Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: FXChs+m2skPIyUVyNWFP3qjHgw2VWGa7wpOw+KUD2DU=
Subject key identifier: CD:CD:8A:86:26:37:0A:FA:66:3E:F5:50:3D:8B:BA:DF:D0:03:8F:67
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 019A72266E697F886ADB0F710CAC8534689A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 160E
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: +Rs0Z43fgtQHMedQr3uyFCDsbIGHLS639B8IPPOPAg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:69:7f:88:6a:db:0f:71:0c:ac:85:34:68:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=cdcd8a8626370afa663ef5503d8bbadfd0038f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:5d:7a:8a:5b:41:1b:37:36:3d:37:27:8c:
35:05:e8:4d:9e:8e:57:38:b6:1c:b8:ff:45:13:42:
01:0c:5f:6c:6d:ca:70:ff:0d:7e:85:2f:84:0c:5a:
41:1f:fb:23:cf:09:52:b4:b6:12:e2:7f:bb:41:81:
4c:11:dc:cc:68:cc:d4:e4:a9:46:7b:bd:3b:f3:9c:
b6:de:67:49:ab:88:a8:10:e0:a6:4b:75:d9:80:d9:
22:77:a1:cd:58:b2:9d:2f:34:7b:ef:30:d8:7d:69:
d7:f4:6d:1a:0c:95:34:58:97:8a:da:3d:91:36:87:
18:81:3f:69:74:02:f2:84:0a:86:8f:1f:75:53:cc:
01:25:4a:f5:5c:67:8f:a8:73:fd:a7:79:7e:73:52:
51:08:c9:fd:92:28:df:bd:6b:51:a6:6c:de:f3:af:
f0:62:0a:52:fa:bf:cf:79:7b:73:99:11:8d:91:01:
84:46:4a:55:fd:16:db:99:b9:13:06:34:19:df:83:
14:c7:8b:6c:f0:31:2a:38:65:25:06:c9:0d:7e:8d:
08:03:aa:4c:ac:91:04:06:f4:69:a1:07:97:5c:5c:
ff:47:99:03:ca:97:42:80:1a:2e:c7:cb:56:3c:7a:
c1:b2:39:ec:8f:ee:bd:8b:8f:df:df:db:3a:5a:14:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CD:8A:86:26:37:0A:FA:66:3E:F5:50:3D:8B:BA:DF:D0:03:8F:67
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:28:ba:1e:16:ac:f9:22:60:7f:e1:1d:82:0e:dc:30:a0:
5e:14:6d:8b:2d:40:f9:e2:d8:7c:7b:dc:19:7e:3f:8e:1a:26:
18:ff:cd:12:3c:4d:3d:ff:b9:02:e8:96:a2:23:6e:51:16:6f:
7f:1d:8b:7c:24:c7:58:fc:6f:eb:5e:af:91:9e:e1:e0:1d:07:
30:53:11:da:27:30:61:e0:b4:77:73:22:6a:ec:cf:83:9b:bc:
fc:30:0f:3d:b6:31:05:12:16:22:5d:22:97:7e:3b:4b:41:5a:
9b:d6:62:b7:b1:2f:fb:f9:3a:2a:ae:7a:28:bc:c9:2e:86:28:
c2:8c:22:da:48:d2:3e:a1:ca:88:1e:6f:b2:c5:22:e5:ec:8c:
f9:30:8d:8e:8f:85:b0:50:e7:b9:f6:c0:9d:e0:bc:ae:b5:c5:
df:18:db:e4:8d:3d:73:e2:ff:1f:bb:5a:3f:5a:c5:50:13:49:
b0:c6:6c:06:c3:72:33:97:e5:5a:cb:51:1f:c3:cd:08:9a:45:
0f:e5:73:ef:ba:e9:24:cd:62:b0:a7:b9:31:76:6f:61:91:66:
6a:2b:12:7d:ad:1b:c1:15:70:33:8b:83:cb:0d:b1:ad:57:d9:
e3:f1:6f:33:ce:ff:fb:bb:4d:64:d9:33:7f:12:d7:00:e0:cd:
92:b9:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:55 2025 by rpki-client