Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier: QY1PvIyTKo/snWYSP7bwVBk/ojXskFSLMkFLJRuCfn0=
Subject key identifier: 4A:5E:A4:E4:63:C2:00:D5:3A:6B:B5:DD:DC:E9:29:F5:BF:5A:64:9E
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial: 019A4DE1D9DFD3EC0F64625D352EA84DA3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number: 042D
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: TgSUMO1XFPBXQfKEUocmuvkVDyMwVVZmXlZebL+c/KA=)
2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d9:df:d3:ec:0f:64:62:5d:35:2e:a8:4d:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=4a5ea4e463c200d53a6bb5dddce929f5bf5a649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:4c:b0:bd:e6:52:c2:c0:49:f9:81:ac:5a:
36:7b:4e:3c:d4:96:c3:68:b3:a0:c7:c1:72:fd:6d:
0e:19:c2:c1:8f:74:32:77:3c:ff:32:33:9d:1a:27:
30:90:bf:ec:c6:58:46:11:a8:b9:2a:a5:49:fb:51:
5f:8f:31:bf:d2:76:23:af:84:70:ce:4f:2b:bd:80:
f2:4f:bd:9d:d2:f1:04:db:83:84:05:81:4c:ce:f2:
1f:6a:7b:30:b1:5a:85:cf:da:f1:72:97:a9:e6:51:
a7:cf:c3:18:ca:60:a3:a2:b6:76:3d:de:16:1e:8b:
02:15:a5:1e:9f:5e:b8:35:90:b7:4a:cd:9c:fa:19:
96:5f:93:d9:65:11:73:6a:ce:d3:82:65:ae:b2:58:
ff:78:83:6d:09:a6:45:39:14:52:5f:19:ac:8c:e8:
38:46:3f:92:68:f1:fe:cb:c4:76:70:a2:63:e5:f5:
63:e2:1e:9f:3e:1d:c5:99:bf:54:6c:68:45:13:e1:
0d:52:a8:c0:1c:24:86:be:1d:18:cb:2d:d9:eb:4f:
5e:9f:8e:ad:b0:00:7e:bc:d5:31:4c:ac:2a:42:96:
02:e6:d2:50:67:31:55:81:86:dc:e6:10:42:a0:e6:
d4:ce:04:ea:83:f1:d8:22:f5:12:60:47:cf:f6:af:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:A4:E4:63:C2:00:D5:3A:6B:B5:DD:DC:E9:29:F5:BF:5A:64:9E
X509v3 Authority Key Identifier:
keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:57:79:2a:6a:ac:42:5d:14:a6:4a:5c:d4:3b:f3:88:0b:20:
bf:2d:7b:e2:48:b5:50:14:ef:92:56:95:e4:24:3b:ee:a4:57:
5f:a1:db:a0:46:2c:59:78:93:78:5e:00:39:f2:a8:1c:bf:a3:
16:66:a2:07:62:1e:a6:92:f9:69:10:7e:b7:2c:b4:15:b3:ed:
83:f7:68:f2:d3:d8:98:c5:1e:2d:e4:07:19:10:ad:95:fd:f5:
05:7a:ac:d3:38:b9:05:f6:c9:dd:e5:62:a7:d3:4a:12:a1:76:
69:91:5a:44:b2:47:8d:bc:6a:71:b9:42:7f:d4:73:66:ba:38:
e8:fd:03:e0:cd:dd:1b:9b:ea:dc:58:b8:85:80:83:36:80:81:
69:6a:97:ba:8a:5e:52:ae:5f:13:7c:4c:12:21:57:62:87:21:
ad:01:61:77:14:1a:17:4e:3a:ae:69:4c:88:71:1b:44:48:51:
4d:23:db:3c:31:24:50:15:dc:13:5d:04:1a:77:d0:60:58:b4:
d7:33:96:75:83:fe:8f:47:2a:54:0c:d1:10:c1:8e:d3:df:aa:
1a:a0:9c:55:37:71:b2:09:ac:54:9e:ba:27:de:8f:b6:c5:f2:
1e:fa:15:0d:93:76:3e:32:80:11:81:80:58:5a:8a:b3:80:46:
ea:99:72:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dnf0+wPZGJdNS6oTaPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmIzMmEyNjYyZjkwNWMwZDhiZjI0N2VjZTBkYmM2Nzlh
MTZiODQwHhcNMjUxMTA0MDgwMDM4WhcNMjUxMTA1MDgwMDM4WjAzMTEwLwYDVQQD
Eyg0YTVlYTRlNDYzYzIwMGQ1M2E2YmI1ZGRkY2U5MjlmNWJmNWE2NDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IdMsL3mUsLASfmBrFo2e0481JbD
aLOgx8Fy/W0OGcLBj3Qydzz/MjOdGicwkL/sxlhGEai5KqVJ+1FfjzG/0nYjr4Rw
zk8rvYDyT72d0vEE24OEBYFMzvIfanswsVqFz9rxcpep5lGnz8MYymCjorZ2Pd4W
HosCFaUen164NZC3Ss2c+hmWX5PZZRFzas7TgmWuslj/eINtCaZFORRSXxmsjOg4
Rj+SaPH+y8R2cKJj5fVj4h6fPh3Fmb9UbGhFE+ENUqjAHCSGvh0Yyy3Z609en46t
sAB+vNUxTKwqQpYC5tJQZzFVgYbc5hBCoObUzgTqg/HYIvUSYEfP9q9JFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpepORjwgDVOmu13dzpKfW/WmSeMB8GA1UdIwQY
MBaAFBm7MqJmL5BcDYvyR+zg28Z5oWuEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWIt
YzQyMTRjNzljOGI4LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jNjhlMzAtM2FhMS00NDM1LWE4OWItYzQyMTRjNzljOGI4
LzEvR2JzeW9tWXZrRndOaV9KSDdPRGJ4bm1oYTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARld5Kmqs
Ql0Upkpc1DvziAsgvy174ki1UBTvklaV5CQ77qRXX6HboEYsWXiTeF4AOfKoHL+j
FmaiB2IeppL5aRB+tyy0FbPtg/do8tPYmMUeLeQHGRCtlf31BXqs0zi5BfbJ3eVi
p9NKEqF2aZFaRLJHjbxqcblCf9RzZro46P0D4M3dG5vq3Fi4hYCDNoCBaWqXuope
Uq5fE3xMEiFXYochrQFhdxQaF046rmlMiHEbREhRTSPbPDEkUBXcE10EGnfQYFi0
1zOWdYP+j0cqVAzREMGO09+qGqCcVTdxsgmsVJ66J96PtsXyHvoVDZN2PjKAEYGA
WFqKs4BG6plyow==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:57 2025 by rpki-client