Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: HLTbZW6SV0wuWM+Vo6LONQwU88jRZZHPz3JzbMv76Tc=
Subject key identifier: 16:FD:E4:90:F7:D8:11:5E:9F:37:58:52:76:B2:99:AE:84:6E:2D:7C
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 019A725C76D116D5216D8DF9EA2EC23FB809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 1195
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: 9UqmHvhrsBR60FRyHkAVHMFvUZXLjqYdwMruiZ53W/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:76:d1:16:d5:21:6d:8d:f9:ea:2e:c2:3f:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=16fde490f7d8115e9f37585276b299ae846e2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:99:81:5f:28:87:05:76:2d:91:e1:9b:9e:
60:b9:37:2a:41:b5:a2:69:02:c2:72:c7:b7:87:3a:
28:18:f1:94:20:a7:53:aa:21:91:7c:6a:ca:69:cc:
88:78:70:16:0d:96:91:0b:cb:ce:ab:e2:79:9e:fe:
e8:39:98:43:e3:c7:d5:48:3d:a7:3b:9d:20:7c:ef:
2a:9e:47:be:65:ff:18:65:d1:98:4a:2c:27:41:a6:
e7:90:be:30:51:13:ea:8d:37:4d:f1:1e:90:3c:c0:
c5:ba:93:3f:b6:da:cf:50:f6:6f:f4:f4:1d:aa:85:
da:92:7e:95:97:7f:a7:3f:5f:af:40:dd:cf:d1:a3:
d6:eb:85:fd:6a:6e:67:5c:61:8a:50:59:0c:e5:75:
9c:a6:e3:22:14:69:09:36:3f:6d:7f:75:a0:df:1f:
2a:2f:fa:c3:a3:75:4e:48:dd:cc:b2:3e:8d:48:06:
94:ad:f5:ea:fe:44:ac:6a:4b:27:9f:f1:7a:1f:41:
62:2f:66:cf:3c:39:d8:26:96:ff:51:ea:fe:d2:5f:
45:11:b7:6c:1a:e7:7e:5d:c4:7b:58:0e:91:3c:87:
b0:e9:2e:ff:c6:7b:49:90:78:06:bc:19:fe:c2:ee:
da:c8:18:ff:b0:21:7c:eb:56:10:28:86:d0:68:65:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:E4:90:F7:D8:11:5E:9F:37:58:52:76:B2:99:AE:84:6E:2D:7C
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5c:d0:b9:ce:c5:65:2d:2e:83:25:cd:b7:b8:ca:65:15:a6:
88:d7:12:54:fd:b8:e4:60:7a:e1:dd:d2:e4:e6:7d:c7:09:41:
40:b3:86:bc:0d:d1:e1:b1:3b:89:f3:9b:09:06:98:5a:00:36:
0f:6c:8e:ba:93:67:7c:95:9f:c6:7c:c9:d6:ca:85:e6:8e:05:
a8:da:53:35:eb:f4:6b:e4:5e:25:ef:bf:b4:01:cd:f4:41:d1:
8e:b0:66:2f:8e:72:11:e5:71:41:7f:83:61:e4:1e:e0:28:3d:
33:a1:64:6c:05:0a:27:2f:a7:6c:db:53:aa:14:b4:fd:97:06:
6c:ae:bd:fa:48:e1:ed:0f:42:f0:25:33:e3:8b:da:40:9f:f4:
71:8f:b0:a1:81:03:7d:9a:f7:60:31:99:48:43:e4:20:75:71:
03:cb:2f:32:f7:27:42:a3:e8:5c:45:2e:62:92:84:96:5c:bb:
40:41:23:a1:ab:73:7f:08:38:21:bf:e3:65:a7:05:2e:5e:2f:
d9:88:fc:60:1c:20:c1:8f:d1:a7:6c:f6:bc:ad:71:69:ff:17:
8f:73:0a:c9:32:0a:f9:7c:24:ed:57:b1:40:95:65:f5:c2:fc:
6d:60:df:92:53:3a:76:33:54:0c:20:65:c3:3e:a8:12:c2:4c:
44:98:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:35 2025 by rpki-client