8:31:b5:3b:fb:2b:
12:74:9e:a6:69:0b:be:4c:49:ef:08:85:79:e4:93:a5:61:08:
a6:6f:db:69:28:ca:67:4e:93:82:70:53:10:ad:e9:38:36:2f:
45:f4:f9:ba:d5:13:e7:38:f7:9c:16:a4:e6:c5:3d:3a:1a:c8:
47:57:79:82:3a:b0:40:84:4d:27:c7:74:7f:9f:8d:8b:07:7d:
9f:e6:55:b2:27:e4:ad:5c:87:97:01:b1:95:58:bf:c2:a3:c6:
cf:d8:2a:27:e7:77:3a:57:fe:33:2c:3a:8f:37:64:6d:dd:ca:
33:ba:a2:5d:83:be:53:d2:8a:a8:6d:a3:f7:ba:79:d0:89:94:
24:a2:c6:d5:29:e9:96:4b:8d:c6:14:9f:55:68:31:a1:a0:72:
49:6e:31:14:91:2c:c0:75:32:8a:7b:9a:c0:51:26:4a:6f:23:
00:41:a7:a4:c7:7f:f3:ec:1d:6d:75:63:c2:d5:30:59:58:4c:
ce:2b:41:ab:9a:b9:01:4b:d7:e8:be:66:28:d8:49:f0:42:25:
c4:16:b4:40:07:2d:61:c4:e8:72:80:91:f6:48:5a:e4:0d:8d:
8b:26:23:8a:40:2c:63:e5:c0:e3:54:11:29:f4:3f:a7:db:fb:
64:64:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:55 2025 by rpki-client