Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier: HWInEASnHjNim/fChEYyMNHzERx3KfKobhXsmsNm7+A=
Subject key identifier: B8:2D:D6:90:F0:03:D8:B1:37:DE:43:E4:8C:B3:27:FD:A7:4C:4E:F4
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer: /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial: 019A4E868E84A282D06443F7BFACDEC1D614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number: 0B56
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: qNPmwpR3dDoO4M0HTg7FsU7DXaQIg73GoiYJ1ksL8/0=)
2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8e:84:a2:82:d0:64:43:f7:bf:ac:de:c1:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=b82dd690f003d8b137de43e48cb327fda74c4ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:be:65:f8:a9:05:06:01:72:dd:2c:b3:03:
01:5f:7f:18:6f:26:e2:2c:27:d1:e3:60:3a:26:9e:
de:ec:d6:18:61:fd:26:fa:42:1a:50:e0:56:57:2c:
12:78:c6:cf:86:42:fd:d1:37:b8:ae:cb:59:8b:44:
a3:e2:df:75:38:bc:a9:62:20:cc:9d:11:49:ce:b3:
5c:1b:3b:54:6d:ab:21:6e:90:fc:f9:75:6c:67:b2:
e5:19:1a:d5:05:24:09:ca:7e:50:52:9c:0c:3c:04:
a5:9a:06:91:9e:39:d8:e6:78:2e:d7:36:8f:0c:cc:
38:64:40:7d:77:13:f9:43:98:ff:a2:43:67:af:df:
da:40:72:f2:6c:42:34:a7:c1:1d:8b:ba:1a:96:bd:
8e:82:8f:b4:7f:d8:ac:df:d8:95:fd:41:9d:40:1a:
d1:43:5a:b3:44:0d:bb:13:fb:70:8f:7a:fa:72:fc:
98:8f:e5:84:0b:aa:0a:5a:dc:73:25:35:11:5c:5a:
fc:11:93:b0:a7:9e:32:92:83:5f:4b:f1:49:11:01:
37:7e:03:97:a9:a3:6d:13:3b:08:cb:05:af:91:d1:
d6:4b:33:6e:0f:97:ed:76:97:8d:87:a4:ee:5c:ea:
2d:a7:c2:46:fb:a8:ba:4c:58:7f:06:1f:8f:ae:0a:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2D:D6:90:F0:03:D8:B1:37:DE:43:E4:8C:B3:27:FD:A7:4C:4E:F4
X509v3 Authority Key Identifier:
keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3f:5e:f4:25:cb:4f:50:ca:48:07:1e:91:43:b9:d4:c2:f4:
e2:37:56:61:9c:49:9b:73:b5:aa:d9:7d:79:cc:64:a3:5c:a2:
ff:24:4c:67:21:a5:c9:f4:ca:83:bc:c9:7d:04:4d:d4:00:cc:
ce:ef:9a:3c:e3:01:3e:eb:8d:5e:0e:3f:99:77:55:57:6d:d3:
af:e7:72:4b:a2:e3:bb:a0:34:41:f4:22:09:da:1e:8b:a2:0f:
a4:16:22:90:75:ba:28:0a:4c:f2:db:24:f3:b5:15:1a:be:4f:
3f:54:1a:0e:15:2b:7a:50:87:f9:4c:44:92:7f:06:64:56:46:
b2:a9:ca:b7:3d:95:5b:5d:7d:ab:e1:29:da:f5:4d:3c:6a:4c:
a2:5d:57:05:d4:42:dd:a2:4e:45:30:aa:b6:7f:3e:c6:2d:79:
91:22:47:ce:fb:7f:d9:fa:69:4a:f4:d1:c9:f4:9d:a9:32:90:
97:89:c2:48:35:3f:75:df:0c:a1:93:1c:89:0e:01:91:7b:6d:
ce:80:80:31:30:38:25:b6:87:dc:72:fe:9e:2d:78:35:2f:18:
31:db:ee:1b:66:ce:d7:7e:3c:ca:c6:5d:6e:bf:af:7b:fb:86:
b3:ea:f8:f1:64:a3:d7:10:52:2d:30:2f:4f:ae:a1:f3:68:c7:
38:f8:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:42 2025 by rpki-client