Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: Se3o31/uC+T2Ex9nCx9FHRLySdfT+CbO4FfLFRCogWQ=
Subject key identifier: 1A:F2:3A:90:09:9D:A7:89:CE:5D:22:FD:67:1F:68:F2:38:53:14:5A
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 019A52D1D8399B93AD5FC6ADD580A731F8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 07:01:15 +0000
Manifest this update: Wed 05 Nov 2025 07:01:15 +0000
Manifest next update: Thu 06 Nov 2025 07:01:15 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: 8FiUSbip+4qk5zcM3zaOUxjaxdAvDVZ1Mn1tTeIznMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d8:39:9b:93:ad:5f:c6:ad:d5:80:a7:31:f8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Nov 5 07:01:15 2025 GMT
Not After : Nov 6 07:01:15 2025 GMT
Subject: CN=1af23a90099da789ce5d22fd671f68f23853145a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3e:df:2b:f6:50:1a:23:7b:15:c0:21:22:0f:
42:77:02:79:ae:18:92:6d:3b:17:3f:d0:80:02:14:
c6:ad:ff:cd:3b:db:bc:32:f3:b0:af:22:db:e2:ca:
7d:c1:5f:12:0f:cf:06:72:e8:d4:22:7e:41:71:3d:
ff:46:b5:56:43:5c:9d:f6:e7:e0:40:78:42:7a:d5:
f9:ea:cd:1f:e0:ed:03:7e:c2:50:4e:0e:e6:18:09:
80:31:c5:16:59:e8:6d:18:78:25:e0:f1:ed:b8:2d:
8b:d2:f1:95:3d:94:25:0f:58:e2:3b:6f:43:ee:d3:
ea:d0:99:91:a4:9a:95:ac:26:ad:a3:33:1b:62:89:
9f:b9:4f:bd:29:0e:c4:f2:ce:e0:5e:2b:7e:2a:19:
ef:e7:9d:67:b6:f3:cf:ec:45:31:ae:42:ca:72:d1:
20:f2:8a:a6:f8:b9:45:56:41:38:4d:ac:52:51:1d:
51:e0:dc:21:dc:6c:f4:d7:8d:e3:e0:a1:d4:80:0e:
ca:8b:38:73:59:90:1c:ff:63:1e:96:26:f3:11:10:
ef:1c:e3:f7:f0:2b:21:54:6f:04:13:f1:16:c4:74:
22:5e:f5:f3:b5:0b:ea:b9:09:6a:16:ed:16:e8:e4:
1b:7e:52:30:94:da:49:c2:9e:7f:9b:35:45:a8:53:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F2:3A:90:09:9D:A7:89:CE:5D:22:FD:67:1F:68:F2:38:53:14:5A
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e8:e7:c1:34:dc:9c:e3:c2:d7:34:aa:61:4c:18:cf:d8:dd:
91:c2:eb:b3:d2:b2:87:5f:ef:5f:3b:9c:a5:9d:ab:60:20:f8:
76:c7:ee:51:98:0f:d9:71:7c:80:ae:af:1d:d4:51:9b:62:47:
8c:84:d5:d0:19:09:97:b3:30:e3:19:a7:78:6c:48:6b:5a:a4:
5f:f0:b8:e0:bc:77:df:55:27:94:4f:e8:15:10:d3:09:ec:6f:
d3:c0:1d:c4:a9:37:ad:a4:01:e0:61:e4:3f:8c:6c:ca:f1:1a:
8a:38:bb:e9:5b:94:f3:d2:18:31:b8:06:54:48:c9:94:11:8a:
db:d4:d7:d5:9a:50:82:91:27:88:95:61:41:34:5c:db:5b:2a:
66:2b:12:3b:9f:1c:15:d8:b5:24:93:42:ef:62:f6:8a:69:96:
b5:62:e2:7a:02:c9:8f:5b:ca:6f:00:68:b4:70:61:14:9a:88:
b4:35:88:96:43:bc:82:88:ce:41:6a:f1:1b:71:e3:05:02:24:
ca:33:d3:f6:97:1a:e0:a1:ee:9a:31:70:ae:1a:0e:39:a4:53:
68:2d:f9:7a:7a:59:c4:9c:fc:50:1a:d3:ae:4f:b4:13:ed:be:
c3:d4:df:49:eb:b0:2f:ec:9a:35:27:e1:24:8a:74:3f:25:57:
c4:b6:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:59 2025 by rpki-client