Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier: +YLWQoiHzRVr75g7U7f8FVV3DSKEO+TnNnkCTr+ElxU=
Subject key identifier: 77:84:07:46:31:2C:86:B6:8D:18:34:9F:0E:75:BB:21:E1:E4:09:4C
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial: 019A52D1054DBBE5131A918CE4DEC9FADD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number: 020C
Signing time: Wed 05 Nov 2025 07:00:21 +0000
Manifest this update: Wed 05 Nov 2025 07:00:21 +0000
Manifest next update: Thu 06 Nov 2025 07:00:21 +0000
Files and hashes: 1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=)
2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: fAewp4wFWek2sl5CKPbBsfs27StQtaKSZc16DjzwW9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:05:4d:bb:e5:13:1a:91:8c:e4:de:c9:fa:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Validity
Not Before: Nov 5 07:00:21 2025 GMT
Not After : Nov 6 07:00:21 2025 GMT
Subject: CN=77840746312c86b68d18349f0e75bb21e1e4094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:87:15:2a:74:6f:76:51:cf:0d:db:ec:f3:
1a:36:2e:37:4d:16:8c:45:d0:f2:79:1e:89:7e:6e:
da:14:12:f8:09:da:55:18:d2:2a:0e:5e:d4:4c:78:
8d:04:6b:67:06:a9:d4:af:0d:39:18:6e:aa:af:bd:
3a:0e:30:25:a6:7d:be:90:76:bb:d6:a7:99:cd:c9:
06:d6:76:9f:33:7c:28:dd:1b:57:1f:06:64:6b:7c:
46:b7:49:ce:73:52:ca:b8:b8:d8:27:0d:e6:6d:af:
ea:23:30:cd:2c:68:11:4c:80:1f:12:c6:c0:0e:85:
c6:d5:18:c0:0b:45:21:c7:2f:b4:d8:d6:e2:ce:b3:
c3:6b:3c:99:27:d2:b5:e4:47:2f:90:73:75:e3:94:
f8:ff:ac:6d:6f:4b:fc:3b:05:61:82:9d:47:0d:2f:
c9:97:25:bc:f6:30:97:67:16:54:8f:3e:71:a7:f8:
25:d6:fa:a6:bc:ce:55:a2:d6:74:1a:35:46:65:b7:
b7:79:ed:e8:bb:82:f7:c1:12:79:bf:e3:a2:f3:22:
fc:05:f2:3c:6f:7b:00:ea:01:a7:af:c4:b7:61:6d:
3c:82:bf:a3:02:42:40:f9:22:49:86:ef:b9:14:76:
59:a2:55:7f:4a:f7:76:b0:1b:be:13:9f:8a:96:74:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:07:46:31:2C:86:B6:8D:18:34:9F:0E:75:BB:21:E1:E4:09:4C
X509v3 Authority Key Identifier:
keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fb:4b:0b:b2:63:89:55:0e:9d:57:3d:fc:5a:34:ce:c7:07:
47:ee:a6:13:bd:4d:22:96:27:6f:c7:2d:df:11:0e:3c:3c:62:
1b:4c:b5:e4:af:d1:d4:30:d0:27:5d:da:33:c6:af:4c:81:24:
75:03:db:47:dc:ec:cb:12:3b:6f:f9:88:07:2c:d7:dc:99:69:
14:47:18:30:79:5a:a0:54:94:23:21:f8:e3:f8:f1:f0:0d:88:
66:2b:cb:d3:23:8a:21:3f:db:0d:af:56:24:64:83:1b:be:f9:
0d:3c:b8:8b:c2:05:fe:1e:d8:c8:ab:e9:64:4f:c2:28:8f:35:
40:71:6c:1d:29:82:f8:0e:7d:2b:2b:9e:1e:c0:ea:38:35:41:
40:1e:fb:8f:75:b1:82:1b:a3:79:b2:f9:be:cf:2b:78:e4:08:
cf:2e:c7:74:e4:4d:70:38:2f:73:b5:2c:34:9a:da:c8:74:ec:
32:aa:77:40:3f:3a:b9:22:bc:b4:f8:68:fe:fc:41:cb:5e:cb:
3e:d1:d6:42:6a:63:c2:72:7f:c8:62:21:0f:74:af:bb:46:ca:
b4:b9:83:24:01:ab:44:7f:76:8f:0b:87:e4:52:71:4c:3a:d2:
5e:7e:a2:bf:5d:1b:81:36:ee:6c:49:3a:5d:3a:96:b3:48:31:
6d:85:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:46:00 2025 by rpki-client