Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File: GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier: azKES2suSlcCzj2A4RchjIMOyxpFM4a8veHLS/4g6lc=
Subject key identifier: 23:19:10:FB:CA:26:00:6E:14:95:72:1F:B9:01:39:FE:C5:0B:B4:ED
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer: /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial: 019A50E283ACE9A5F8064F59E200007E3126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number: 020B
Signing time: Tue 04 Nov 2025 22:00:13 +0000
Manifest this update: Tue 04 Nov 2025 22:00:13 +0000
Manifest next update: Wed 05 Nov 2025 22:00:13 +0000
Files and hashes: 1: 0yoRjSV7Roa_6RLApu60JbNvhn0.roa (hash: zY5w8MSwqL9WHbjRx7fb+VonzMqXyw8rTcBHB5IjZKc=)
2: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: L4jij8dxUtI/Y+V67Cb3hgkwQkQDbTbdC7iBmnclgso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:83:ac:e9:a5:f8:06:4f:59:e2:00:00:7e:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Validity
Not Before: Nov 4 22:00:13 2025 GMT
Not After : Nov 5 22:00:13 2025 GMT
Subject: CN=231910fbca26006e1495721fb90139fec50bb4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:d5:e3:33:7c:59:d2:f1:d2:98:55:f6:2d:
68:0e:1f:3d:cd:33:f0:0d:c3:72:b1:6c:3b:11:00:
45:0d:df:28:b9:9a:c7:a9:5f:c1:61:1b:de:dd:ba:
1e:d6:e3:54:17:e7:76:f3:db:79:92:69:47:1e:83:
0a:71:87:e0:36:97:50:6c:36:4e:7d:59:50:dd:76:
45:74:ef:09:31:c7:c8:97:19:24:01:ed:e8:dd:95:
a4:21:01:08:e4:38:a5:1f:55:ce:a1:6d:a1:b0:8b:
9e:18:ec:58:4c:46:06:7d:2f:72:b1:94:04:87:f9:
d9:13:01:7f:e6:a7:18:6c:33:53:79:11:a1:5b:b4:
df:05:7a:f5:b0:a2:cf:cf:eb:ed:3e:39:3d:10:f5:
56:8a:41:1f:e9:a5:39:fe:d9:9d:e4:ae:45:32:bf:
bd:e9:57:71:eb:24:3d:3d:5e:27:f1:ba:85:29:ce:
1b:ef:5b:e9:3e:98:65:77:75:1f:62:9a:57:86:d9:
d2:dc:34:c1:ab:aa:a5:d3:fa:8a:43:85:83:ec:bd:
2b:63:1e:78:bd:5c:e2:24:c2:9d:61:6c:37:6a:0e:
f4:b7:dc:b3:d8:3a:75:c5:9f:14:0f:4d:9a:27:fe:
23:4e:81:da:98:8b:c2:d3:c7:21:e1:b1:0e:d1:3f:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:19:10:FB:CA:26:00:6E:14:95:72:1F:B9:01:39:FE:C5:0B:B4:ED
X509v3 Authority Key Identifier:
keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:d1:c8:47:41:8e:d9:67:34:be:33:ef:61:5c:17:4e:9b:
7f:06:20:05:6f:0c:a5:84:f4:1d:a8:56:b6:05:e3:1a:25:2d:
c2:04:3e:44:c6:0a:0f:76:03:0e:24:c2:36:0e:7c:37:e4:dd:
44:26:f4:13:93:b7:0b:d2:cf:32:74:2e:56:73:95:92:9d:d3:
9a:1a:21:91:5d:8e:db:c2:1c:84:89:e2:90:d6:92:d2:65:54:
dc:b1:e7:2a:f1:18:8b:a8:84:a0:3d:7e:e2:3c:a8:be:e4:21:
f5:f1:65:19:a6:8c:d8:47:a3:57:e9:bb:d5:4b:0e:db:2b:f6:
49:dc:5d:84:a8:5c:0f:3e:c8:6b:40:92:41:c7:86:96:70:8a:
e1:62:e6:82:db:78:84:8d:c5:b0:cf:29:9c:47:d0:10:7b:32:
a8:1f:9e:b9:ca:11:b5:03:1a:e4:53:ad:01:dd:71:dc:09:75:
6f:25:19:4f:0e:de:a9:4d:0d:ca:b8:69:61:f6:cb:c3:e9:ab:
f2:b2:67:e4:55:da:7a:54:9c:b1:9c:1e:54:d1:81:73:aa:88:
ef:bf:1c:7b:2c:ab:46:22:d0:ef:f3:7c:a3:38:29:a5:47:1e:
ae:15:3f:ae:d3:d2:d5:fe:f9:58:4b:2d:b4:b0:9e:28:d6:be:
42:42:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:17:01 2025 by rpki-client