Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: bbb2k22tQQepf7xfNdCUQvpavVwUo6cAhR2JXrdn58E=
Subject key identifier: 8C:1F:90:EA:C5:D1:F4:CD:FB:4E:51:A3:8E:D8:9D:90:5B:1B:89:5F
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 019A4DAA87ECEED3E636D962082F0B144A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 07:00:12 +0000
Manifest this update: Tue 04 Nov 2025 07:00:12 +0000
Manifest next update: Wed 05 Nov 2025 07:00:12 +0000
Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: rq3I+EssyLsWwHFozTRnBi3ESXl22ydrSz5U/l2AfM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:87:ec:ee:d3:e6:36:d9:62:08:2f:0b:14:4a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Nov 4 07:00:12 2025 GMT
Not After : Nov 5 07:00:12 2025 GMT
Subject: CN=8c1f90eac5d1f4cdfb4e51a38ed89d905b1b895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:b4:2a:1f:39:d8:38:1a:b8:69:6b:db:db:
9e:c2:5c:4c:4f:c2:ef:47:03:ec:00:3a:5a:c8:ef:
62:c1:ad:b9:07:e3:ac:ba:70:ac:ed:f5:2c:43:b0:
51:25:43:70:d3:57:d9:b1:18:04:76:ac:fa:b6:c3:
97:02:04:b6:90:84:ae:7c:33:19:aa:c5:68:3f:d4:
08:fc:7f:70:26:77:f9:f3:ad:63:7a:0e:d3:04:44:
ad:07:99:0a:a1:e6:9f:0d:46:45:96:52:f7:fa:8a:
62:dd:2d:5f:e9:ae:ae:c3:b7:d4:47:68:1a:10:2e:
bd:60:4a:b1:54:af:fd:cd:09:2b:0c:81:06:eb:79:
d8:7f:ca:d9:e6:6d:3d:64:0e:ae:eb:82:ec:72:73:
68:2b:c5:27:af:f8:83:bc:dc:2c:ff:e8:40:a6:0b:
26:13:e4:87:18:bd:bc:d8:f1:c2:5f:75:94:b5:5f:
37:d7:a3:44:3a:f2:6b:f0:48:cf:fd:8d:a1:e3:4f:
f0:f9:5c:f2:c7:a8:a9:65:3a:8c:e7:c4:d2:af:3a:
42:ce:5b:b8:85:a6:ad:bc:0f:c2:ea:73:c6:f1:ac:
d6:57:38:5e:6a:32:69:21:5a:d7:0f:bf:c5:f8:cd:
f2:72:1d:53:bd:8d:85:ca:20:2d:c7:dc:16:12:62:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1F:90:EA:C5:D1:F4:CD:FB:4E:51:A3:8E:D8:9D:90:5B:1B:89:5F
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:00:10:30:69:7b:bf:fc:1f:5a:fe:97:e3:9f:1a:8f:6f:
d8:0d:fd:60:10:d1:d5:51:78:98:81:44:f3:e5:f6:38:05:71:
53:df:92:31:f8:eb:37:2f:e0:86:22:b5:d2:7e:3d:1f:11:f6:
f7:7f:23:21:76:4d:10:f6:41:95:c3:10:e3:d4:62:a9:27:0e:
8b:c4:e9:75:48:2e:48:db:aa:a5:47:ef:4e:a3:ba:ab:d2:a6:
8b:85:79:36:62:b7:8a:e4:76:54:ce:0e:f6:ee:20:5a:62:e7:
11:7c:a4:37:ab:a7:f2:ed:4c:4e:5f:b2:a0:fb:ed:35:1b:7a:
8e:97:e0:1f:b2:82:e4:97:00:7d:5e:c0:e3:1a:18:3a:e8:92:
60:e1:c1:27:cf:04:18:31:0c:0f:dd:5c:6d:d9:51:71:17:fe:
0f:70:68:72:6c:84:49:e0:b9:7c:e2:18:5c:37:94:ee:b7:4e:
f9:3e:d1:7f:c4:d1:2c:a8:e8:37:67:e7:b9:54:b0:65:0b:f3:
53:ff:74:1d:86:67:fd:e2:df:2c:c3:c0:19:09:93:e0:18:7e:
9b:20:3d:1e:29:e7:79:71:9d:c9:7e:06:aa:e5:e3:cd:b2:d1:
3d:1e:3e:7f:09:68:57:37:40:96:44:8e:cd:a5:20:b8:1a:a4:
95:6e:10:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:06 2025 by rpki-client