Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: BPU5XG4LSBTZpnhJxbvWzoBlSSFlMdAq1IWY5Qo2vDQ=
Subject key identifier: FD:82:65:F5:FC:71:67:93:22:68:FA:41:63:08:B3:F2:EB:AC:84:48
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 019A71B884BA290B4B8EAECC8145EEB11BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: +S6nb/UkWtTgw87GR9VkdD9E54+EDslk1JUS++2j+Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:ba:29:0b:4b:8e:ae:cc:81:45:ee:b1:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=fd8265f5fc7167932268fa416308b3f2ebac8448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:0c:0f:c7:b4:a5:18:b3:ad:e4:07:1e:6d:
a1:36:09:d0:0a:ad:d2:db:bb:a8:fa:32:65:02:65:
59:20:76:f5:79:7c:47:6e:3d:1d:f6:fe:c2:30:a0:
23:ab:a2:98:11:75:4d:db:f5:7d:a6:b3:14:af:e6:
2b:e5:aa:fb:fd:34:20:d0:db:6a:62:56:32:25:e5:
98:68:bb:6a:ea:59:9c:a3:23:e3:60:f5:83:c8:c2:
ee:a4:82:4c:f4:46:fe:19:ae:21:e4:1b:ed:69:61:
ad:93:9f:31:a7:0b:7b:88:6f:24:ef:f0:d4:53:f2:
4b:89:63:68:d6:51:4c:ae:b5:42:55:9f:cf:b4:a9:
86:c5:0f:ef:ba:4c:40:b2:2f:11:47:91:be:7b:82:
88:23:be:ea:39:f7:f0:34:de:c5:8f:bd:1a:4c:29:
79:37:14:8c:71:39:32:1b:f4:71:a5:5c:aa:5a:4b:
ce:9c:d8:71:90:7a:41:b2:e5:d9:db:e2:1f:1b:51:
50:c9:16:28:2e:c9:3f:e8:d6:38:2c:f2:ce:87:2d:
ad:47:5d:6e:df:ae:99:11:cb:34:75:c6:2d:c1:49:
13:3c:5e:3e:96:88:4e:43:da:8a:ec:ea:be:0d:f4:
ea:7b:65:81:7f:40:22:c6:32:a4:4c:ef:cc:2b:fe:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:65:F5:FC:71:67:93:22:68:FA:41:63:08:B3:F2:EB:AC:84:48
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:1f:82:c5:82:4d:ae:02:d4:4a:4c:ae:78:38:3b:f2:90:
0a:d6:24:84:79:05:0d:45:ef:5e:f7:e8:02:98:3f:c5:4d:e5:
35:ce:ae:51:18:54:65:a6:8b:50:85:be:1b:d5:6e:88:8d:6b:
d7:45:83:a8:32:2a:6a:68:e4:33:e0:4e:bb:d7:97:75:f6:65:
c3:b4:14:11:ac:b3:b5:93:25:c8:cd:fe:95:17:7a:38:ab:32:
ca:bf:c2:b3:a1:11:dc:14:2a:15:d7:7b:0f:f7:83:da:7e:81:
f6:98:60:69:49:c7:8d:7c:5b:8b:5e:6b:b4:85:0b:cf:e4:0f:
18:0d:01:a2:1a:63:c9:d8:f9:58:32:f0:0a:b5:66:dd:08:9d:
16:68:cd:78:75:09:29:2d:73:4d:b4:09:cf:ac:08:40:da:d0:
0c:93:86:42:e4:d1:de:08:87:8e:cf:66:d0:fb:70:35:67:ef:
93:b8:65:e6:ca:08:07:bf:fd:43:70:7f:95:35:33:54:52:68:
a3:a8:68:02:31:da:c3:dd:cd:ec:9d:13:99:9f:0b:4a:18:fd:
ce:00:46:da:9f:b7:41:33:e0:cc:43:02:d0:cc:c9:cf:62:a5:
3d:12:1e:20:2f:44:eb:07:2c:d3:11:30:41:6f:9e:d3:69:6a:
0d:be:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:43 2025 by rpki-client