Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: dw99hMZDCjo6Y7ToMzAmxiHU6EL82E6OEUcjLXCsmsg=
Subject key identifier: F5:17:02:75:78:51:60:FE:68:C9:22:BF:BA:F4:52:AA:6D:CF:1E:01
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 019A4D73D0E3B85EDE78895405E3DE1E2DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 06:00:27 +0000
Manifest this update: Tue 04 Nov 2025 06:00:27 +0000
Manifest next update: Wed 05 Nov 2025 06:00:27 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 4/j9CIXOR45/UCirJHL9D+cJe2+0iVtdmz8FHSs4yxE=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d0:e3:b8:5e:de:78:89:54:05:e3:de:1e:2d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Nov 4 06:00:27 2025 GMT
Not After : Nov 5 06:00:27 2025 GMT
Subject: CN=f5170275785160fe68c922bfbaf452aa6dcf1e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:bc:39:78:b9:c7:47:41:12:06:d0:7a:a8:
f3:56:77:d3:40:c4:09:da:97:8a:86:72:48:7d:d7:
e0:05:38:f3:89:c5:2f:1f:38:05:97:7c:f7:f9:97:
d7:04:7b:cd:9f:e4:f4:61:36:16:c3:0b:e7:f6:08:
d9:ae:9c:04:88:ee:cc:e8:a3:c1:04:df:13:a5:b9:
e9:96:e9:16:a9:b4:80:ac:87:88:9a:b7:73:49:d3:
c2:35:34:aa:c0:22:64:3f:17:98:60:26:9f:b7:36:
8a:b8:93:c5:b4:c2:65:dc:91:93:61:72:42:ae:ac:
ef:d0:ab:e2:51:ff:97:c6:40:5d:aa:59:9d:ad:05:
0a:7c:ba:a3:d9:31:9a:23:42:4c:ba:d4:e2:2c:3f:
4d:a5:a4:99:c2:c7:57:f9:57:72:2a:71:22:6e:43:
22:65:0a:92:d4:ea:c0:7c:20:87:79:13:53:11:33:
7b:e6:a6:77:e6:82:d7:81:ab:48:26:9c:d2:fd:6c:
b7:61:ee:f8:f1:4f:b3:84:ec:58:a4:2e:4b:66:8b:
f0:90:fc:7b:a6:49:9f:37:c2:65:ab:a3:21:72:43:
06:15:d5:d3:f6:c3:61:bf:a5:08:b7:a6:4f:89:b2:
c7:63:d2:e9:2f:16:3a:c1:56:ec:f1:42:dd:c0:ed:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:17:02:75:78:51:60:FE:68:C9:22:BF:BA:F4:52:AA:6D:CF:1E:01
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:36:57:9a:70:42:f7:8b:23:05:b9:1c:de:9f:c3:a1:5c:
9d:3c:4a:e9:84:10:e7:e6:fe:c4:e6:19:d1:f8:c8:5d:e0:db:
47:1b:d6:8e:f4:b9:92:d4:e1:d4:a8:91:3f:9e:40:e8:1c:16:
bb:59:33:b1:e9:82:dc:10:d1:c0:41:02:a1:46:72:cf:8b:2b:
81:6b:1e:ff:6e:3e:b8:59:93:11:0c:e6:33:8b:f3:13:42:14:
7e:94:30:54:1a:a0:39:41:e2:16:db:ae:eb:53:b5:08:74:ae:
e9:67:84:47:37:cb:ec:30:68:de:33:94:e8:06:f8:96:3e:a6:
02:5d:c9:a2:e4:43:32:55:03:99:e7:29:35:08:6e:46:f3:c9:
21:b6:49:7e:89:1e:5e:fd:ec:f5:0c:5d:6f:69:d2:f8:88:c2:
80:b0:62:d1:f5:d9:2e:78:2b:66:fa:19:3a:b3:c9:be:6c:63:
07:fd:b6:9c:57:19:ad:48:bc:50:19:66:cb:97:65:6c:a7:3b:
5a:4a:82:62:fd:c6:43:d4:2c:f9:c7:e8:e5:75:d0:1f:50:0d:
94:81:33:9d:7f:b0:f8:e1:f4:5d:fa:b1:b5:67:d2:16:fe:09:
b0:72:d4:8d:6c:0e:9b:f5:d8:ad:32:43:4e:ae:b7:c6:66:5e:
6e:59:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:59 2025 by rpki-client