Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
File: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft (raw, json)
Hash identifier: mteVt4UyCFI7AkjBiIMaLDOjsRUzKDx/BrbWCGNMYEk=
Subject key identifier: 8A:C5:94:CC:C3:21:81:54:FF:75:65:42:73:BA:34:2C:0E:5F:17:D6
Authority key identifier: 82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
Certificate issuer: /CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Certificate serial: 019922FA7782A7C9C746794E976623A434CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
Manifest number: 10F9
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl (hash: eNXrj5CnaiFZvvkfiQiysKsF82Gmddg9x9hKENMQbuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:77:82:a7:c9:c7:46:79:4e:97:66:23:a4:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8248c753d46cdc9e98009ee4db8107232c02eaf4
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=8ac594ccc3218154ff75654273ba342c0e5f17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:59:b7:86:b8:1d:39:37:3e:7a:b7:11:9f:
bc:c9:9a:e0:5b:a0:fa:d9:3d:87:db:82:9c:37:bc:
c5:dc:3d:87:ad:c3:95:ea:b9:d5:af:82:61:1e:fd:
f5:68:57:7c:ae:2d:30:a9:bc:c9:89:c5:20:56:f9:
49:28:d9:d8:ea:4d:89:df:72:86:c1:0b:db:a5:21:
48:a3:4e:48:a2:b6:2b:da:2e:69:1f:6a:4f:0b:e4:
0b:10:cb:f0:cd:b2:66:66:df:ed:bc:40:70:1e:b9:
dd:00:96:b4:e7:77:da:c3:bb:45:dd:68:3b:66:fd:
0e:7a:9a:c4:38:31:0f:ae:8e:43:d7:e8:a3:90:f8:
a7:62:36:93:27:55:ea:cb:c8:6a:da:10:ba:5c:d7:
d1:b1:d2:46:91:98:1f:8a:7f:ad:28:3f:63:7c:ff:
b7:c2:f7:b9:c1:81:b6:ad:f7:d5:4e:b5:8e:e9:7a:
01:a4:15:64:15:15:d2:29:6c:92:19:9d:28:d8:0f:
35:71:73:44:b6:f5:74:e7:c2:33:14:43:b4:c9:7e:
5d:dc:a1:41:1e:ff:44:4f:15:46:77:89:3c:d0:fb:
3a:7f:c3:9a:a1:84:fa:02:71:04:32:f5:1a:cd:95:
eb:cb:54:9e:f2:46:04:8d:35:37:57:ed:29:b2:aa:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:94:CC:C3:21:81:54:FF:75:65:42:73:BA:34:2C:0E:5F:17:D6
X509v3 Authority Key Identifier:
keyid:82:48:C7:53:D4:6C:DC:9E:98:00:9E:E4:DB:81:07:23:2C:02:EA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1fa426-40d6-4eea-bbac-9133225c9425/1/gkjHU9Rs3J6YAJ7k24EHIywC6vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:a2:6c:ba:de:3b:9e:55:75:50:de:02:cf:fe:f6:21:3f:
5d:33:a0:fc:4a:b0:78:3c:1a:f8:81:4f:1b:26:b4:ae:b6:5c:
d8:68:11:33:95:08:1f:95:49:88:90:9e:3e:12:da:76:ae:60:
5b:69:e0:a8:7f:f7:c1:c6:06:da:e0:b0:45:cd:56:c9:c9:89:
27:b4:f6:26:32:6e:83:83:2f:45:36:e0:9e:7c:b3:b0:31:b6:
b2:8e:28:f4:a1:95:0f:e5:7a:90:2c:cd:dd:0f:2b:db:a4:5f:
9d:d4:ec:e5:ce:43:bb:a1:77:d5:e4:b0:74:50:90:56:b8:94:
15:b5:5c:bf:2e:1a:c4:19:fe:aa:89:87:69:0f:2a:22:d5:57:
a0:94:f5:f4:9b:26:5c:2c:14:78:9a:f5:f4:ed:77:25:32:35:
53:7c:02:fe:e6:c0:b1:88:f4:7f:05:b3:67:80:ff:f6:74:eb:
d6:79:ca:77:e1:b1:93:8a:bf:86:c7:62:f1:75:7c:74:58:53:
da:b1:9d:b9:98:c0:ce:0b:b3:f7:91:84:e8:f7:be:28:6a:6a:
12:7f:b7:06:40:9a:57:10:6e:08:f7:0a:85:f0:d6:ec:1a:95:
8f:c5:81:cf:7b:94:95:ef:9e:b7:05:fe:a7:ee:27:0a:b6:76:
24:dd:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:41 2025 by rpki-client