Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File: Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier: DS7ErwTfe5NhKLIzU7KlX0qB4MEPS8mZLyt0bALnuNo=
Subject key identifier: 77:DA:5F:30:29:DE:41:69:AC:D5:38:2E:8C:17:0C:8E:48:E3:48:7B
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer: /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial: 019A7149DF605B015CF7973228759D0BBE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number: 0205
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: 0vrT7w39T7boU9Wm6A99YEken6iyOHZuqdb6DtVN8Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:df:60:5b:01:5c:f7:97:32:28:75:9d:0b:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=77da5f3029de4169acd5382e8c170c8e48e3487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:ca:ab:4f:50:1e:6c:d7:79:c1:ae:fc:16:
4a:a9:e5:34:b1:0c:46:13:92:51:59:68:7c:b3:10:
fe:2a:9c:a3:cb:62:4b:1a:95:62:90:3a:42:e5:b6:
c7:62:b5:65:f0:bd:b1:02:a0:46:42:db:62:f3:3a:
5d:91:91:a1:e0:34:a4:a7:28:ff:f1:96:05:63:95:
0f:dd:fe:52:a7:2d:d6:93:ee:06:a3:fe:2e:e1:8a:
58:2e:c0:01:55:05:41:9a:31:c9:c6:70:a4:82:be:
ad:bf:23:67:cc:d8:a4:fc:ff:9e:79:5c:f5:38:f9:
d6:6d:64:0d:85:8a:d7:9b:05:f7:07:2e:68:70:3d:
16:3c:e0:a6:19:0e:e6:95:d2:ec:97:1d:2f:fa:23:
d4:b8:4a:92:a4:07:da:d6:ea:6f:84:9e:44:43:b2:
d7:30:d8:ef:8b:0d:fc:34:9f:23:88:34:42:8f:32:
3f:c8:a4:13:60:9d:8a:79:a1:30:57:dc:7c:53:71:
f6:07:50:81:97:bb:33:22:67:89:ba:c7:1b:64:73:
6b:59:2c:a5:fe:c3:91:0e:d1:1d:b1:bf:08:13:54:
da:db:c0:68:28:5d:92:3a:a5:5f:9a:ff:5e:b9:e2:
a2:2e:43:38:34:15:c9:3f:52:86:91:5d:76:20:5c:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DA:5F:30:29:DE:41:69:AC:D5:38:2E:8C:17:0C:8E:48:E3:48:7B
X509v3 Authority Key Identifier:
keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:4e:f0:f5:0b:05:04:c0:37:a5:f9:95:78:fb:74:98:32:
58:1b:82:ed:06:fd:44:84:0b:ef:0c:78:69:e8:54:82:0f:c3:
0f:b9:31:cf:58:6d:6d:9d:1f:85:29:fc:ca:40:d5:84:41:0e:
ec:cb:2a:c5:32:18:c4:97:02:e9:76:46:61:03:c3:b5:5a:cf:
96:f7:91:45:9a:0c:6c:d3:9f:d3:78:19:e7:3f:1c:ca:4a:f6:
c3:40:c5:08:44:e5:71:69:b6:a0:e2:72:66:86:56:df:61:ec:
d3:43:75:ca:5a:b9:d0:c0:04:22:f5:be:85:cc:6b:65:23:b7:
48:73:d0:73:35:df:e8:a0:0d:78:ef:0c:0d:24:d2:84:26:3c:
7a:13:2b:0c:97:7e:6f:13:8b:9a:44:7f:21:ee:d2:41:91:0c:
c6:1f:0a:da:76:0c:87:9b:2a:69:83:77:6f:05:e3:84:e6:f1:
be:81:35:c5:09:9e:ac:88:72:f8:e5:18:83:4a:3f:11:32:25:
97:08:b1:30:f1:86:24:d6:ec:25:2a:4e:e5:2d:64:3b:7a:64:
32:e3:ed:fa:23:f9:50:d0:8e:9a:b1:13:25:37:11:96:d4:d2:
fd:73:b4:02:ba:dc:c7:a6:67:53:6f:cf:ff:48:91:d7:b0:67:
ba:d1:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client