Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: 4qdWRh6U0mo2a5ofLveJTfPi0zWV3r3Ap+j1nAlKZUU=
Subject key identifier: F5:05:2F:AC:F8:F2:48:DF:BB:65:F9:D8:6A:46:B7:E6:46:1F:A4:79
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 019A4D0772AD8709D0E5B95478516A5A7B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0C32
Signing time: Tue 04 Nov 2025 04:02:05 +0000
Manifest this update: Tue 04 Nov 2025 04:02:05 +0000
Manifest next update: Wed 05 Nov 2025 04:02:05 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: NedskyRS8ctQJE1I4aY72JHBsBt8cenBorwXROxrB8Q=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:72:ad:87:09:d0:e5:b9:54:78:51:6a:5a:7b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Nov 4 04:02:05 2025 GMT
Not After : Nov 5 04:02:05 2025 GMT
Subject: CN=f5052facf8f248dfbb65f9d86a46b7e6461fa479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:5f:b9:c9:46:57:30:04:8c:3d:48:53:07:
d3:53:47:95:9c:68:f5:e2:ec:6b:05:c4:10:a5:03:
c9:b0:4c:fc:c9:1f:e8:23:73:b6:35:b9:ea:b0:df:
39:89:d9:1b:30:58:df:ae:d0:d4:42:d4:d7:8c:28:
3f:88:26:c7:bf:d2:be:04:67:ef:2a:b1:50:9b:e4:
13:41:3c:00:5c:57:4e:81:0c:c4:07:3f:4e:cc:de:
b9:b6:f5:05:df:52:65:e4:48:d2:f9:63:de:66:2f:
c3:b2:06:65:ea:c9:67:27:31:b2:c2:62:b2:ea:4b:
cd:c1:60:d0:d0:75:45:b8:9d:40:dd:32:17:a6:58:
af:fc:8a:97:44:f8:c1:4d:49:61:e7:23:ee:22:15:
73:1a:33:49:95:99:44:c6:b8:f7:c5:20:be:50:af:
62:53:47:88:bf:73:5b:a5:2a:52:96:44:b8:db:05:
0b:2d:b5:a2:06:da:8a:4f:76:0f:b4:6c:1b:f9:7e:
1d:8a:5a:b4:b3:8e:fc:ac:f4:85:c7:58:76:1e:ee:
bb:08:84:69:d7:bc:09:d5:8c:63:b2:3c:18:cf:8f:
fb:94:c2:be:73:3a:85:c8:03:0d:bb:ee:03:37:e5:
4b:ae:ff:6e:1e:31:b5:b4:fb:ef:dc:c2:2b:79:b0:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:2F:AC:F8:F2:48:DF:BB:65:F9:D8:6A:46:B7:E6:46:1F:A4:79
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d8:b6:91:1c:b6:90:80:00:f6:2f:cf:97:8b:2f:06:6e:3f:
4d:5d:67:03:d9:46:16:ae:c3:a3:a2:17:75:0f:34:dc:72:77:
bc:e6:f6:0d:39:04:51:4b:17:0e:af:3a:c0:7a:db:71:03:54:
86:3e:57:33:31:41:a1:07:a8:9e:fa:1d:1f:5a:75:ed:93:08:
50:cb:47:47:c8:45:0f:f3:76:5a:fc:53:5b:4c:f4:5a:4b:63:
1c:74:89:d4:84:f5:82:1c:b7:83:5b:57:8a:c8:a0:7f:48:46:
d0:37:d7:7b:df:71:ee:bd:f6:2e:b3:4d:7f:3b:82:e7:7b:36:
ed:f1:5d:b2:20:7d:31:83:7d:d1:05:50:cd:dd:b3:95:cf:39:
a6:4b:cf:d4:96:fb:a9:93:34:67:de:92:93:2a:b2:2f:32:87:
bb:b1:b6:2b:3d:d0:7d:7f:c0:50:a3:c8:72:4d:d2:74:91:dd:
03:75:fd:ce:0f:fc:2c:0d:ee:8f:b9:5f:03:8f:93:f5:fa:51:
5a:b8:03:09:2c:fb:1b:15:8a:57:6c:4c:e2:bd:fb:74:a7:4b:
ea:8e:6e:f0:30:9f:8a:f8:0c:88:02:cb:8a:13:9d:cb:b0:e5:
94:79:c3:fe:b7:85:a8:f3:c9:0e:06:cb:25:25:ef:3e:55:a7:
a5:04:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:04 2025 by rpki-client