Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: 07Z200+lNlRL+R7H+VIJmc5roqgwQbNemZyEvC1n2SE=
Subject key identifier: A6:94:01:3B:9E:E8:1D:D9:4E:B9:C4:F3:FE:18:79:CF:3B:93:33:06
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 019A4E4F8C64318222DFD499783C3B422B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 1669
Signing time: Tue 04 Nov 2025 10:00:27 +0000
Manifest this update: Tue 04 Nov 2025 10:00:27 +0000
Manifest next update: Wed 05 Nov 2025 10:00:27 +0000
Files and hashes: 1: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: +W5JOLaXydRJBid223F5Yq0uKmJneY5FOCkHJcqLLh4=)
2: oqdpV3Xk0NT7skwENXjSQjVV8BM.roa (hash: 16NskiWXB3ABFUN6srz9/Gadxy8aqe8x+NDzXv8hAB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:8c:64:31:82:22:df:d4:99:78:3c:3b:42:2b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Nov 4 10:00:27 2025 GMT
Not After : Nov 5 10:00:27 2025 GMT
Subject: CN=a694013b9ee81dd94eb9c4f3fe1879cf3b933306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:c5:59:24:99:c3:cb:90:90:c0:14:95:a3:
82:ff:61:eb:29:fe:fe:1a:23:50:eb:7b:82:18:a8:
2a:41:43:03:31:92:57:9f:35:ed:10:49:ce:a7:14:
4d:14:01:c7:05:9c:71:c4:82:cb:c5:11:0c:d9:4c:
70:a4:56:3b:3a:41:55:1b:5a:e7:42:60:00:a5:bc:
0b:ca:50:a1:bd:4c:40:b0:14:62:af:fc:33:45:51:
87:64:9d:e9:5b:d1:b2:4c:54:f9:4f:c2:b6:bd:9c:
ad:a9:ae:6e:35:cb:89:68:d9:02:61:03:b9:d0:ba:
6d:c2:66:3f:6d:0f:98:81:f8:5d:a2:63:87:fb:ea:
af:78:77:12:af:95:00:72:c6:0d:2d:f8:eb:13:d7:
4b:41:f3:ea:20:91:86:10:99:a2:58:f7:14:ff:98:
86:b4:a0:91:96:e7:81:3e:51:2d:57:ab:f5:ef:3c:
a4:0f:73:db:7e:30:1b:e0:61:4d:07:69:27:97:20:
d1:d0:51:08:9e:24:41:ac:b2:df:b6:2c:9a:db:2c:
62:d2:0f:66:ee:60:ab:66:dc:7f:6c:b6:d2:7a:6b:
50:e1:17:40:2c:52:eb:c7:e0:f2:bc:67:15:fb:dc:
af:86:cd:91:a1:27:fa:0a:9e:65:d6:47:02:f5:55:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:01:3B:9E:E8:1D:D9:4E:B9:C4:F3:FE:18:79:CF:3B:93:33:06
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:47:37:86:f2:a6:4f:2c:50:e7:28:b7:79:7a:f7:08:18:ce:
6e:5d:c1:04:04:f1:57:8f:a7:88:43:f9:52:b5:e3:8b:c6:6b:
4c:50:ea:43:56:f5:39:a4:c7:4b:a0:fa:bd:7a:59:c3:a2:d9:
ad:18:03:fc:08:6a:b9:28:70:ca:c5:47:03:89:b0:de:7d:0d:
0d:a3:42:1e:95:73:ce:12:5b:fc:ec:c0:66:4f:1c:46:04:92:
16:d5:04:62:3d:71:b5:ce:2f:e7:6a:bd:40:fe:cc:03:ca:41:
fc:96:cb:23:e3:fc:8c:ad:ff:00:9d:26:c4:fa:cb:fb:51:ef:
f5:60:36:38:e7:27:c6:cb:86:ab:e4:78:00:96:d6:54:92:c4:
d4:d4:52:8f:9e:c1:85:f9:ca:ca:cf:6c:2d:bf:a9:08:6b:95:
bd:c6:e0:ca:4e:3c:bd:f6:72:b6:68:9e:4d:2a:41:24:dd:80:
2f:ee:86:b7:02:26:0f:a1:67:6e:b3:33:5f:ed:4d:48:0d:37:
23:e6:74:3f:91:70:15:a0:d3:7f:89:b4:10:1d:ca:47:bc:bb:
cc:39:a9:75:a4:cd:6d:c1:a9:85:e6:f3:a4:a7:88:47:ec:50:
12:a7:4c:e6:97:b1:d9:62:e5:a0:7c:14:da:e4:31:0b:d1:e9:
99:61:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:11 2025 by rpki-client