Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: /nyUCcndMuRt8jgU9S79m04jXcXElLe2poqw7b+mo3s=
Subject key identifier: EF:61:E5:09:51:B7:B3:36:47:65:B0:0C:7B:29:32:A9:28:82:0F:F2
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019A4D737473C7154C0CA5C53A775957AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 1409
Signing time: Tue 04 Nov 2025 06:00:03 +0000
Manifest this update: Tue 04 Nov 2025 06:00:03 +0000
Manifest next update: Wed 05 Nov 2025 06:00:03 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: zW2X0Cg9tZGeN2YJ1tq1KDmdLrTc7GVkAgsw/YxaL1A=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:74:73:c7:15:4c:0c:a5:c5:3a:77:59:57:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Nov 4 06:00:03 2025 GMT
Not After : Nov 5 06:00:03 2025 GMT
Subject: CN=ef61e50951b7b3364765b00c7b2932a928820ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:c4:b1:1f:61:67:ce:3d:2f:da:32:91:78:
63:f0:8d:f3:41:35:d2:5a:a9:87:69:66:72:5f:b6:
04:08:e2:9e:00:cf:05:d3:54:04:a4:0d:67:49:44:
3a:39:f7:ba:23:b0:60:a1:07:23:ed:9a:60:9f:ab:
03:e4:06:54:18:96:c6:bb:77:50:6c:35:b1:89:29:
df:b3:10:84:90:a7:76:28:cf:54:ac:56:e1:2a:04:
bc:c8:98:53:10:e6:50:a4:9b:72:04:0a:b4:3a:af:
2e:15:ce:2b:b5:b7:d6:07:b0:aa:df:56:ea:b9:89:
ea:d4:57:ee:67:f0:7f:99:f7:da:fe:7d:a3:1f:8a:
c5:de:47:0c:0b:14:c8:90:33:e1:65:e3:a6:12:5c:
21:ed:49:fd:27:96:85:09:f8:9b:d0:35:c0:ed:fb:
03:b5:88:1f:f4:1b:45:44:41:a4:6d:6e:91:95:4d:
8f:c4:ec:1a:b7:b5:78:c7:38:1b:54:a5:b7:be:c0:
df:bf:30:5a:74:49:72:6f:c9:2d:b3:13:d7:21:e0:
c5:41:ff:23:3d:02:0d:b4:49:37:ac:b8:f1:43:bf:
1e:b1:bb:c6:36:c8:a6:46:b0:be:65:f9:ba:3b:a9:
97:8a:63:76:77:ba:44:35:9b:a7:ab:14:81:eb:88:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:E5:09:51:B7:B3:36:47:65:B0:0C:7B:29:32:A9:28:82:0F:F2
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:46:43:6b:8a:ea:76:ae:6c:24:42:e3:fb:73:d0:ea:a6:
1e:96:af:3b:77:b1:f0:2a:53:af:ca:0d:4f:54:6e:98:99:a0:
58:22:13:aa:5d:62:52:c7:84:be:5b:70:13:30:69:2e:24:55:
32:2a:e7:0b:43:b3:e6:d4:16:20:42:7d:87:be:14:36:63:9d:
ec:34:cd:14:35:95:e4:26:f1:4c:eb:de:ec:b2:6d:a6:41:88:
86:66:9e:18:fc:ea:1c:8b:12:6e:e7:39:97:40:fc:a9:f4:bc:
12:14:4f:b1:82:8b:03:b5:94:66:d9:22:2a:51:71:9d:2e:12:
18:f7:4e:de:38:24:50:49:9e:7f:25:47:e8:03:1f:78:43:1b:
c4:82:5d:23:d6:72:04:7c:48:7c:a4:3e:5a:04:55:52:3f:02:
75:6a:b3:d9:fb:50:8e:2f:25:d0:69:26:7c:28:b9:f6:01:9f:
db:fd:44:23:73:fd:8d:d7:8e:17:e3:6c:cc:a5:7b:e6:01:e0:
6f:04:7b:b3:b0:7a:55:81:fe:80:68:67:79:4b:a8:d0:81:02:
04:29:19:f6:74:1f:85:8c:47:a4:14:ae:9f:2c:05:48:32:65:
6b:da:a3:cb:6b:2c:21:4a:c9:07:0e:e1:3f:d7:36:00:7c:1e:
e7:0c:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:00 2025 by rpki-client