Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json)
Hash identifier: nB269RNA1Ow+g9KA9TRxdBf83WmOGpmDspGZzVpsJSk=
Subject key identifier: BA:7D:D2:F3:EF:0F:67:C7:92:A1:5E:98:48:2E:0E:65:84:56:B3:F2
Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Certificate serial: 019A71B91DF7B47A4CA52261029112346BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
Manifest number: 013E
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: qWDNNRVWaDrYAttVhicaPazanoy2foGIkCitNRgIRdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1d:f7:b4:7a:4c:a5:22:61:02:91:12:34:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=ba7dd2f3ef0f67c792a15e98482e0e658456b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:ab:96:cf:31:87:d5:05:38:5e:6e:25:31:
98:aa:2d:39:d5:ed:9a:74:87:71:e5:11:73:28:ff:
65:ea:15:05:3c:3a:df:45:a7:86:b7:24:e1:aa:bd:
c6:be:55:95:62:78:21:4a:22:74:80:b0:33:2d:d1:
66:6d:9c:ed:d2:cc:52:16:2a:4f:a6:01:45:89:48:
ce:5f:be:f6:c0:8b:27:02:2a:ec:ec:37:9f:62:55:
94:e6:54:a0:c4:1b:67:c8:cd:c8:39:d7:a9:0a:4c:
1c:c7:63:91:25:18:51:f7:50:13:dc:c7:03:d6:78:
5d:3a:e1:3b:dc:55:05:bf:0f:b4:02:25:2a:76:d3:
83:01:56:fa:8e:25:d3:cd:0c:ad:fb:9f:ea:8a:f1:
2b:ea:6f:4b:b7:ee:4f:63:28:e9:80:84:24:db:8f:
76:ec:76:fa:2f:13:bb:fd:03:13:3c:38:f1:93:af:
be:3d:75:49:5c:cf:4a:9f:08:d5:f2:c5:e2:a7:ff:
18:97:ab:34:fb:e1:6b:b7:0c:c5:b8:fc:6c:62:c2:
cd:c5:a6:3c:97:72:75:f9:34:29:e1:41:95:29:f5:
01:2c:74:5c:3b:7f:10:0f:b4:5e:ea:9e:1a:f0:f4:
bb:80:b6:ce:f5:69:2b:4a:8c:d7:20:84:4f:db:e5:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:D2:F3:EF:0F:67:C7:92:A1:5E:98:48:2E:0E:65:84:56:B3:F2
X509v3 Authority Key Identifier:
keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:35:34:45:82:e4:df:c3:0f:45:cb:a3:cb:90:1d:32:f9:72:
01:52:86:c0:35:5c:55:bb:f9:40:50:e2:4e:6f:08:b3:da:d5:
31:9a:1e:8a:f5:8c:7b:5a:35:7c:f3:2b:38:f6:c8:ab:95:f5:
52:21:64:3a:02:ef:14:0e:5d:80:ca:1b:1d:57:02:60:c9:44:
60:d0:56:66:0d:d7:39:10:da:1a:80:97:1b:d3:31:c5:9a:b6:
8f:82:6c:12:ea:79:eb:4d:c5:68:9e:d0:47:7f:84:8f:4c:32:
4e:e3:81:46:70:ca:d5:10:14:70:83:7a:70:a9:61:19:34:80:
38:34:91:2f:73:ee:08:47:b1:16:e7:b3:f1:fe:fc:ba:61:e4:
05:4c:96:d2:65:b7:74:e8:c0:c7:b4:2d:e2:53:13:fd:20:8d:
6c:22:76:a1:48:bd:f4:9f:fa:ae:0e:39:0a:01:9f:8b:6d:19:
29:76:02:85:8d:50:bd:f2:10:06:0f:7f:bb:b9:40:f1:01:9e:
22:b1:48:80:94:fd:a4:62:0a:6b:61:e7:82:e0:d0:1e:89:8e:
73:10:b8:26:65:79:c4:26:07:49:31:cf:67:42:8b:7d:18:b9:
01:b9:ce:95:18:cf:9a:21:f6:b6:b4:d4:99:db:c1:e3:8c:1d:
36:e5:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:15 2025 by rpki-client