Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: 2HbCt/+D+cr3n5AGfxrXZXElXyDtcvUULlMnM0dt9ZY=
Subject key identifier: 6D:D1:02:3A:DA:8A:6A:F0:C3:FB:6A:3A:5F:8D:59:AC:EA:2C:2B:A2
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 019A725CED1E75549C2FB054585FD53F06FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 145E
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: Xq/e7u8SExpN6gSO7LIxdb4tfILjoNQyNtkiTxOSCPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ed:1e:75:54:9c:2f:b0:54:58:5f:d5:3f:06:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=6dd1023ada8a6af0c3fb6a3a5f8d59acea2c2ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:fc:38:7f:ae:fe:6b:3e:ba:4a:3b:65:6d:
1e:57:c4:3b:78:98:12:a6:98:50:99:c4:cc:46:81:
a5:d9:18:e3:50:c4:3c:e2:21:fe:f0:10:fe:0b:45:
48:71:70:65:df:6d:33:a7:3f:26:cf:d7:4d:95:d0:
e7:25:0c:90:a6:ed:27:06:ec:34:54:b7:50:12:a7:
e3:89:b0:3b:b9:30:13:a3:c9:62:76:6a:8b:55:94:
25:9c:f7:0c:c6:fb:31:cb:da:4c:33:3a:81:9b:34:
f1:dc:6b:9b:dd:69:d3:98:6e:a1:20:23:27:49:e0:
bd:04:41:1d:55:77:3a:99:dd:54:41:24:fd:4a:0b:
ac:3e:c3:71:40:af:d0:f0:76:ae:27:ee:9b:9e:67:
e6:bb:35:f2:cc:65:f7:2e:72:48:14:63:86:84:a6:
f7:51:a4:44:91:52:19:93:0d:fc:60:74:2c:2a:08:
79:cb:5f:47:9c:b1:8a:02:de:3e:cb:11:8b:ef:ff:
b1:38:a5:10:38:8b:a1:07:df:17:39:90:9a:69:3e:
36:9c:89:35:f8:2b:c6:b1:4c:30:97:f2:b8:3c:6c:
64:92:7d:99:ae:11:5b:71:57:47:59:4f:b1:33:b8:
24:c5:6d:c8:8c:73:f7:f3:d4:91:53:49:cc:68:63:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:02:3A:DA:8A:6A:F0:C3:FB:6A:3A:5F:8D:59:AC:EA:2C:2B:A2
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:69:a5:ef:ff:ec:88:ac:26:f6:72:ce:8c:48:52:68:9e:
29:91:d0:72:81:8b:3a:c2:b1:19:7a:3a:65:9f:a0:92:84:88:
91:e6:45:56:00:a9:d8:3a:64:e9:f8:26:6b:bc:83:53:d4:b4:
b9:9a:9a:82:6d:2f:6d:fd:b6:99:68:45:ec:2c:6f:67:21:ac:
6b:58:63:34:90:04:b2:cb:d2:44:2b:f4:a5:3b:58:3f:d0:76:
56:73:8c:f4:76:74:3e:74:33:fd:1a:ea:0b:2a:e7:94:34:0c:
d5:59:02:73:7b:9a:25:d0:09:c3:61:88:1e:f4:b1:fc:32:5c:
8e:c0:b4:3c:09:4b:ab:e8:c1:fb:58:29:21:c3:b2:c5:08:f1:
05:49:70:28:2f:8b:dc:63:d1:0c:1a:c9:81:eb:87:ac:c0:0e:
77:75:c5:4a:16:88:5d:c7:59:87:54:b0:d0:22:4c:41:62:61:
8a:28:18:85:e2:3d:f9:22:3a:27:57:08:5c:a1:35:29:ff:c9:
13:e2:2c:ef:0e:d3:95:e1:09:90:9f:51:d3:60:57:dc:80:14:
4d:67:f2:aa:1a:f1:c3:69:26:4c:5f:cf:25:30:0b:52:f6:f3:
64:c6:d5:3d:2b:30:3f:17:f7:a1:b7:9e:70:3e:b0:06:fc:21:
bc:ad:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:45 2025 by rpki-client