Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File: GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier: BtQqyE85bfCHBSnPe2x5tkSvicLSWJezW02r0dqNZRA=
Subject key identifier: 8C:4B:D8:8C:8F:8E:83:5C:08:B4:C1:5C:55:CA:37:2E:99:E8:CA:17
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer: /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial: 019A7293A3F19666F16F7DABD114927D02DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number: 1458
Signing time: Tue 11 Nov 2025 11:01:09 +0000
Manifest this update: Tue 11 Nov 2025 11:01:09 +0000
Manifest next update: Wed 12 Nov 2025 11:01:09 +0000
Files and hashes: 1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: HfX+HMCdbpMee0BfmXhMznDray5l4lBa8mA3xCIInhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a3:f1:96:66:f1:6f:7d:ab:d1:14:92:7d:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Validity
Not Before: Nov 11 11:01:09 2025 GMT
Not After : Nov 12 11:01:09 2025 GMT
Subject: CN=8c4bd88c8f8e835c08b4c15c55ca372e99e8ca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:e0:5a:6d:54:14:91:6b:6e:ca:69:9f:93:
de:62:05:27:77:7b:05:3a:02:3e:14:52:01:bb:88:
d8:20:27:7e:21:1f:13:f9:3a:ac:a8:23:26:d2:e4:
d9:e3:1a:d1:73:90:e8:1d:64:55:e0:04:08:d2:a0:
4c:4c:af:7d:5b:0c:99:ac:30:dd:77:ff:81:af:33:
e0:0a:a3:3c:ad:b4:16:87:fe:d5:12:e2:79:f7:50:
22:c0:3f:b4:65:71:fd:b4:cb:17:70:02:01:5b:ea:
6a:8c:89:d9:cf:52:0c:1c:92:bd:f2:9f:a6:90:50:
19:0d:c5:81:49:71:62:6d:5e:1d:9f:3b:21:53:f4:
70:a1:27:bf:3b:c5:d0:60:8d:2f:23:13:48:41:76:
45:b1:26:a4:2b:98:7b:5c:03:50:75:dd:07:13:ee:
af:17:f5:7c:d9:db:2c:2a:9a:6e:90:15:e4:2b:94:
ca:f4:d1:28:d8:13:22:33:a9:57:fc:78:0c:3f:f7:
0d:8d:9c:c6:c0:99:d5:70:ba:33:57:e8:79:77:b0:
e4:3d:b2:10:3c:e7:7c:a5:bc:d6:14:ce:cd:d3:c4:
78:7b:80:47:72:c9:bc:23:a5:9c:37:75:b9:b2:1a:
57:93:b7:93:8f:e0:f8:fa:17:34:c3:3a:64:b5:2e:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:D8:8C:8F:8E:83:5C:08:B4:C1:5C:55:CA:37:2E:99:E8:CA:17
X509v3 Authority Key Identifier:
keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:f3:5c:f0:6b:39:69:49:e7:d8:de:54:0e:10:53:2b:22:
1d:70:5a:3f:69:dc:dd:cd:d0:8f:46:04:d9:0a:94:9d:59:f3:
cf:7f:58:74:74:5c:b2:c6:c6:a6:86:58:7d:f6:e5:14:d6:d4:
db:ce:12:bf:ee:2c:14:1a:d6:d8:42:25:5a:18:13:ca:07:b4:
30:d2:b7:ec:fb:df:fd:e2:45:45:1a:73:00:51:bc:63:a8:4f:
03:47:6b:63:84:b7:d8:b5:ec:2b:bf:0b:03:b1:d7:ef:b9:95:
aa:da:5b:52:53:bf:c3:ac:50:05:73:24:c3:58:95:26:2b:5e:
73:db:a3:7d:dd:cf:40:44:a3:86:ce:a2:f8:71:f1:a7:35:6f:
69:26:0d:b1:23:3e:e9:3b:3d:29:cd:ef:a7:42:18:0e:a2:be:
2b:ac:e5:a5:3f:70:5e:77:b7:68:36:00:61:04:e3:fd:c2:d8:
1c:f1:75:cb:03:04:7b:e7:31:b0:fe:23:24:95:92:1a:63:42:
32:92:c6:be:83:83:38:84:c9:2a:7a:46:a3:41:86:97:96:d1:
40:8c:d1:7f:14:a3:9b:cb:fc:26:a0:73:54:66:e8:69:89:a6:
ce:9e:68:4b:bd:2e:f2:0b:91:a6:e9:f6:92:9e:58:b3:ca:34:
f4:a8:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:04 2025 by rpki-client