Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
File: gTpCg40uRe1drUEUYG2XKaZQHSM.mft (raw, json)
Hash identifier: fEXkJ/2aOVk+vFqBOaC8Bt7y9fhc4ych+VY9s2xxj7o=
Subject key identifier: 41:43:1C:BF:EB:F5:E1:01:DC:73:46:67:AF:BD:06:0E:24:FF:6B:08
Authority key identifier: 81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
Certificate issuer: /CN=813a42838d2e45ed5dad4114606d9729a6501d23
Certificate serial: 019A72257D4AA34CE88A3117C00962993981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
Manifest number: 0F7E
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: gTpCg40uRe1drUEUYG2XKaZQHSM.crl (hash: RJjTyL/TJksr9raYBbHW2+BQ3rjd+xf6nQgHs2njLPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7d:4a:a3:4c:e8:8a:31:17:c0:09:62:99:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=813a42838d2e45ed5dad4114606d9729a6501d23
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=41431cbfebf5e101dc734667afbd060e24ff6b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:bd:3d:d1:67:27:74:56:d9:6a:0d:8b:28:
3b:4a:a6:90:3d:51:e2:f2:3c:93:9a:7d:b7:33:27:
18:b9:5f:58:fa:6b:4d:71:33:cf:91:3b:65:43:5c:
ed:2e:01:9a:b6:86:0b:12:59:39:aa:66:8c:05:52:
11:b0:a4:b9:49:1f:8d:a8:67:7f:e0:29:77:ab:7c:
47:5d:83:80:8b:70:9e:35:b2:6e:db:9f:d1:1e:ce:
73:44:32:f9:19:65:6c:1e:f4:bb:72:43:85:44:0b:
64:cf:85:ba:de:36:c9:af:a4:34:4f:5e:f8:b9:44:
93:f6:0e:a6:4b:62:1b:70:4b:25:3b:aa:3c:bb:a4:
a4:3a:1f:52:1a:9f:61:b2:bb:38:92:25:d3:9e:44:
2f:38:be:69:4d:36:1e:5f:ef:8c:c0:94:d3:e5:1d:
df:cd:53:44:ff:d9:63:54:04:81:fe:58:07:ea:a7:
24:bf:56:78:21:d7:e8:91:7a:8e:78:bf:f5:17:da:
77:75:81:7a:07:04:25:21:a4:60:e0:49:f0:42:ee:
cc:d7:e3:7b:ec:e4:44:cc:4b:1b:90:24:3f:e4:a5:
00:28:db:d3:3d:f0:4e:9f:e5:42:3e:c7:76:9f:f3:
fc:6b:11:f4:ba:cc:9f:e6:72:16:52:fb:12:2c:ee:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:1C:BF:EB:F5:E1:01:DC:73:46:67:AF:BD:06:0E:24:FF:6B:08
X509v3 Authority Key Identifier:
keyid:81:3A:42:83:8D:2E:45:ED:5D:AD:41:14:60:6D:97:29:A6:50:1D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTpCg40uRe1drUEUYG2XKaZQHSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c38a3-c204-4dcf-9c47-5348fe77ba73/1/gTpCg40uRe1drUEUYG2XKaZQHSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:fc:ad:8a:76:f5:ad:17:15:c0:1b:63:b4:d2:c4:1f:c4:
9a:41:b5:36:9c:3b:f8:15:f4:6d:f3:87:ed:63:3c:87:a1:78:
6e:e4:2e:06:ce:b4:ca:d4:06:1e:a6:9a:cf:4f:0d:09:13:e8:
5d:ef:5f:7c:bb:2a:bf:69:e8:b7:09:35:3f:fc:51:f7:23:50:
43:f9:d5:16:a5:74:48:c5:a2:a9:bd:98:10:ec:76:7e:15:17:
db:c6:0e:4f:62:25:ee:8e:60:28:8e:47:2b:e9:03:8e:ef:ca:
b4:d9:b7:9d:cd:80:ae:cc:72:2e:d8:e7:c3:5e:e6:09:e1:ca:
8f:f0:0b:85:37:7c:3a:c6:4f:4b:2f:cf:0a:72:44:77:78:60:
79:0b:1c:31:f3:bb:ce:8f:3d:ae:27:f9:ce:73:f7:43:00:b2:
54:eb:c0:e7:3d:dd:e4:96:75:06:83:7d:1d:81:0c:ef:fe:97:
3c:3a:63:2d:d1:57:62:76:28:d8:9a:fa:c3:17:7b:66:e2:11:
ab:83:40:45:37:c7:a6:2f:25:f6:3d:62:cc:ac:6e:f8:61:f5:
0c:b3:42:c4:1d:09:8e:2d:28:2a:e5:57:cc:27:5c:a9:c6:d6:
a5:30:61:d9:9b:53:ab:87:b7:ac:38:15:e1:08:fa:72:4b:b4:
3a:40:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:07:30 2025 by rpki-client