Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: fV3MB2SmxC/rpWDXV8PKJLuyu0DjbXuAV84VBwWDlJE=
Subject key identifier: 3E:39:4D:21:6D:AE:34:37:6C:DA:E4:F2:9B:63:91:01:E6:65:6D:0A
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 019A711350C1473887F2B4598D23DFE33275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 09E6
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: zOquwuq0SFyCiaXJwHx1v07m4sngJN1zGqxuFFy93iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:50:c1:47:38:87:f2:b4:59:8d:23:df:e3:32:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=3e394d216dae34376cdae4f29b639101e6656d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:b3:47:55:d6:44:ef:b6:cd:9b:2c:07:7e:
8a:1d:ed:00:0a:c1:48:d1:84:a3:04:39:64:71:15:
7c:6a:90:9b:21:0f:fd:df:6e:f9:8f:36:b3:43:ea:
e6:0b:f4:cb:bc:d9:11:2c:77:d0:e1:0c:f3:25:89:
4d:4c:06:01:25:ca:87:b0:8a:58:d5:00:d2:1e:7b:
af:42:7c:0b:76:a6:95:1a:98:50:fc:ad:a2:10:51:
39:66:3d:b9:c3:81:a2:63:7e:90:5e:ac:30:6d:ce:
a5:26:0f:b8:e0:9d:8e:ad:58:b0:54:c6:c2:f1:ff:
55:2e:99:08:d9:bf:31:6b:02:98:f4:fd:82:bb:81:
a7:1f:92:13:65:cf:ee:a9:da:83:d8:d4:61:50:26:
8c:3a:c5:6b:d6:89:90:9c:66:74:b5:b3:3a:73:87:
de:c3:43:75:e2:0b:20:13:b9:6b:a2:aa:9f:78:71:
f6:b8:4f:0b:bf:a8:a5:e4:13:67:50:b1:b8:40:79:
8f:b6:19:bb:59:f6:6d:c4:6a:ec:9f:5a:63:f6:75:
4d:5d:c0:39:18:e9:1c:66:53:02:b0:fc:62:18:13:
8d:65:d3:8b:09:ae:77:e9:f4:06:34:60:0f:ed:ea:
3f:8f:3d:5d:51:b9:24:1c:e3:b2:5d:21:1c:b0:28:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:4D:21:6D:AE:34:37:6C:DA:E4:F2:9B:63:91:01:E6:65:6D:0A
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:06:cb:f4:46:2a:b0:30:bf:a7:84:8b:b3:2e:98:b6:10:f3:
9a:4c:fd:25:ca:55:28:cd:be:06:5f:58:f0:1e:ba:85:82:bb:
ed:3a:c2:c9:5d:06:84:4e:bb:7a:d2:06:82:69:7f:2e:d3:2f:
a2:02:8a:c0:39:98:c1:ae:ea:4d:7e:ab:3a:69:98:ff:ca:75:
16:48:d5:38:df:25:98:8d:64:6f:81:ad:9b:35:80:7e:1d:46:
91:71:6f:43:13:14:f2:a0:99:a7:17:ae:63:40:60:3a:60:13:
bf:0e:3a:25:d7:70:31:6e:4a:e0:f0:ab:89:2a:d9:31:53:bf:
a3:df:d2:af:76:17:2e:59:32:15:ad:d2:8f:8a:5b:b1:3c:7b:
68:76:4c:f3:84:7e:8d:ac:3d:ef:11:aa:d9:ec:82:c4:08:2f:
7d:88:0e:6e:40:6d:26:60:8a:40:91:55:25:dd:45:00:cf:6b:
84:77:36:34:82:b2:cf:ab:e3:d8:d9:a3:7b:08:b2:af:72:7f:
34:71:65:cd:ef:54:e9:a3:c7:10:0e:75:27:84:9f:a7:42:83:
74:b4:d3:d7:77:62:ac:3b:b8:44:87:50:53:e8:ae:73:45:33:
16:76:0f:69:ab:ea:ea:c9:df:10:65:6e:72:f6:39:bf:e7:7f:
de:ec:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:21 2025 by rpki-client