Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: 8mA7OTywyWaskQvTCM1cK3VECfNuzo6UW1PU7SpHjp4=
Subject key identifier: BC:0C:C7:44:82:3A:2D:BE:BD:95:4D:E2:59:DB:6B:C1:EA:63:45:1D
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 019A4DAB2714819CE62B73457D423B6B1F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: oQk8b60+ggJ57qhqfWZudrHgR5cZq1S0H1mVv5IONh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:27:14:81:9c:e6:2b:73:45:7d:42:3b:6b:1f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=bc0cc744823a2dbebd954de259db6bc1ea63451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:27:57:7f:9c:6f:19:26:29:11:d7:de:c3:
8c:db:40:b7:cd:f4:a9:70:6f:ba:8a:ba:71:ef:22:
b0:ad:68:cf:07:79:d1:d3:75:34:06:f2:c6:0b:45:
1e:26:f8:d1:87:f0:1c:be:83:70:8c:22:ed:20:86:
02:43:75:a2:87:51:c7:57:54:01:c2:32:e9:4b:12:
3a:dd:de:5a:c4:3e:8c:09:47:6f:33:45:83:59:2b:
54:00:35:c5:8b:eb:34:db:0a:7d:d3:38:1a:d3:0e:
dc:09:ee:a6:cd:17:18:ea:ac:46:78:ac:dd:cc:d6:
dd:d1:2f:dc:2c:dc:85:ef:e4:93:f7:27:bf:4f:48:
3d:ed:0b:da:14:f4:79:c0:ca:75:3a:07:e6:44:28:
a5:2a:14:0f:52:0e:a8:25:8d:5e:e9:08:f8:41:f8:
1d:0a:7c:bf:08:73:f2:5f:af:50:5f:9b:3b:20:86:
76:57:b9:27:fd:0f:96:21:06:8e:ae:b4:d5:21:cb:
ca:4f:c5:5b:00:36:1e:b5:88:75:34:6b:09:82:1f:
ec:34:fe:3e:fc:d5:1b:75:25:7a:b5:ee:79:28:b5:
2e:bb:ef:69:87:a0:6a:4a:91:7c:fb:43:43:9a:43:
2b:54:fa:d7:a3:4b:81:d8:4d:9b:9e:61:56:ad:02:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0C:C7:44:82:3A:2D:BE:BD:95:4D:E2:59:DB:6B:C1:EA:63:45:1D
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:85:e5:cc:27:b5:ed:72:61:63:a1:58:52:f9:f4:a1:16:
e1:2a:50:e7:42:bc:4c:dd:2e:ab:4f:33:4d:70:7b:bb:69:55:
7b:30:9f:94:2e:37:ac:50:f5:80:dc:aa:8e:12:30:64:df:48:
b7:5d:b3:02:1d:42:ef:b3:8b:4b:b1:71:f3:9d:b4:3f:d5:4d:
c3:56:f1:40:6b:65:5a:5d:8e:92:fd:5b:43:ce:5f:94:56:d3:
3f:8d:c0:4a:a0:62:6a:b2:91:fd:c7:b7:0d:91:0b:69:8d:3e:
96:96:0a:1d:8b:67:f3:82:ef:96:02:d6:e5:f3:c7:5a:5c:17:
f0:42:a5:5f:12:d2:d8:fd:01:1d:80:cb:84:17:cd:45:6b:3d:
8c:ef:fb:f7:0c:ca:fd:8e:43:2a:cb:d5:f3:3e:4b:96:72:b9:
e0:d7:1a:4b:56:cd:77:c4:a7:e3:da:5b:ff:5a:ab:cf:03:06:
3b:a5:99:c8:77:eb:93:ec:79:2a:64:41:f2:56:b9:ea:b4:97:
a2:72:ef:c9:6f:28:58:c7:d7:bf:67:69:7f:06:41:f6:67:f6:
38:fe:66:ee:4f:d5:0a:b0:5a:c8:13:71:89:c5:ba:f8:16:fa:
6b:13:69:81:3f:31:f8:7c:89:1c:d7:a6:30:b1:ef:a3:f0:80:
49:d2:2f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:12 2025 by rpki-client