Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
File: GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json)
Hash identifier: 3klYV+/tjgGZ5NMLjXG/FHOW88SmZZTm4AeG201kOG8=
Subject key identifier: 29:05:6D:2F:18:C2:F4:3D:75:7A:1D:32:F4:C5:19:BC:3A:0A:D9:96
Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
Certificate issuer: /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Certificate serial: 019A71B80301BC7196AC047C0E58B3262EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
Manifest number: 145D
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: E6IHQOSJJJ88g6dCphd+CiaLs+JcXCCKajA0zT5xYk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:03:01:bc:71:96:ac:04:7c:0e:58:b3:26:2e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=29056d2f18c2f43d757a1d32f4c519bc3a0ad996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:45:d3:1a:1c:ef:2f:a9:91:e5:55:f8:f5:
4e:68:35:7f:56:34:5d:ce:cf:05:fa:e1:28:04:99:
35:f6:ca:92:e2:7d:4b:94:29:42:7d:55:9d:29:d6:
da:ea:43:8b:f2:96:78:83:42:ab:7e:67:b1:52:8d:
fe:05:0a:cb:8a:3e:46:d2:f6:15:a6:f1:81:e4:b6:
21:59:4e:2a:85:23:ea:15:88:35:e2:14:21:ab:6c:
75:3e:db:54:40:c3:71:90:95:90:f3:4d:be:99:7c:
42:3b:29:62:22:88:ad:74:48:08:08:41:cb:81:37:
c2:a9:c7:dd:4d:cb:18:3a:a8:13:a2:5e:74:3d:a9:
94:d7:b7:b8:10:41:88:0e:3c:d6:fd:98:7b:4d:46:
7b:80:88:5a:9d:df:f8:67:94:c6:68:db:42:46:f2:
d2:9b:c6:f4:a4:57:51:3b:e0:8e:27:92:ae:61:9c:
70:f6:a0:86:37:69:1c:52:3b:fe:e2:6c:1b:b6:6f:
e1:cf:42:5c:92:f8:03:dc:11:e3:7f:ce:1c:b4:08:
a7:5d:6d:97:06:34:ff:d2:5d:bd:28:ba:d0:06:cb:
33:65:25:e6:c0:02:37:1e:4e:69:d1:6c:78:cb:83:
75:62:64:38:0a:b5:b1:7e:e6:2f:b3:f0:7f:b7:ed:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:6D:2F:18:C2:F4:3D:75:7A:1D:32:F4:C5:19:BC:3A:0A:D9:96
X509v3 Authority Key Identifier:
keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:d5:76:a9:ab:d3:6b:85:38:3b:e3:bf:3a:01:57:96:4c:
33:64:b2:60:bc:b0:1b:ed:dd:47:1f:ae:71:b4:c6:53:b6:5f:
61:fe:1e:31:a7:af:5b:c5:1b:e1:fc:a4:ff:70:b9:33:ab:17:
67:28:94:5e:16:ce:26:c7:1a:87:e8:66:8d:70:b4:48:a0:98:
be:60:e6:17:ed:24:cc:a5:b1:a5:5a:b0:f6:55:e4:f7:b4:e2:
a8:ef:ca:4f:21:cf:d0:95:cf:c1:31:03:a0:7c:07:51:f5:2f:
f2:14:a4:75:af:17:90:b4:e8:67:d3:f9:a9:1e:fc:55:50:95:
f1:0a:21:1c:67:5d:f7:61:09:9a:c9:8c:7f:94:78:04:b3:0d:
be:4b:14:4d:1f:4c:e5:de:5a:c4:aa:ce:bb:e4:79:e5:8e:ed:
8b:51:e4:95:0b:9e:06:93:10:0b:52:52:57:82:82:1b:7e:d3:
f1:a0:5d:f5:e1:82:3e:21:f0:34:2d:aa:9a:ca:83:78:a7:ae:
32:3b:b4:92:a0:fa:4c:dc:a7:7b:3c:26:fd:ed:ba:48:87:28:
7e:cb:01:39:7f:19:11:aa:3f:ae:25:c3:f5:6f:b5:05:91:d3:
76:b2:1d:b9:f5:c6:8c:89:df:f3:a6:a5:cf:11:61:f8:42:eb:
c2:49:cf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:39 2025 by rpki-client