Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: BkCzchEQp8JPwqhWfnhUv2rdlUtSxh+CXq8thvq2rns=
Subject key identifier: 73:87:B3:C6:71:1D:17:1D:DF:1A:5F:E7:EC:75:F2:15:AC:85:C7:B3
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 019A4DE1664CE5B9A7DCD8156CD908B0274E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 0A12
Signing time: Tue 04 Nov 2025 08:00:08 +0000
Manifest this update: Tue 04 Nov 2025 08:00:08 +0000
Manifest next update: Wed 05 Nov 2025 08:00:08 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: BVqH0gbJAntLu1xXExWho4NqmPp3m0hfZFzTK+yuFyY=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:66:4c:e5:b9:a7:dc:d8:15:6c:d9:08:b0:27:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Nov 4 08:00:08 2025 GMT
Not After : Nov 5 08:00:08 2025 GMT
Subject: CN=7387b3c6711d171ddf1a5fe7ec75f215ac85c7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:25:ca:62:e5:f1:55:40:64:62:5a:94:b7:
4f:44:b9:93:4d:3b:33:9b:ce:5e:60:cd:ca:8b:27:
0f:65:5e:d2:98:c4:84:86:78:bb:e8:2d:2a:65:f7:
0e:ef:fa:a6:85:94:3a:1a:ad:e9:43:04:d6:d9:fe:
52:89:df:60:79:3c:11:12:8a:c2:31:c5:d2:b1:b6:
6e:ce:8a:85:88:3e:81:2e:5d:6a:34:7e:d3:a5:84:
d4:6b:c9:1e:af:e2:de:3d:ec:b2:14:40:b7:09:00:
65:4d:b1:b7:5c:4c:cd:fa:46:3f:14:22:bb:8f:03:
8b:8c:8b:e2:f2:37:10:c0:7c:27:dd:d9:25:dc:14:
47:91:25:3c:f5:30:5d:16:65:c9:da:e4:d2:ea:72:
f6:1b:17:25:e0:3b:39:72:dc:a0:73:e5:89:75:14:
a3:cd:40:6f:10:f2:12:c3:63:e0:1e:3c:15:fe:6f:
f0:c3:e7:99:25:ed:ae:1f:e4:07:9c:7d:f4:a0:e1:
c6:44:5e:d2:f6:20:17:32:91:d7:42:21:39:f2:5a:
e0:7e:98:bb:a6:44:b6:f8:6a:7a:06:96:9e:6d:c5:
dc:d6:13:6a:0e:62:17:ec:45:e3:f6:82:58:97:ce:
37:03:3c:7d:35:81:c2:71:54:20:55:e7:c8:04:e4:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:B3:C6:71:1D:17:1D:DF:1A:5F:E7:EC:75:F2:15:AC:85:C7:B3
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:f5:78:9b:b4:c0:5a:96:1c:eb:ee:97:72:79:93:fb:b9:
15:64:32:1e:9a:b3:de:ec:1c:91:5f:59:57:38:58:38:3a:8f:
f1:aa:ea:b5:19:14:d6:13:70:2f:38:69:28:dd:df:8e:76:d9:
2a:ac:12:09:0c:a4:c8:a9:30:01:28:57:a8:82:84:d1:4d:92:
ac:ab:95:07:b0:02:ea:46:c5:0f:2d:88:9d:3d:29:3b:4e:b3:
cc:5e:1f:01:22:84:cd:55:da:98:1d:a4:5e:53:ac:89:cb:d3:
54:81:98:46:88:8e:d7:63:19:2c:f2:c6:30:ff:9d:f4:f4:24:
7b:53:bb:3b:49:26:0e:61:f0:7c:e6:3f:61:32:8b:ca:e3:fb:
3e:c0:b2:38:a5:65:fc:6e:0f:bc:ec:41:0c:f7:9a:cd:49:64:
3b:10:56:48:84:58:97:bb:8e:63:1b:ec:1e:4a:1a:04:a7:f4:
44:ac:70:86:2d:a5:77:10:61:3f:42:c2:7e:f5:b2:91:9f:6c:
93:4f:eb:04:81:46:b9:93:28:41:61:6f:a0:8a:45:46:5a:5c:
a0:3e:64:ad:39:86:d2:2c:46:f1:e9:f2:70:1f:5e:e7:a6:e9:
66:cb:dc:a0:26:f1:17:95:20:92:22:9f:ea:eb:e5:3b:52:69:
57:0b:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:56 2025 by rpki-client