Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File: GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier: rZJYj81Qrttb+COLK2mtqioAnQ/d6ZxUh2oNUXrZNM0=
Subject key identifier: A3:FF:0D:16:7D:28:3D:1B:9E:F4:F5:67:07:E2:27:E7:20:5D:55:60
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer: /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial: 019A730109071310976E8A417DAD53C3C3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: HBVte7CTEu6eKIVlo7DKracvd+RmxprkrNfKGkD+fas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:09:07:13:10:97:6e:8a:41:7d:ad:53:c3:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=a3ff0d167d283d1b9ef4f56707e227e7205d5560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:f0:4e:10:07:04:15:29:9a:03:03:f5:bf:
5a:9a:c5:c9:6a:f9:9d:c7:ba:dc:ff:e6:6b:62:ca:
92:f8:75:1a:6e:06:1e:2c:c3:12:5d:16:5f:e9:d2:
d9:5b:40:f9:46:d9:1d:c0:f0:04:8d:b9:9b:1b:43:
01:2f:9f:1d:0a:70:fc:bf:ce:2e:fd:03:60:be:62:
1e:35:d1:80:0e:54:d2:7c:20:e8:59:6a:77:0d:b5:
19:45:7c:18:c1:f0:8c:b0:17:e2:3d:34:2d:ee:2f:
d5:83:ec:ce:80:a7:7f:1e:e3:9b:8f:53:e0:cc:40:
77:d8:d0:2a:dc:f2:ed:8b:e3:32:6f:23:d0:83:39:
b8:d3:36:eb:c8:45:e5:d8:4a:4c:ac:95:af:73:7c:
10:e5:e4:ad:05:16:de:c9:58:c3:34:ac:ce:ee:4c:
39:b8:3a:cb:83:fc:ba:ee:f5:7d:c7:ed:df:32:59:
8a:75:84:59:47:f3:b1:e0:70:13:dd:44:f6:c7:1d:
0c:58:ce:e6:a2:81:f8:66:7b:4a:a1:85:06:d8:98:
69:20:ad:e5:6f:2a:be:7f:e3:74:f1:af:81:34:9d:
bd:c0:73:0a:04:66:44:a0:95:d5:a1:09:6a:aa:08:
83:f1:3e:fb:3e:cc:d6:33:9e:f9:f5:31:d0:ae:e5:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:0D:16:7D:28:3D:1B:9E:F4:F5:67:07:E2:27:E7:20:5D:55:60
X509v3 Authority Key Identifier:
keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:57:08:5f:c0:5a:f1:a5:c6:11:21:ee:79:e0:7b:2f:69:ef:
e6:63:05:4f:76:40:21:0b:59:97:1a:53:c6:5f:bf:dd:36:db:
0f:c8:da:61:13:56:6f:8f:4b:fa:33:a8:a9:51:dc:aa:64:22:
bd:24:e0:58:71:94:71:e5:a8:1b:47:e6:56:06:35:f1:14:db:
56:ff:e5:bf:d4:b2:82:ef:1a:6b:95:89:93:e7:4b:9b:31:08:
8d:9e:4c:b9:a5:51:7c:88:ac:66:a6:3f:86:1b:80:cc:d9:6a:
46:81:1a:c5:2f:a5:56:3d:0d:e9:ff:75:92:bc:88:f7:9c:36:
25:12:34:81:f6:90:0d:78:97:d7:0f:ae:94:9c:8a:b5:a4:6c:
d0:44:6a:8a:c9:8e:9f:35:fc:3f:02:ed:bd:4c:b7:82:ba:6f:
f0:db:4b:b1:33:da:1f:3b:d1:e0:d4:93:7f:93:94:79:30:b7:
33:1c:dd:dd:89:c7:fa:22:f5:5d:df:72:4b:aa:c5:d3:d3:9c:
35:64:ea:67:00:69:f6:a5:c2:5e:53:b3:ac:ba:01:a7:2a:9c:
48:cb:21:56:5d:f5:07:20:c8:be:e4:d7:e8:ad:a2:a2:38:1c:
ba:42:27:f5:5c:4b:4c:2a:2f:6b:ef:39:ab:65:30:17:22:de:
a0:c5:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:25:43 2025 by rpki-client