Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: DUb4I1BhFm/j2KB3TNjzTreS6S0IuLIJDMTxHj7fJD8=
Subject key identifier: 58:0C:41:DB:64:C5:78:1D:A3:39:7E:BD:C0:37:E3:A9:92:9F:7A:7E
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 019A7225C28AB907A4197AAAE50810786840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 0A06
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: uMDre13BDUi9hLbMHOfemli97ndOCGNC5Gxc20FB/d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c2:8a:b9:07:a4:19:7a:aa:e5:08:10:78:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=580c41db64c5781da3397ebdc037e3a9929f7a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:b0:77:2b:33:f0:20:6e:42:05:74:ea:74:
c9:18:5d:5d:10:78:e5:16:6f:9c:9d:b2:89:60:36:
90:5e:68:2f:51:3f:03:5d:c0:a2:e4:82:6c:1c:c8:
1f:b1:8f:f8:22:a3:9f:11:10:ec:18:47:a8:5b:be:
be:9f:77:a4:d3:ed:a4:b7:c8:54:9e:3d:db:16:1c:
90:68:dd:73:48:61:a7:b4:71:8b:ad:92:db:81:3f:
b0:80:22:74:dd:60:81:dc:06:e2:89:89:47:99:2d:
2c:ab:56:2f:2d:a3:aa:86:eb:1c:a2:d5:1d:92:ce:
ef:c5:67:04:51:48:8d:6b:8e:2b:dc:ff:7c:d2:8a:
e8:e7:d4:68:65:83:b1:08:f8:1f:29:42:9d:4b:d8:
50:e5:ec:f8:01:fb:37:7a:77:92:13:99:c3:a9:5e:
e6:27:a4:04:44:4e:fe:26:96:ba:e4:96:8c:2b:f7:
f8:cc:d9:95:27:b8:8b:37:35:e1:e0:35:05:9c:04:
0e:fe:81:66:80:ca:fa:e1:82:ca:ef:e5:1f:18:77:
34:65:eb:de:d4:fc:9e:42:e3:05:df:3d:4d:be:e4:
bf:a3:b9:92:25:ac:19:18:16:0a:0e:9c:c5:33:c9:
ea:79:42:0b:ab:a7:47:6f:8f:6e:cd:9c:ca:72:01:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:41:DB:64:C5:78:1D:A3:39:7E:BD:C0:37:E3:A9:92:9F:7A:7E
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:35:f5:4d:f3:5c:a3:85:74:ab:8b:d8:d1:68:7c:cf:b6:
72:36:58:d2:ed:65:c2:70:9a:31:2c:12:0a:b7:46:25:6c:34:
be:eb:5b:1d:e1:76:73:41:42:d9:75:86:17:45:3d:66:5b:e7:
a2:dc:56:3b:b0:cd:df:37:8e:9c:00:ed:6d:d1:98:7a:28:fb:
0b:aa:0c:57:09:e4:ac:06:2d:10:ad:fa:90:f5:8e:3a:f4:e5:
b8:8a:ee:b3:58:80:35:16:06:9c:38:de:4e:90:af:6e:f0:aa:
4f:b7:aa:d8:55:ff:94:80:89:f5:15:e5:22:ce:1b:94:1f:35:
2d:1a:80:9d:0a:f0:c2:97:53:34:da:ab:f7:53:f1:ec:69:18:
72:ff:34:69:c3:c4:0b:b0:6d:80:7f:72:65:fd:88:0a:0e:64:
88:45:27:37:fb:f3:a1:73:56:81:42:eb:dd:7b:15:07:66:ad:
ac:44:5a:0e:5a:fc:88:fe:7c:07:06:c8:c0:0e:c9:a6:83:b5:
75:28:39:89:28:d8:1f:b0:ad:dc:c8:0d:76:62:a2:50:d5:05:
86:a7:27:fe:3a:81:82:01:7f:af:01:f9:92:3d:87:8f:ad:6c:
38:8d:5d:f6:5c:7c:ef:22:32:f3:bb:2c:74:72:98:fa:cf:43:
ef:f7:87:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcKKuQekGXqq5QgQeGhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTBmNzQ1MzAyNDNhNjRiMTFiYjIzMmMwMzhkNTc0ZTdm
YzRkMjAwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
Eyg1ODBjNDFkYjY0YzU3ODFkYTMzOTdlYmRjMDM3ZTNhOTkyOWY3YTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv+wdysz8CBuQgV06nTJGF1dEHjl
Fm+cnbKJYDaQXmgvUT8DXcCi5IJsHMgfsY/4IqOfERDsGEeoW76+n3ek0+2kt8hU
nj3bFhyQaN1zSGGntHGLrZLbgT+wgCJ03WCB3AbiiYlHmS0sq1YvLaOqhuscotUd
ks7vxWcEUUiNa44r3P980oro59RoZYOxCPgfKUKdS9hQ5ez4Afs3eneSE5nDqV7m
J6QERE7+Jpa65JaMK/f4zNmVJ7iLNzXh4DUFnAQO/oFmgMr64YLK7+UfGHc0Zeve
1PyeQuMF3z1NvuS/o7mSJawZGBYKDpzFM8nqeUILq6dHb49uzZzKcgFLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgMQdtkxXgdozl+vcA346mSn3p+MB8GA1UdIwQY
MBaAFBlQ90UwJDpksRuyMsA41XTn/E0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4Nzct
ZTY4NWE3M2JkN2Q5LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjQ2MzUtMjA5Yy00ZTZlLWI4NzctZTY4NWE3M2JkN2Q5
LzEvR1ZEM1JUQWtPbVN4RzdJeXdEalZkT2Y4VFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh419U3z
XKOFdKuL2NFofM+2cjZY0u1lwnCaMSwSCrdGJWw0vutbHeF2c0FC2XWGF0U9Zlvn
otxWO7DN3zeOnADtbdGYeij7C6oMVwnkrAYtEK36kPWOOvTluIrus1iANRYGnDje
TpCvbvCqT7eq2FX/lICJ9RXlIs4blB81LRqAnQrwwpdTNNqr91Px7GkYcv80acPE
C7BtgH9yZf2ICg5kiEUnN/vzoXNWgULr3XsVB2atrERaDlr8iP58BwbIwA7JpoO1
dSg5iSjYH7Ct3MgNdmKiUNUFhqcn/jqBggF/rwH5kj2Hj61sOI1d9lx87yIy87ss
dHKY+s9D7/eHIw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client