Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: 8YjOwk4KVH0V61XVwucvVHsKTnfqKpg9LPcY5B3tQ8E=
Subject key identifier: 85:94:8B:8A:32:24:58:0D:D4:94:5C:85:91:D5:53:FB:92:EF:E5:D5
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 019933B73A95A495096D41B6DE92779068F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0591
Signing time: Wed 10 Sep 2025 13:01:09 +0000
Manifest this update: Wed 10 Sep 2025 13:01:09 +0000
Manifest next update: Thu 11 Sep 2025 13:01:09 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: 7ElThGoE358O1jSGiyUITIvl2TQNHYQC9Bulr7NcwY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:3a:95:a4:95:09:6d:41:b6:de:92:77:90:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Sep 10 13:01:09 2025 GMT
Not After : Sep 11 13:01:09 2025 GMT
Subject: CN=85948b8a3224580dd4945c8591d553fb92efe5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:ce:1b:63:d8:a1:2e:9e:ed:5b:8b:c5:17:
a9:45:7d:37:61:27:31:ac:43:8d:c9:52:f2:5a:a1:
9c:8a:a3:2c:b6:bd:42:e8:1c:8d:af:10:cf:6d:e6:
3f:c3:f3:34:3a:df:88:58:a6:6a:b8:1f:56:95:a0:
73:c4:48:7e:4d:72:f1:6a:cd:19:4d:4a:5e:de:02:
83:c8:74:c8:63:58:e2:8d:47:65:ae:77:87:16:04:
3d:4d:96:fd:4c:00:90:27:53:03:6e:61:a3:cd:07:
d1:ee:1c:eb:d2:95:27:d1:cd:e5:a6:ec:4f:4e:e3:
8a:2c:91:de:c7:43:52:de:48:f6:63:4e:65:ff:8e:
0b:35:3a:70:cc:9b:15:39:e7:e6:be:da:b1:df:aa:
2e:b9:5a:b7:a2:07:1a:08:61:c1:8b:d6:a1:9f:61:
16:fa:f2:ef:0b:6d:5e:33:ef:b6:49:16:fe:ab:89:
05:16:59:4d:d4:74:5e:70:1b:23:e5:b9:d0:92:02:
38:26:f8:66:15:05:09:14:a4:61:91:5d:62:e3:9d:
02:30:73:33:40:d4:1e:9c:a3:44:6a:2c:6e:6c:be:
9d:dc:82:ca:60:fd:ef:89:28:d5:72:c9:40:bb:05:
af:6b:81:b0:cd:6b:dd:3f:b0:d4:94:42:b9:01:17:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:8B:8A:32:24:58:0D:D4:94:5C:85:91:D5:53:FB:92:EF:E5:D5
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:b4:64:71:54:a8:23:6f:22:6f:d4:9e:f5:e1:1a:94:fa:
f8:9b:f3:32:d8:1b:15:7d:97:2e:52:f5:44:3b:11:9b:9f:73:
60:d2:ca:cd:ab:80:e0:e2:3d:8e:95:ff:b3:eb:2d:16:f1:d5:
88:14:69:8f:56:de:11:a8:50:82:95:d9:eb:a3:3c:95:57:09:
b8:20:f8:b0:51:40:2c:bd:28:17:c1:cf:c0:9c:bf:bf:1d:27:
ac:c6:9a:9f:34:f5:78:51:65:89:52:bb:4f:5e:99:61:ff:e4:
2f:bc:fc:47:b8:c5:b7:ca:4e:fd:3f:7f:0c:66:f0:d6:c6:75:
a2:78:6d:6d:d1:99:9a:e2:ff:61:d7:5b:5c:29:cf:60:ad:e6:
82:98:2d:18:24:d3:cf:5e:3a:5b:cd:a1:b1:0e:2f:94:dd:46:
ca:ae:82:60:0e:6b:84:37:df:11:e8:89:26:49:13:b6:bb:d5:
db:13:e8:a2:58:7c:e8:f8:5a:40:0c:c6:a9:ea:58:a2:74:f3:
e2:51:2f:78:99:3d:de:5d:be:83:e6:55:c2:eb:d6:ac:85:52:
6a:73:ed:0c:06:9b:f6:d2:32:9d:f0:35:a6:b8:1b:14:53:a9:
23:63:9c:b2:a3:af:de:b4:f4:06:c4:d9:db:13:9f:9e:14:09:
ef:01:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:08 2025 by rpki-client