Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: z7mkTXEMkcmmFaPTtFDGDKLzbNbI718piiKvvDZbV2w=
Subject key identifier: 77:2A:13:F6:1B:D4:D2:C3:4D:37:3C:20:AB:27:8E:2F:B6:8F:FE:3D
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 019A2AE798CACAACF062621E7472B0EA99BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0611
Signing time: Tue 28 Oct 2025 13:00:11 +0000
Manifest this update: Tue 28 Oct 2025 13:00:11 +0000
Manifest next update: Wed 29 Oct 2025 13:00:11 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: SADz7aMWs7BtwxDw9pttwbiUgtazbihENjou2bFZe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:98:ca:ca:ac:f0:62:62:1e:74:72:b0:ea:99:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Oct 28 13:00:11 2025 GMT
Not After : Oct 29 13:00:11 2025 GMT
Subject: CN=772a13f61bd4d2c34d373c20ab278e2fb68ffe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:fc:19:59:2e:ff:0b:cd:8b:fc:b2:a8:28:
ee:62:5e:78:c2:d8:bc:e7:80:95:a2:db:7b:c6:27:
89:de:a7:fe:47:83:1e:43:59:c3:29:78:5e:cd:a4:
e0:39:ba:b2:1c:b3:88:71:66:2b:1d:6d:29:93:a0:
75:e8:93:88:4e:1f:f4:e7:61:8c:89:39:e9:f6:fd:
82:19:0b:4c:7e:90:9a:84:f0:a4:44:d9:ab:1e:71:
21:97:d7:98:ef:41:84:48:51:47:b0:ab:d5:49:4f:
d9:47:01:12:9f:ef:22:29:6e:7f:e7:bf:b7:65:38:
45:99:a3:e3:7e:ba:3a:aa:85:f2:76:69:6d:c6:da:
d2:e8:05:5f:b4:ec:d5:2a:b9:81:92:e0:3e:f2:10:
ae:93:0c:cd:ef:09:b3:a2:9c:c6:36:aa:3f:1b:4e:
f6:26:1f:7d:71:94:a6:51:d4:14:1d:73:f5:00:d4:
58:07:7e:f9:74:00:e4:c5:44:90:80:08:8a:60:34:
59:f3:70:67:99:63:80:f7:fc:46:3f:b9:6b:31:4e:
0d:6c:bc:46:46:89:58:0f:c7:6d:f7:79:18:62:8a:
de:b1:46:83:b4:a1:27:72:b5:fc:ff:2d:68:1b:87:
13:8f:d2:0a:cc:3a:36:f7:06:94:e8:19:b5:36:03:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2A:13:F6:1B:D4:D2:C3:4D:37:3C:20:AB:27:8E:2F:B6:8F:FE:3D
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:90:ad:1f:a5:e6:59:6f:6f:d9:f8:46:1f:6a:97:a6:e4:00:
bc:1f:31:13:d1:9e:6b:a3:57:03:2b:0b:4d:a4:a3:2a:a2:da:
f0:d9:87:d8:ae:2f:69:b6:b6:36:8c:93:c2:0c:bb:bb:d2:03:
c8:66:fc:5f:06:4d:33:1b:57:8e:c7:17:f1:1c:4c:3b:47:d4:
3d:70:06:dc:05:ec:c6:a2:f5:84:b1:7e:57:22:41:b0:e8:26:
cc:80:b1:db:37:82:bb:93:c8:ae:06:e4:1d:7d:04:af:1f:f8:
5e:13:d6:80:7b:70:b8:bb:14:fd:4a:79:3e:4f:14:20:9f:c0:
5d:85:1c:b1:f3:b0:a3:23:38:2b:ba:c0:0b:4a:e6:29:ea:bf:
b8:92:cb:9b:58:00:ef:7a:0b:3d:f8:ac:37:dc:ed:96:3d:fb:
e4:aa:cd:2d:fb:4b:ce:06:58:37:1a:7f:fb:c3:2d:7f:38:af:
6d:ba:05:63:56:c2:0d:ba:2d:01:d1:f2:4d:2e:09:1e:69:2a:
31:35:f0:9f:6c:dd:54:7f:4c:49:7d:ce:27:26:96:90:01:24:
52:34:d8:66:80:19:87:f6:1c:99:96:d2:fd:a0:47:51:46:37:
1f:64:6f:28:2c:27:92:ef:87:0a:a6:f1:d2:84:f1:02:5f:8b:
02:3e:d7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:14:39 2025 by rpki-client