Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File: gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier: ywTWHJf6r0wsT6+uAv6pIUwMVpJlHF7TFJaSMroz810=
Subject key identifier: 1E:FE:38:32:49:BF:51:F4:67:F0:41:E3:19:AD:2E:53:45:BB:FD:B6
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial: 019A7301CD17CC97E95FF9A0E6AD8C6EB4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number: 08BD
Signing time: Tue 11 Nov 2025 13:01:29 +0000
Manifest this update: Tue 11 Nov 2025 13:01:29 +0000
Manifest next update: Wed 12 Nov 2025 13:01:29 +0000
Files and hashes: 1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: mutO5rjrjCwB0GQh7/gADL02YuBHPhjLtnmwmkfnfKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:cd:17:cc:97:e9:5f:f9:a0:e6:ad:8c:6e:b4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
Validity
Not Before: Nov 11 13:01:29 2025 GMT
Not After : Nov 12 13:01:29 2025 GMT
Subject: CN=1efe383249bf51f467f041e319ad2e5345bbfdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:29:f9:78:99:21:32:dc:f5:d5:5b:c1:38:
b1:59:a4:ac:62:87:f4:c5:3d:10:31:ba:7a:a2:f9:
6e:69:8a:73:c9:a8:92:ec:4c:b0:01:15:c7:e6:ed:
02:54:ac:41:6c:7d:73:28:ec:8c:3a:77:74:52:a8:
97:1f:ce:38:7c:30:bc:da:25:de:f0:24:2a:57:51:
bc:47:97:9d:a9:0d:7a:6b:ed:f2:b3:0e:bc:f6:3e:
b4:06:cd:4a:5d:3f:be:c2:fa:aa:9c:c4:eb:3e:4e:
52:53:1d:17:a6:8b:7d:ad:ed:c4:fb:e5:df:65:0e:
e2:cd:8e:6c:23:61:e5:00:3a:46:24:f2:35:1d:6d:
44:2d:f0:ee:dc:66:18:b2:24:b2:a8:a8:ad:73:d3:
04:09:1a:f9:aa:d7:4d:d5:a0:95:19:b2:51:c0:69:
8a:d2:e1:56:38:34:17:a9:84:0b:b3:4c:7a:3d:11:
00:b0:f6:95:4c:45:4c:38:dd:f3:a7:3e:fb:35:59:
4a:f7:0a:63:5b:61:5d:f5:05:0a:68:42:da:2d:0d:
cf:8b:03:29:11:5a:86:cb:01:e1:8e:fc:e9:58:9d:
cf:5e:36:23:6e:89:70:43:9e:7b:d5:16:d4:88:3a:
28:47:6f:45:74:ac:05:54:f4:4b:cd:12:87:e4:1c:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:38:32:49:BF:51:F4:67:F0:41:E3:19:AD:2E:53:45:BB:FD:B6
X509v3 Authority Key Identifier:
keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:76:00:14:21:8c:bd:d9:59:74:25:af:d9:68:98:a1:52:6d:
8e:4a:b7:de:0a:52:43:85:a2:96:33:03:41:91:c6:af:56:fb:
7b:f5:5f:47:a0:d4:fa:f3:14:73:a5:d7:3d:ec:c6:83:df:cf:
bf:c3:43:8f:f4:aa:a2:97:e5:5c:91:3b:2e:4e:b9:c3:c3:89:
88:53:51:58:84:5c:5e:12:fe:c8:b7:46:b7:95:68:f7:ed:f4:
02:cf:25:81:77:fd:67:fb:09:84:2f:7f:5b:f0:35:68:38:b3:
4d:3b:6c:64:6f:08:d9:c6:3e:29:33:34:9d:16:cd:d0:17:b0:
2b:cc:6f:72:1d:15:ea:e3:05:33:da:fc:4a:6c:ab:8b:fc:14:
2f:de:e8:5a:66:ef:27:65:85:37:b3:ba:34:59:52:d2:f1:cb:
98:b4:f8:2e:e1:c5:b1:2a:05:62:9a:bc:5a:83:dd:9c:dd:6a:
9a:64:a7:b0:0f:58:c7:38:71:57:1a:ed:87:de:9d:b2:0e:56:
3a:a9:11:6e:e4:97:87:f6:4a:f0:9b:10:82:c1:b2:b3:a1:a7:
42:34:1d:74:e3:16:7e:d7:c2:8b:27:9a:73:53:73:e2:63:7d:
1e:d4:15:f0:3e:49:1c:00:d2:87:94:e9:38:e5:3a:c7:69:72:
ff:8e:6a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAc0XzJfpX/mg5q2MbrTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMmZhNWI5ODQyMjYxODMyMDFiNzAxNTk2YjAzNjhhMjdj
YTkxOTYwHhcNMjUxMTExMTMwMTI5WhcNMjUxMTEyMTMwMTI5WjAzMTEwLwYDVQQD
EygxZWZlMzgzMjQ5YmY1MWY0NjdmMDQxZTMxOWFkMmU1MzQ1YmJmZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA178p+XiZITLc9dVbwTixWaSsYof0
xT0QMbp6ovluaYpzyaiS7EywARXH5u0CVKxBbH1zKOyMOnd0UqiXH844fDC82iXe
8CQqV1G8R5edqQ16a+3ysw689j60Bs1KXT++wvqqnMTrPk5SUx0Xpot9re3E++Xf
ZQ7izY5sI2HlADpGJPI1HW1ELfDu3GYYsiSyqKitc9MECRr5qtdN1aCVGbJRwGmK
0uFWODQXqYQLs0x6PREAsPaVTEVMON3zpz77NVlK9wpjW2Fd9QUKaELaLQ3PiwMp
EVqGywHhjvzpWJ3PXjYjbolwQ5571RbUiDooR29FdKwFVPRLzRKH5By7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7+ODJJv1H0Z/BB4xmtLlNFu/22MB8GA1UdIwQY
MBaAFIAvpbmEImGDIBtwFZawNoonypGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzkt
MjViNmJkMmUxZTQzLzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yYzNhMzAtNTQ5OC00NDdkLThkMzktMjViNmJkMmUxZTQz
LzEvZ0MtbHVZUWlZWU1nRzNBVmxyQTJpaWZLa1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXYAFCGM
vdlZdCWv2WiYoVJtjkq33gpSQ4WiljMDQZHGr1b7e/VfR6DU+vMUc6XXPezGg9/P
v8NDj/SqopflXJE7Lk65w8OJiFNRWIRcXhL+yLdGt5Vo9+30As8lgXf9Z/sJhC9/
W/A1aDizTTtsZG8I2cY+KTM0nRbN0BewK8xvch0V6uMFM9r8Smyri/wUL97oWmbv
J2WFN7O6NFlS0vHLmLT4LuHFsSoFYpq8WoPdnN1qmmSnsA9YxzhxVxrth96dsg5W
OqkRbuSXh/ZK8JsQgsGys6GnQjQddOMWftfCiyeac1Nz4mN9HtQV8D5JHADSh5Tp
OOU6x2ly/45qvg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:12 2025 by rpki-client