
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier: TZIIF+w7rjo/ZgSc0PKQva/amJVp0CxXDxyr6bFAj/4=
Subject key identifier: D8:D2:69:AF:3C:A1:A6:A0:93:F1:C7:61:65:34:86:1D:61:07:A6:0F
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 019918ADBB291671A221651A859580E57BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number: 03F0
Signing time: Fri 05 Sep 2025 07:01:02 +0000
Manifest this update: Fri 05 Sep 2025 07:01:02 +0000
Manifest next update: Sat 06 Sep 2025 07:01:02 +0000
Files and hashes: 1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: PvKO6oNgY42L72rK3cB+nvGAWHAGhY37VCB3OnPsNxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:bb:29:16:71:a2:21:65:1a:85:95:80:e5:7b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: Sep 5 07:01:02 2025 GMT
Not After : Sep 6 07:01:02 2025 GMT
Subject: CN=d8d269af3ca1a6a093f1c7616534861d6107a60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:92:a2:97:9e:e2:80:80:82:2f:00:77:51:
b0:fe:1f:fd:a2:f9:22:e6:9d:79:11:4b:6d:00:93:
e7:15:31:39:c6:0d:fe:44:de:30:d8:e0:f0:26:dc:
16:6e:85:c1:0f:4d:e7:a0:e7:9c:75:fe:13:03:4c:
ff:ba:f3:be:3a:54:42:9f:fb:26:f5:5a:78:7b:1a:
71:1d:b6:ec:0f:0a:5e:5c:3c:44:b1:ac:21:12:bb:
d5:26:57:cd:ea:ec:23:a5:d1:e3:ec:8c:8e:d4:f6:
8d:55:f0:98:b2:71:6d:48:7a:22:c8:9e:e9:1b:a6:
7c:3f:94:5a:55:98:ed:ad:6a:5b:69:18:29:a2:4f:
f3:27:3b:71:52:f9:7c:46:64:ed:a0:29:5c:09:d5:
a2:c2:dc:4f:ee:8f:e1:e7:08:d6:8b:38:78:88:26:
2e:8b:bb:1a:f1:82:54:6e:3b:17:78:39:1e:25:80:
6a:ed:cb:0c:bc:c1:9c:fe:70:d3:bd:a1:b9:52:db:
af:d1:aa:6d:e8:a2:2b:0d:e4:2a:e5:be:e4:2a:6f:
17:b4:75:6d:24:78:bc:fb:50:cd:84:0d:a9:9c:b2:
e9:19:c4:c5:a6:ac:d1:28:73:aa:52:99:88:e9:cf:
ea:2e:1c:69:8b:50:1b:42:d4:3a:0c:3f:3f:e9:58:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:69:AF:3C:A1:A6:A0:93:F1:C7:61:65:34:86:1D:61:07:A6:0F
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:02:fd:b9:66:5b:ce:39:47:2e:b9:c3:16:05:e6:ad:22:dd:
e2:5d:de:db:f2:fa:ab:3e:27:59:0d:8f:42:a7:a3:34:53:bc:
12:2d:00:ba:28:e4:00:07:dc:61:5c:0f:14:e2:42:72:60:73:
c4:6f:4f:64:87:4b:2f:5a:17:ff:a7:09:f5:c6:ef:3e:c4:0b:
37:78:cd:25:22:ed:6f:d9:ca:30:84:fb:b0:60:66:da:26:c4:
22:7d:0a:6b:be:12:01:ce:7c:c2:c3:d9:ef:da:48:49:96:da:
7e:55:16:15:24:08:5c:db:61:4d:ee:5a:fa:18:bd:ac:95:08:
07:78:d8:aa:bc:d9:69:91:6a:dd:ea:8f:fe:90:04:40:ab:fb:
a1:4d:01:1b:a5:36:d5:1e:de:e6:c3:01:20:41:17:f3:24:40:
a8:74:09:2c:1d:b2:61:b5:0e:05:c2:f6:e2:34:53:0c:43:63:
1c:6f:28:0c:7e:61:99:31:fd:0c:a9:3e:07:7c:1d:9d:68:07:
24:95:cd:bc:91:92:32:27:a3:47:7a:eb:42:bd:bb:41:ee:92:
24:c8:74:8b:7c:d0:29:ac:6a:67:48:62:75:0b:61:90:21:98:
7e:04:06:39:7f:45:06:ce:b8:96:18:8f:47:60:75:8a:8b:08:
60:4c:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client