Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: sCjQhJjkaeG1TayrRWOA+Tu9cdrF9TZ1FTbkl5VxEo4=
Subject key identifier: 41:FD:E8:7C:31:A0:41:9B:E3:B3:60:D6:33:5C:55:BC:0F:E7:48:E9
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019A4F2B6C340185C00193EA163A8F1FFEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 087D
Signing time: Tue 04 Nov 2025 14:00:37 +0000
Manifest this update: Tue 04 Nov 2025 14:00:37 +0000
Manifest next update: Wed 05 Nov 2025 14:00:37 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: tV3sPKJGmf14KtVmX4c8ERfSvA8KMtRdxAQ9HsFKEZg=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:6c:34:01:85:c0:01:93:ea:16:3a:8f:1f:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Nov 4 14:00:37 2025 GMT
Not After : Nov 5 14:00:37 2025 GMT
Subject: CN=41fde87c31a0419be3b360d6335c55bc0fe748e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:4a:4c:cb:54:3d:31:9f:22:54:b8:90:be:
89:79:46:fa:fe:92:af:12:64:63:b6:a7:b9:be:98:
78:b4:85:4d:cf:fa:c0:71:87:a2:60:87:60:6e:a9:
2c:ca:03:da:d8:88:29:4b:45:8f:3f:7f:27:72:51:
ea:65:e4:55:8f:d5:c7:d3:f2:1e:1b:7b:dd:c2:e6:
e7:43:47:a3:00:e6:15:9a:6b:83:22:77:0c:53:fe:
a0:1c:05:31:7f:51:39:54:b7:22:2c:30:7f:92:93:
7c:63:38:e3:35:fe:f5:11:aa:85:f9:98:09:ac:ec:
97:7c:05:4e:1b:77:de:8b:62:58:db:8b:cd:49:a7:
13:80:df:f3:d0:8e:7b:9d:e6:7f:8f:32:d4:a8:7b:
9c:18:26:9e:8d:65:d1:09:93:64:78:b4:d3:e5:63:
9f:0c:df:f0:f5:35:78:10:89:e0:cb:6a:79:8a:76:
fe:61:38:00:0c:ed:b8:6d:d7:27:e5:a8:94:56:2c:
54:28:b7:8f:e9:be:b2:58:b5:e7:6e:a8:dc:db:4f:
03:35:0f:84:9c:21:26:cd:99:62:61:d9:c4:4d:f5:
32:0d:40:a9:2f:ed:91:03:a6:ce:a0:76:84:51:52:
16:b1:aa:4c:a2:cb:14:1e:e9:da:8c:58:0d:2b:53:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:E8:7C:31:A0:41:9B:E3:B3:60:D6:33:5C:55:BC:0F:E7:48:E9
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5d:43:6a:18:e0:70:d5:98:a6:99:03:56:77:6d:81:6c:f3:
e1:92:c2:c6:77:17:d6:d1:16:77:34:f5:b1:9f:e2:25:4a:b2:
fa:07:5d:36:61:b1:2c:f8:c8:eb:9a:f2:f3:1b:26:14:dd:ef:
75:79:c4:e7:45:37:7e:b3:a4:e3:95:81:85:8f:5c:ca:b8:73:
67:19:08:82:5e:2c:53:b4:9d:e7:fe:95:da:fa:3b:ac:64:3b:
e0:7b:42:59:92:74:f9:2e:94:5a:40:6e:7a:c4:be:79:51:91:
ff:51:5c:1a:84:f2:75:0d:2c:1b:38:60:8b:b6:9a:9e:02:58:
5a:43:52:9f:30:61:ad:38:40:02:d5:4d:f3:95:ff:dc:31:5a:
09:b1:4e:94:12:14:61:ae:9a:19:eb:d4:71:9d:c7:c0:bb:be:
94:c5:5e:af:da:f7:5d:ae:ec:46:74:51:47:69:89:1d:14:d3:
8b:e1:56:d8:16:b0:2c:a8:70:94:d8:55:e7:b5:ee:53:2e:a6:
f7:45:3e:1a:0d:80:34:4c:2c:09:99:bf:83:58:37:ee:fc:6a:
33:d9:da:d1:88:8d:91:98:d1:b6:31:20:84:f9:65:e3:a0:8c:
fe:91:0e:bf:74:ee:20:38:a7:93:ae:00:65:0f:b5:c9:d4:25:
33:fd:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:32 2025 by rpki-client