Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: X8g5bFSp3XwRsPSPBwOhDjsVhvGlkhLJXVaBhUUzV0s=
Subject key identifier: 29:7F:C7:BC:1A:B2:30:1B:AA:42:2C:1C:10:12:FD:82:9D:81:06:11
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 019A71B8CFDC629E4D7C4A49D00422A6B3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: 0ovMxs42snVmJPLxKb8P+AxeWkao9j9GnqjYr+m1jOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cf:dc:62:9e:4d:7c:4a:49:d0:04:22:a6:b3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=297fc7bc1ab2301baa422c1c1012fd829d810611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:12:24:d2:49:22:a1:0e:88:ee:a5:1c:84:
80:64:cc:50:c2:a2:78:55:c9:c5:45:99:cb:61:2d:
01:56:a7:94:ca:8d:bf:74:36:d3:e0:c9:f4:82:7c:
fa:1d:6d:f2:cc:2f:b3:03:1c:09:16:62:ec:ca:ee:
f2:52:b5:aa:b5:3a:0e:96:1e:16:61:71:ad:20:a9:
58:67:e4:a4:3c:16:e1:1b:5c:82:20:22:ed:bc:89:
cb:17:f9:67:f5:28:70:cc:13:ca:99:87:da:bd:89:
bd:3f:77:d3:0d:cb:1c:13:8e:0a:26:96:37:4b:42:
9b:a8:54:6e:85:7f:ce:73:99:02:80:b2:ac:b5:94:
46:e2:5b:4a:6c:1e:12:f6:f4:29:97:24:6b:c9:bf:
93:b3:36:ff:21:1e:af:b2:08:7d:b3:b8:68:ce:6b:
f7:6d:a6:18:56:f1:6b:29:92:54:92:36:de:3d:4f:
7c:a2:64:bf:18:a1:be:30:5d:07:0b:6b:ff:b1:13:
bf:98:4c:5d:b8:6f:4f:fa:6f:a6:89:23:10:9c:a3:
44:8f:e0:34:00:1a:6a:e7:bf:b1:cb:00:ed:b2:94:
db:2d:ec:77:4f:11:f2:40:e0:3c:b0:2a:64:d4:ad:
25:16:79:e7:ad:5e:05:8c:d5:46:81:3d:58:1f:85:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:C7:BC:1A:B2:30:1B:AA:42:2C:1C:10:12:FD:82:9D:81:06:11
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:81:96:4a:74:f7:0e:2a:3f:d9:22:af:12:b5:ea:37:07:
46:1c:28:de:5f:e2:57:de:7b:f7:30:fb:c0:ed:7b:1d:10:02:
6e:0c:63:81:87:ea:39:79:b3:dd:41:90:5d:89:ad:b9:2f:a9:
2d:aa:d2:69:52:68:8b:93:e9:08:da:ed:a4:47:f9:42:dd:7b:
fb:55:2f:7e:0b:ff:f1:d5:8a:5a:cd:3c:d5:93:2a:a9:35:d3:
ea:84:16:25:1d:e3:90:dd:04:2d:60:6d:99:d3:13:20:58:71:
be:8b:5f:8f:12:43:27:da:d9:96:3c:60:71:93:c1:90:85:ee:
8e:7b:87:15:63:a2:d6:a5:1a:87:43:70:e3:fe:73:3b:a8:57:
81:e3:bf:4e:05:8c:e0:b1:6e:bc:56:14:8a:cd:1c:ae:16:da:
98:f6:5b:61:9e:bf:a1:98:f5:8c:ad:9e:e8:82:6c:64:21:5a:
49:aa:ac:b6:dc:e2:30:a3:89:bb:1d:23:50:00:7e:34:c5:48:
fa:50:65:89:79:a9:54:c2:e1:34:93:20:bc:20:88:4d:9e:d8:
0f:20:09:50:3a:ae:21:ac:52:c8:a0:c5:bb:9e:47:b9:0c:b9:
16:7f:44:16:29:04:0c:68:80:13:63:f3:f6:49:18:7c:b6:c1:
87:8d:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:40 2025 by rpki-client