Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File: GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier: 9fkCbauPE/el5a8/1SsGnG0BGX5OUTCoXyO/ZsRESCQ=
Subject key identifier: 63:DB:BE:D3:FB:31:81:68:51:DF:26:08:E6:77:7D:05:97:5E:85:B4
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 019A522C1D0E0820780EED9F18E9CE66DA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number: 0A1E
Signing time: Wed 05 Nov 2025 04:00:13 +0000
Manifest this update: Wed 05 Nov 2025 04:00:13 +0000
Manifest next update: Thu 06 Nov 2025 04:00:13 +0000
Files and hashes: 1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: sok0Ot8kyx3jhbx5Uli8zMOJq7Z49MBTE7xwCPOdbis=)
2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:1d:0e:08:20:78:0e:ed:9f:18:e9:ce:66:da:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Nov 5 04:00:13 2025 GMT
Not After : Nov 6 04:00:13 2025 GMT
Subject: CN=63dbbed3fb31816851df2608e6777d05975e85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:5f:a8:db:f2:9e:7e:a8:fd:69:74:cf:7b:
c0:41:2d:98:ab:a3:c0:08:70:a0:24:da:48:67:f0:
f7:03:0d:68:2b:6e:32:91:1c:05:d1:e4:e7:b5:16:
fd:9a:1f:ae:90:e8:fc:00:7c:15:e2:bd:00:6e:3e:
5b:e9:0a:a9:77:4d:00:05:0d:ba:98:65:e7:fc:2b:
89:4a:80:a6:78:ab:8c:96:b6:e7:31:6f:1f:1a:82:
dc:c9:e0:96:3a:7f:6b:3e:fc:ad:d4:b7:1d:a3:aa:
67:34:d8:d8:31:8a:c8:6e:db:fe:0f:43:4e:ee:6f:
47:dd:0d:89:ca:c7:b9:a9:85:40:9c:e2:cf:34:8a:
ad:e6:40:de:4d:f1:51:68:2c:f3:a6:7c:81:1e:2f:
c7:8a:a7:26:a3:d7:8e:46:05:5e:18:6c:9c:20:a7:
22:0c:e7:90:42:70:51:02:4a:dd:66:25:de:69:02:
d1:77:24:bd:30:b5:37:d9:8c:ac:6e:56:d6:3f:1c:
32:25:4c:1c:af:c5:68:3b:16:43:60:c5:b8:79:8f:
93:06:f4:c8:90:9a:e4:1c:6b:39:50:b4:a6:90:b6:
22:12:6c:45:ce:88:8b:be:08:2d:e5:da:57:5e:3a:
8b:67:23:78:ac:5a:03:4f:f5:2e:fa:26:01:f1:fc:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:BE:D3:FB:31:81:68:51:DF:26:08:E6:77:7D:05:97:5E:85:B4
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:82:c5:6c:9b:e5:25:44:ae:a4:8f:a9:07:9a:f6:0d:48:
17:d6:fe:c5:43:75:5a:e8:12:5c:b0:65:8d:68:a2:32:f4:b9:
a5:e0:2e:f0:40:75:14:bf:c5:54:d5:59:73:f6:a3:18:e8:fd:
f1:d1:58:a4:d2:7f:df:32:4b:25:48:70:ad:c0:a8:57:ac:37:
fe:fa:69:5b:3a:0f:2c:18:bb:4f:72:80:72:9e:2d:d5:74:ca:
e2:6a:ca:6d:96:91:0c:58:fe:dc:92:a5:ef:66:90:e8:a1:82:
86:24:ec:c5:91:ff:75:ea:7e:05:a2:54:a2:85:30:83:df:c4:
10:66:44:32:7d:61:59:17:05:f4:55:e3:c1:83:5d:53:96:70:
71:8f:43:9e:cf:de:5e:0d:b4:e6:07:5c:ea:4f:3d:97:f6:4d:
7f:14:b1:de:28:09:8a:71:41:e3:cc:16:45:c7:98:3e:66:b5:
d7:2b:39:0c:54:f1:d0:eb:31:aa:14:86:9c:8e:11:ed:c4:58:
c2:94:e5:1e:74:ab:97:88:b0:c6:da:48:d9:6d:ee:31:0f:04:
ae:05:db:14:5a:82:04:8f:36:45:0d:87:bb:bb:12:0c:56:0a:
a1:49:07:61:f2:f3:a6:42:63:30:26:70:9c:5d:c0:72:6f:c1:
cb:c7:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:59 2025 by rpki-client