Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: vuYmzpMF2/f3maRJgibBhJcaYeIIkXu3rZGcdAqnyso=
Subject key identifier: 6A:94:3E:0A:A4:F9:B2:E2:5C:39:A4:08:07:6D:73:3E:C7:E2:1A:F5
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019A71B8EA423DA113E8E4F438A070AAE825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: ALUOkoPVyQp0vXl62IVcfY7R/JHizwoHn7xEkRUy0yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ea:42:3d:a1:13:e8:e4:f4:38:a0:70:aa:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=6a943e0aa4f9b2e25c39a408076d733ec7e21af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:04:31:55:eb:43:27:6b:3c:e8:9e:69:56:
1e:6c:ca:b5:af:72:8e:76:18:e1:93:a1:23:1f:ab:
e9:99:96:f7:1a:f4:10:7d:42:35:43:3f:65:a5:c0:
65:9e:62:81:65:d6:7c:73:4f:57:e3:f1:f4:fe:a2:
1b:cb:ed:da:d4:62:90:c4:fd:d1:f8:0b:b2:40:ba:
93:1b:95:fe:9f:90:e7:ab:69:c3:39:55:40:1e:bb:
04:16:b4:75:b3:36:41:af:11:ab:e2:11:e8:2e:01:
d9:8a:b1:48:9f:44:e7:a3:02:92:02:3b:e0:6a:9b:
15:b6:9e:8f:9c:70:93:9d:e3:f6:31:78:6d:99:28:
88:29:31:bd:39:71:9f:4f:7a:19:32:88:31:54:0d:
cb:b3:29:3f:46:b8:37:cd:fd:1e:ec:58:05:b2:eb:
30:86:dd:ea:3f:4e:b2:43:63:15:99:11:84:8f:e4:
5c:eb:75:a6:76:c2:a9:6e:85:73:0e:2e:cf:44:2b:
7a:f9:21:f7:20:7a:d0:bd:11:a7:ee:2b:1e:90:d7:
cd:21:d3:57:c9:ff:d6:24:0a:b3:43:78:42:15:fa:
05:fd:ff:61:0e:23:4d:c1:41:bc:52:2c:b5:2d:60:
af:71:1f:63:29:3f:6c:00:f8:9f:35:b1:49:51:9a:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:3E:0A:A4:F9:B2:E2:5C:39:A4:08:07:6D:73:3E:C7:E2:1A:F5
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:13:44:a3:df:5c:d1:8c:14:ca:d7:8f:2b:47:43:cb:57:
be:8c:51:5f:5f:74:b1:82:6a:40:e8:f2:92:27:b2:d4:b9:64:
72:fd:61:fd:9a:25:af:a2:94:a0:09:d4:37:a3:76:96:de:dd:
86:d3:20:a3:f4:85:53:76:21:d6:ad:cd:80:ba:9c:ed:24:13:
f0:53:b1:aa:04:d7:eb:81:45:93:7f:a9:cc:83:28:ae:48:89:
75:d5:e7:cf:49:0f:e1:70:20:32:2b:af:12:72:e0:80:8d:82:
6f:e2:f5:9f:59:7f:0b:79:1e:73:bb:d9:7a:fd:4b:58:e2:5b:
de:e7:69:ed:57:18:1d:d0:61:23:2b:e9:93:70:77:3d:46:da:
73:44:48:61:73:fc:1d:08:1a:11:d4:cd:88:fc:8e:27:bd:b4:
c9:b6:e7:51:7b:92:38:00:0c:eb:c1:c8:f2:11:38:af:38:d1:
17:35:db:bf:81:6d:94:90:1d:44:55:cd:7b:7c:d4:50:28:69:
40:e2:71:42:5b:5b:89:6a:44:c8:8f:9a:66:bb:22:c4:69:0f:
fe:00:10:2b:2d:e7:b5:88:34:99:e2:f1:16:5c:d8:71:e3:c6:
3a:9e:03:78:e6:f6:a1:88:98:cd:35:ca:6c:8f:ad:2d:dd:07:
2f:61:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:28 2025 by rpki-client