Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: FrPTB27H+q/AqOAIsOwf5fBae7w+SAleUAttTbWAkeg=
Subject key identifier: 9C:41:5D:BF:22:F3:A6:67:77:36:DC:30:8C:A2:C9:AF:A7:57:5A:6F
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 019A7112B0FADF4FB2BBFFD442A8EA1DDD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 165D
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: HvuYweuEf8SxpFjfVQVJCnYvwITD+u3EqVo01QYvXtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b0:fa:df:4f:b2:bb:ff:d4:42:a8:ea:1d:dd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=9c415dbf22f3a6677736dc308ca2c9afa7575a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:47:b2:9e:f3:7b:f5:05:72:fd:a9:f7:c3:
a0:45:c1:eb:a3:01:2e:0d:6c:71:92:e3:c3:14:e6:
09:40:0b:dc:a7:0b:c7:99:87:bd:ac:7d:51:34:c0:
14:bf:f7:57:10:d4:ff:60:f3:6d:fb:aa:dc:ad:ca:
ac:18:c2:93:bb:09:76:1f:13:ba:03:ed:a4:21:fa:
b4:11:93:ea:19:37:88:60:de:53:25:ef:0e:5a:78:
7c:fa:5b:38:7f:35:c1:29:07:dc:2c:90:60:65:6a:
61:6b:2b:49:ae:83:80:de:71:95:0a:1b:5a:61:9a:
5d:52:b8:ee:96:fe:c0:de:2d:b8:00:38:22:18:c6:
99:96:40:91:3d:7a:68:db:37:49:20:1e:d8:79:f2:
cc:c1:70:a9:f6:3e:b8:5d:2b:97:a5:6b:1d:1f:3d:
b0:2c:7d:cf:73:5f:46:95:58:7c:5a:a4:5f:3d:21:
44:92:f7:8c:85:5f:c5:d3:bd:aa:fb:1b:fd:c4:12:
f5:5c:a9:68:fd:7e:e2:ad:d6:af:4d:c8:c8:47:b8:
d0:c4:9f:8e:cc:fb:51:e2:39:d9:42:14:79:93:00:
d5:ad:c0:f1:bc:a0:f7:e2:1e:14:38:ed:f0:aa:2b:
fe:8a:27:b8:cc:ab:e1:11:2c:ba:08:2b:14:3e:7f:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:5D:BF:22:F3:A6:67:77:36:DC:30:8C:A2:C9:AF:A7:57:5A:6F
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:5b:1e:f9:2a:d0:4a:02:47:0a:45:71:7e:9d:71:c0:50:
e5:31:22:b9:ef:2c:3d:8f:ff:90:b2:2a:76:ed:43:46:fd:a8:
e0:13:35:f4:81:8e:94:9a:f1:ad:ca:88:ae:3a:0e:4e:8b:b5:
84:9e:d2:38:3d:5f:ad:dd:99:12:f9:1d:5f:39:46:63:1d:76:
4c:c4:54:86:a9:49:ae:3a:00:c3:5f:39:4d:31:1f:db:a8:15:
ff:4d:b5:2e:a4:50:c2:67:96:6c:ba:88:4c:db:d8:eb:f1:c6:
6e:6e:ef:ab:e1:b1:21:8c:23:83:27:2e:a0:bb:03:82:ab:1f:
db:ea:3d:d3:91:7d:52:64:95:f7:eb:1d:fd:f6:30:ab:11:4b:
63:19:82:92:33:c7:fb:c0:dd:f4:3f:96:bf:f3:64:bd:56:16:
3b:8b:49:28:16:9e:93:5b:39:5b:6f:47:04:14:40:7d:a7:87:
51:e7:be:9c:5c:0e:9c:e2:ce:a5:bc:f4:b3:55:60:a2:e9:54:
8b:87:0a:3f:f1:aa:06:26:23:85:2b:72:58:ab:28:c1:28:5a:
f9:f6:e2:91:a5:d1:d9:1d:03:55:97:d8:a0:90:3f:33:13:d3:
30:4a:8f:ab:5e:b7:c1:e1:10:20:69:9b:64:db:30:33:96:ec:
cb:4b:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client