Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
File: gCVbZMlsAQvaN98j2JJo6OR0jdM.mft (raw, json)
Hash identifier: tSxcNMsMh9/me8JLe86gSM6EMY1k9bpDfChu7JIX2dk=
Subject key identifier: 5A:A8:43:16:34:30:D7:78:E8:07:FB:89:11:FF:2F:E1:B8:D8:0E:3F
Authority key identifier: 80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
Certificate issuer: /CN=80255b64c96c010bda37df23d89268e8e4748dd3
Certificate serial: 0199C6B3093EA7B64F4A563870DE63344F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
Manifest number: 08AD
Signing time: Thu 09 Oct 2025 02:00:46 +0000
Manifest this update: Thu 09 Oct 2025 02:00:46 +0000
Manifest next update: Fri 10 Oct 2025 02:00:46 +0000
Files and hashes: 1: gCVbZMlsAQvaN98j2JJo6OR0jdM.crl (hash: mXTNGtDJ9q8IUeG+7YpjkoNBsy8OK0Ab86zN2IgkRLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:09:3e:a7:b6:4f:4a:56:38:70:de:63:34:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80255b64c96c010bda37df23d89268e8e4748dd3
Validity
Not Before: Oct 9 02:00:46 2025 GMT
Not After : Oct 10 02:00:46 2025 GMT
Subject: CN=5aa843163430d778e807fb8911ff2fe1b8d80e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:72:00:c1:23:85:a0:67:f0:b3:06:fc:e1:
5d:5a:1b:a6:91:52:ec:0c:c5:a3:17:86:08:6b:68:
c7:bd:14:ef:ce:40:76:0d:dc:36:6c:b8:99:b6:0d:
ed:56:85:0b:81:a2:3f:c0:c0:e0:30:3a:ef:91:ac:
7f:69:5c:a7:f4:3d:2c:14:e5:18:08:62:2e:37:e5:
9e:ae:41:77:66:42:a2:30:12:10:8e:49:6c:df:b3:
15:93:5a:b4:00:a1:1d:21:4d:09:10:60:dd:89:b7:
ac:6c:3c:c6:e0:06:cd:e6:2b:bf:17:02:09:dd:8e:
ac:53:27:90:b7:c9:ac:e6:f1:ce:c4:b9:f4:b4:21:
7c:45:1e:45:8c:53:20:5c:77:44:a2:50:ed:1d:b4:
d5:e3:40:b7:d2:eb:45:02:f7:61:ed:84:07:46:02:
5c:a1:fa:5f:9e:4e:0c:29:2b:6b:6e:b7:49:6f:14:
a7:4d:86:af:35:be:6a:eb:62:41:25:80:37:1a:29:
3f:a9:06:3e:29:92:5a:89:cb:08:95:65:d7:58:16:
92:cf:e1:58:e5:e9:ba:b9:98:aa:4b:4f:2c:19:86:
0f:3c:44:a9:89:3a:4a:94:8e:39:a3:7a:2d:0d:f7:
3a:2f:56:4a:ba:c5:ec:5a:fc:aa:34:62:cf:b5:47:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:43:16:34:30:D7:78:E8:07:FB:89:11:FF:2F:E1:B8:D8:0E:3F
X509v3 Authority Key Identifier:
keyid:80:25:5B:64:C9:6C:01:0B:DA:37:DF:23:D8:92:68:E8:E4:74:8D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gCVbZMlsAQvaN98j2JJo6OR0jdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/18761e-2564-420e-aff5-635e65b8b92e/1/gCVbZMlsAQvaN98j2JJo6OR0jdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7d:da:f0:02:63:2c:14:99:99:9e:1b:5e:26:55:97:2b:9f:
05:94:6d:46:63:7b:8e:e5:d7:a9:17:ba:f7:08:ef:81:2c:b0:
76:34:69:c1:a6:28:aa:43:dc:2e:5a:c7:26:0f:f5:55:29:17:
b9:e1:69:a6:e3:7f:06:01:11:30:a6:74:91:1d:aa:87:fd:4a:
50:e6:63:80:41:22:4e:50:76:bb:fe:86:50:21:1a:88:44:62:
33:5f:64:22:36:77:5b:2f:29:b5:d5:2a:0b:87:2e:75:26:72:
18:e2:79:f6:d7:57:6e:f0:c0:09:61:87:5a:87:e2:1b:20:79:
9d:c3:19:39:2d:91:6e:a9:30:08:50:c1:a5:ae:8e:2f:0f:0a:
15:16:af:14:d3:cd:9b:39:3b:85:64:17:de:46:df:67:0a:57:
df:99:b6:a1:7d:7a:8f:8d:17:62:3a:45:c9:8f:2d:41:90:2f:
77:8a:8c:37:43:da:13:18:da:a6:83:c3:24:1e:f9:60:7d:9d:
7d:33:c7:c7:99:56:4e:5c:fd:f9:5a:35:c5:ed:40:30:ec:ab:
73:e4:0b:7f:f9:2a:1a:53:98:d2:98:68:12:70:12:57:ad:d6:
ec:fd:67:28:58:3e:ea:55:ef:66:3e:2a:c8:49:d0:5b:e2:37:
86:c2:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:47:05 2025 by rpki-client