Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: DkfK/Wj3x0VnHtqMxQVRHYSiKrg5L6ZxeilDEFIv7aA=
Subject key identifier: A9:8B:7F:73:3A:59:1C:7F:4D:98:61:49:44:99:C5:B9:C8:D0:6A:35
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019A71B8D9CE1D7DFAEDBC61A76A4D209682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0D9B
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: mQI0JC/uRBO5xPTNojD8CxRIgMh/tAVd9GgpFtY9sH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d9:ce:1d:7d:fa:ed:bc:61:a7:6a:4d:20:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=a98b7f733a591c7f4d9861494499c5b9c8d06a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:22:73:37:37:22:9a:b0:17:70:8f:cf:de:
23:c6:91:5f:36:3a:db:bb:98:4c:8d:70:cc:58:2b:
9f:c5:57:63:59:07:f1:c8:dc:2a:76:70:07:8b:be:
29:16:41:89:a1:72:5c:75:e1:8a:75:3b:ba:f6:f2:
00:a6:5d:94:2a:79:cc:58:90:39:a1:e9:27:02:9c:
1b:65:5c:f1:1e:45:9e:20:1e:dc:32:5a:1a:ac:ca:
7c:67:d3:81:9d:34:ee:23:e2:de:83:33:0f:13:9a:
2b:7b:46:27:b3:c7:a9:81:40:ab:29:aa:bd:bf:df:
05:1c:7d:c7:b1:63:f7:a5:67:0f:62:b7:13:96:2f:
a5:e8:fe:2d:18:05:cd:a1:fb:2c:7b:9f:ce:b3:f1:
63:d4:17:81:54:43:61:19:f3:3d:32:32:cb:33:43:
bb:41:4a:20:a7:5e:cb:13:f4:b2:06:87:7a:f0:0b:
f1:9c:da:a5:ef:be:62:46:e1:09:61:fa:ee:b7:0a:
ec:9c:2f:bf:86:cc:40:85:f1:b5:2a:f9:6e:c2:f0:
00:2e:1e:aa:b7:c0:c5:91:bb:a0:fe:fa:b1:92:3d:
d4:6a:19:66:7a:17:64:03:7a:5d:ba:53:84:9c:b9:
68:f8:d2:bc:ed:23:e4:3e:da:e2:43:2c:c9:55:ca:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:7F:73:3A:59:1C:7F:4D:98:61:49:44:99:C5:B9:C8:D0:6A:35
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:ed:1c:2d:58:86:57:ee:fc:03:1c:f6:f4:9e:2a:78:24:
ea:61:58:1c:3b:19:d0:7a:35:67:68:22:e0:16:fa:1f:d5:e6:
96:e9:e3:02:68:1c:f5:f0:26:c7:c9:d5:ff:e2:f6:17:9a:d1:
1f:e5:26:dc:62:a2:5d:7c:04:5f:fb:84:c1:b2:6b:e7:38:00:
4d:31:70:8b:64:94:73:a7:f4:b6:64:26:f8:44:7e:40:87:1f:
28:94:c3:08:55:09:f2:b3:90:1b:63:44:24:d3:5e:8c:c9:14:
ba:dd:3f:af:6f:19:3d:ed:7b:8e:05:48:75:1a:41:50:f8:2a:
16:6b:94:13:0b:48:92:31:90:ca:f8:07:51:f7:11:63:b1:9e:
50:b0:dc:95:f6:b7:a4:67:f2:36:33:b5:6f:91:4f:1e:4f:61:
23:92:26:76:94:a4:5d:32:86:5f:70:92:21:76:de:b7:b1:44:
02:d4:f9:b6:68:2f:0f:0b:d8:04:6b:be:1e:57:73:50:6f:81:
bb:cf:75:ca:35:3d:68:65:01:cc:f1:fe:62:24:b9:b8:f3:39:
2e:2c:3e:81:00:e7:0c:55:ea:1f:86:9f:bc:e7:e5:97:af:c0:
b5:60:0d:e0:60:03:bc:a2:c6:3f:d1:a7:08:7a:4a:d1:af:89:
d4:a1:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client