Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: +AH8ofThPytGOQkmRv6PrnwhylDHSGENzl6BKGk4z0s=
Subject key identifier: 0C:DE:D9:70:8B:14:A5:3A:0D:8D:4D:8C:6E:01:01:D4:1B:8C:5C:9E
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019A725CD9EE08814983F167FF467C14DABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 148B
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: ks1fH/hvgsty2D5sc8FGPaT/4O2eID0daE6/9/Y6uiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d9:ee:08:81:49:83:f1:67:ff:46:7c:14:da:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=0cded9708b14a53a0d8d4d8c6e0101d41b8c5c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:80:22:8d:49:63:d1:04:89:1f:96:e3:9f:
49:9d:8b:9f:61:6c:47:c4:5c:3a:d7:09:6b:7f:d2:
28:06:1e:06:55:f7:09:fc:f1:96:59:8a:4d:91:97:
11:4e:c0:f6:9d:fc:72:c6:3b:4d:86:00:d6:7f:6a:
17:61:ef:51:89:ed:2a:18:e2:22:c5:b8:2c:80:3b:
18:b4:b7:87:5e:6d:39:8b:82:91:3a:0c:39:cb:c1:
7f:17:fe:f1:f2:ec:1d:82:15:e2:7b:7f:ed:cf:07:
7d:f9:0b:cb:5c:b7:d1:f0:9d:da:4f:0b:94:d1:3e:
fd:2d:98:1a:33:a4:c4:37:62:55:85:8e:83:48:86:
b6:df:f0:25:e9:3c:76:a2:96:e1:f5:f4:fb:f8:69:
af:0c:98:37:7f:ef:76:a2:0c:13:d4:33:e6:68:d4:
54:a3:d3:62:6e:02:89:b1:c0:13:fc:f9:d6:27:b8:
fb:e5:bd:95:7a:35:09:9c:74:29:4e:bf:03:31:89:
f2:8e:09:4a:9e:48:1e:79:9d:37:fc:ab:d6:bb:43:
26:b7:4f:ee:23:70:15:19:09:2e:0c:ef:15:a7:e5:
d1:7b:d6:69:08:8c:59:64:f5:41:d9:0e:50:d3:4e:
64:57:1e:f5:10:41:3d:32:15:67:57:67:d2:5a:86:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:D9:70:8B:14:A5:3A:0D:8D:4D:8C:6E:01:01:D4:1B:8C:5C:9E
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:42:4a:ae:e8:b5:c1:55:b4:f6:21:63:ec:df:66:32:35:
c0:92:0f:50:4d:5c:c1:76:b4:87:2c:44:84:8f:48:32:bd:3a:
de:d6:18:d5:0a:c3:bd:76:dc:1b:40:da:ca:5e:1e:23:3c:4c:
25:33:21:2b:2e:c4:15:f1:12:6f:c7:ba:54:d5:0e:43:54:b1:
5b:f4:83:8b:bc:8b:ee:f6:10:9f:f6:5b:87:38:0c:c3:3e:f1:
62:7d:2b:6d:33:25:f9:ec:4a:25:d9:bf:bb:20:56:65:98:ea:
9e:60:64:74:fa:55:3c:6e:f3:36:54:80:73:6a:7e:96:de:55:
13:dc:99:fc:2f:a5:92:44:ae:0a:13:46:bc:92:7c:f6:26:92:
1c:2b:39:84:2b:e8:02:5c:d2:87:d3:63:86:9e:55:62:b4:f2:
13:4a:46:d5:3a:6e:f2:bd:82:43:23:c6:ed:c4:1c:ee:a6:d3:
45:55:9d:12:c2:5e:54:cd:ed:dc:18:cb:2a:44:19:11:02:2f:
d1:84:6a:c1:f0:88:77:85:10:2e:43:8d:aa:f9:75:4b:8a:d5:
10:22:2d:3f:84:81:f0:3e:b3:74:07:b6:6d:f8:83:f5:f6:19:
06:49:ae:b2:8c:d1:2c:ca:54:22:81:83:44:be:27:b3:6b:63:
06:35:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:44 2025 by rpki-client