Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: nf8GHq7itEfNH0FeojjwvRq4EbnMFFvvlI+kuY+NDOg=
Subject key identifier: D8:CA:0F:59:0B:3E:B8:B3:9C:00:12:97:01:8E:82:31:40:0B:A7:17
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 019A70DBF56EE221594975EC06108F3EC515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 056F
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: 0KpNe0LqwMP48+b7/dWX+aSac1YS0RJO7wvPul+VQ1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f5:6e:e2:21:59:49:75:ec:06:10:8f:3e:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=d8ca0f590b3eb8b39c001297018e8231400ba717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:e1:58:b3:5a:24:11:d7:ef:4f:0b:89:9f:
4e:c1:bb:f6:38:4f:2e:85:29:14:e5:85:eb:a8:16:
9e:71:41:f6:94:87:cb:08:05:e6:2d:a9:40:27:8e:
9c:ae:28:7c:02:88:2b:08:98:39:2c:c4:1d:fa:dc:
20:ae:35:73:79:66:6e:f8:32:12:dc:2d:78:90:76:
c7:39:da:22:8a:89:56:f6:21:d3:92:40:d5:8d:91:
55:a8:68:34:ae:5e:39:bf:b9:f3:15:d7:70:5a:6b:
3e:ab:7a:dd:a0:99:f7:f3:fb:0b:b6:e9:0c:6b:e4:
6f:c6:92:3a:4c:29:66:fd:48:42:d7:af:5c:87:ec:
db:66:38:f4:8b:3a:ae:04:cf:45:9b:f6:c6:10:e5:
27:12:3e:2c:2e:f4:db:69:d2:91:78:28:25:48:a5:
e7:cd:18:16:95:b9:5d:ac:dc:36:6f:0b:47:f0:bb:
b8:6f:9e:31:64:23:8b:ca:88:0d:35:12:ff:14:1a:
23:66:74:2e:37:fd:f0:5c:49:4e:61:dc:87:6d:ac:
c6:d7:5b:c4:d7:42:0b:be:13:d0:4a:5e:3c:db:39:
ca:60:3e:72:83:be:37:c7:d0:06:2a:07:52:71:d9:
4f:e1:14:d6:2e:fc:2e:b2:55:bd:f6:c2:b1:67:8e:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:0F:59:0B:3E:B8:B3:9C:00:12:97:01:8E:82:31:40:0B:A7:17
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:53:b4:71:44:7c:69:d9:1f:76:68:a2:6f:11:df:dc:c2:
3c:41:d2:90:29:48:33:99:90:ad:fa:3a:6c:06:18:84:ad:57:
f2:15:d3:db:ba:25:b1:60:3b:77:a7:14:27:02:d7:99:55:ee:
7b:52:7e:3b:77:69:31:56:06:8a:98:50:92:8d:bb:82:e1:27:
f2:f8:b2:47:b5:51:b9:87:cc:ed:76:f3:29:50:ba:02:02:26:
a4:99:64:5c:43:1e:f7:cd:ec:4a:18:33:6f:f7:2f:5d:97:2b:
62:56:34:e9:40:37:55:00:90:c2:e8:10:2b:1c:65:ab:62:19:
8f:a0:55:97:08:d3:df:9f:1d:b6:da:bb:70:c7:e1:8d:99:bf:
bb:db:cd:e2:a0:89:b3:17:0e:3d:a7:dc:1f:81:cb:6f:40:c2:
59:b0:6d:e3:42:7e:88:25:e8:b3:1f:61:fa:51:5b:e8:a7:b7:
da:af:df:4e:2d:46:e0:fe:d5:14:78:e7:2f:9c:d5:ca:91:de:
dd:7c:9f:35:ca:b7:cc:82:f8:02:46:fc:a8:5a:ba:17:c2:40:
5f:19:2b:9d:0d:be:b9:80:7d:e2:4a:f8:ce:69:86:3a:8e:9a:
f5:d6:2b:1c:ea:58:0c:7e:e3:42:1d:d1:44:e8:ef:a6:66:e4:
0d:96:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:37 2025 by rpki-client