Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: ltbFCj24yZvQnTeldN+7m7nAfDn3oSeVMsX2p4/VaOA=
Subject key identifier: 67:A4:56:E6:0B:E6:9D:AA:D2:C5:54:90:D3:2B:BF:5B:21:84:E6:F4
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 0199225541A547E6BD4BAFD032C9E5F2AE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 10E7
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: KgeGiQbml8aqjG3sk/PH9wIrAsUJHZen7RDeWMBuuGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:41:a5:47:e6:bd:4b:af:d0:32:c9:e5:f2:ae:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=67a456e60be69daad2c55490d32bbf5b2184e6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:83:77:01:44:c4:3e:3d:91:9f:1c:33:2d:
0a:60:4c:00:4e:a7:26:19:3e:7a:c4:a7:62:27:68:
72:8c:a0:fe:66:bd:37:f2:da:db:f7:fb:03:8c:68:
3f:16:44:f1:fe:53:97:4c:7d:20:58:0e:14:37:ca:
f3:37:9a:a2:92:0c:67:d4:dc:ce:72:af:8b:3c:6d:
c2:1e:fa:f7:e1:89:75:88:80:ef:4f:03:ec:c4:fd:
92:f2:eb:b7:5a:63:05:04:86:e2:84:ea:23:64:f8:
0e:81:3f:90:01:7c:ad:27:bd:d4:42:82:54:66:a2:
dd:b2:4f:9e:12:17:74:14:d0:a3:2e:d3:9f:91:98:
94:47:4c:e8:53:03:61:62:18:59:e4:50:7a:4e:0a:
d0:26:fe:3a:d5:3b:e5:63:f2:d3:71:e2:4f:8d:65:
e5:da:25:9d:75:23:1c:cc:db:17:fc:42:f7:0e:df:
6a:56:84:bc:c0:c6:cc:05:fa:56:a0:1b:51:35:b1:
d0:90:7a:01:9e:83:44:15:74:08:1f:d4:3d:0d:49:
72:f9:96:8c:91:34:52:70:fb:fc:ac:44:1b:af:68:
8b:9a:4c:ee:aa:37:fe:a5:36:37:20:58:6d:27:23:
70:ce:3b:82:6a:2a:98:52:1d:15:10:fb:ce:e0:9b:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:56:E6:0B:E6:9D:AA:D2:C5:54:90:D3:2B:BF:5B:21:84:E6:F4
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:60:50:7b:9f:78:b2:b8:5e:5a:b6:2b:8e:c4:4a:7d:44:
d1:24:38:6d:73:f3:6a:0f:ec:07:69:ae:d2:57:50:6a:bc:c3:
99:f1:e4:b7:4c:ef:fc:ff:63:04:fd:b5:d7:43:c5:b4:21:80:
28:b8:d6:94:c9:62:df:24:04:2b:4a:91:10:15:f2:ae:19:47:
b8:f9:51:0e:73:55:09:11:ea:a6:7a:12:3a:54:d7:e8:52:f7:
af:7d:20:95:52:5f:b7:dd:e5:8d:4d:76:98:0f:66:ac:04:dd:
9a:c5:b0:8f:b7:83:43:31:d7:66:95:fd:f3:43:9b:2f:2d:3e:
1d:10:8f:a7:c0:e7:08:05:e3:1a:1f:84:58:2b:39:e2:44:96:
9f:de:ad:12:56:82:83:9a:a2:32:ed:86:86:e5:e6:01:ee:14:
8b:5f:61:b6:8a:01:c0:10:75:aa:f9:02:6b:c3:47:8b:31:87:
78:0b:c8:ea:36:9b:18:b8:ec:87:2f:a6:e9:13:ca:13:eb:6a:
4b:97:b6:3b:52:c8:fe:3b:00:e4:ce:7f:34:56:9d:55:25:15:
56:e7:5b:56:ae:03:00:84:a1:8a:c7:31:40:f7:e3:df:f7:c9:
e0:97:f2:70:1e:c6:24:58:e7:81:8c:75:d1:77:5c:f9:a0:fc:
f8:1c:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:45 2025 by rpki-client