Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File: GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier: LlSThYsnp7KdPWzLYSA8DS36YtUL1EkMMdWQJAubm74=
Subject key identifier: 1B:87:73:28:F6:BC:C8:85:93:24:6F:B0:DB:75:9C:05:D9:F3:1B:6D
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 019A51F57E2581628AA7ED32E5DC3C6F4EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: rfBFN/JlbmC6OWEc4CvryUCF/W3KrL6zbCjGQEBFesI=)
2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7e:25:81:62:8a:a7:ed:32:e5:dc:3c:6f:4e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=1b877328f6bcc88593246fb0db759c05d9f31b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:df:35:f2:cf:80:9a:53:2f:bb:72:dc:81:
bb:e5:12:3f:ce:cd:54:01:5d:b2:fd:62:fe:4d:42:
18:11:f4:cf:1b:19:29:f9:2f:ba:5c:02:10:56:2d:
48:97:50:71:7f:19:a6:93:3b:6d:70:ff:31:c6:85:
56:d8:72:50:bd:ca:27:1f:50:c0:01:50:fd:68:c8:
61:fd:15:1a:f3:f6:29:50:82:7f:f0:64:2c:ec:29:
1a:f1:2b:5c:99:8f:b1:a4:fb:56:da:c4:7a:57:51:
0a:2b:fd:8d:3d:55:8f:0c:44:e3:7c:c0:9c:46:f7:
e3:65:45:e2:f3:7c:cd:47:82:11:70:f7:42:0c:cb:
e8:a7:11:de:dd:10:ac:78:7e:24:e6:e9:2c:4d:43:
c4:48:06:da:64:9e:c4:bf:e3:0e:ae:ff:19:53:35:
29:23:7f:7a:bc:72:73:48:c1:61:f6:1e:a4:16:f5:
bb:00:55:ac:bc:91:21:e8:a4:df:29:30:df:a2:3a:
3a:8f:28:73:f2:d5:2a:96:03:4d:d5:5f:79:26:00:
57:d4:be:60:19:78:6d:02:40:30:00:e9:3d:7d:2b:
d2:a2:ec:83:99:18:68:ac:a0:c0:03:f7:02:3c:53:
c1:07:52:54:f3:ea:fb:c6:dc:01:57:4a:83:50:44:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:73:28:F6:BC:C8:85:93:24:6F:B0:DB:75:9C:05:D9:F3:1B:6D
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:08:58:0d:e3:25:0f:73:26:fb:df:fb:e2:36:00:2f:bc:
3a:d9:84:2b:d3:de:f3:cb:04:26:6b:a1:ef:87:aa:eb:64:24:
99:2e:60:e9:55:f4:56:76:d1:d1:eb:07:1a:79:b2:dc:2d:42:
3a:14:2f:94:2f:f7:72:00:b9:a4:b4:a8:25:30:ac:6e:f4:8b:
02:a3:0b:d6:97:1d:fb:70:f1:8a:4e:fb:ca:97:f0:68:8d:63:
0b:12:a4:4e:27:c2:02:a6:89:99:06:31:42:5c:7c:57:cb:ab:
a9:8e:db:09:0c:68:bc:67:b6:c4:01:7b:ff:0c:2c:10:c6:5d:
34:10:c8:64:5f:c8:7b:27:76:7d:ab:79:c2:32:ed:17:5e:16:
23:8a:8e:24:27:00:3b:3d:1a:fa:3d:1a:64:2d:bf:f6:67:4d:
31:27:09:7d:3d:51:0a:aa:e1:c1:c5:71:27:bf:1f:c0:a7:03:
35:cf:67:19:37:12:36:28:41:e3:e5:e3:b0:9c:f1:36:0c:50:
f8:51:0b:4a:ae:d0:b9:dd:31:b6:a4:08:a8:cb:36:2a:9b:98:
79:48:42:5f:d7:81:06:63:4f:ce:24:60:ac:ab:39:cf:c9:0d:
8d:70:11:5b:20:aa:68:b3:75:0f:2e:ce:71:d9:7d:d0:e5:a1:
16:86:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:00 2025 by rpki-client