Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: gwPycO6RcXSYO2GZaQ49IOuiz7TW1Big+95dWoxfi7w=
Subject key identifier: 97:36:29:B5:31:C2:26:EF:19:E4:DA:40:43:DE:24:E5:08:15:C5:65
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 019A71B8AD64770AEF76678B713DEA5A511F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: xw5TPl2y6LMcAc55o2Kzp7jjZWPVMY63veJFSlKYMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ad:64:77:0a:ef:76:67:8b:71:3d:ea:5a:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=973629b531c226ef19e4da4043de24e50815c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:94:71:c5:89:dc:e8:ba:e1:e4:62:6f:e6:
cd:b6:a8:da:07:e4:18:b8:7e:b6:3d:a3:02:be:aa:
33:42:83:16:69:2c:75:88:fd:c8:66:4f:01:d0:02:
8c:61:f1:78:f8:b6:fd:d8:0a:70:b1:c2:5c:92:b5:
7d:6c:39:df:cf:c4:e1:bf:85:14:17:ec:5e:b7:06:
13:d0:5d:9f:68:97:28:3b:14:62:bd:c0:43:8a:9b:
8d:00:f5:fe:b3:66:59:ba:d9:53:56:b1:a0:ed:9d:
11:eb:ef:73:43:5a:6f:47:c8:0e:21:52:f1:c5:fb:
5e:8f:ce:42:bf:cf:97:83:63:89:67:3d:4c:d0:e7:
0a:eb:08:32:e1:ed:67:e8:df:0b:b7:8a:c9:3a:e2:
7d:bc:ca:fe:2a:db:60:07:4f:32:d7:a4:ee:f7:8b:
50:91:b8:d3:03:fe:17:11:a3:b7:f0:4b:a0:60:a1:
7b:aa:db:68:f8:2a:3d:72:e0:6c:af:c9:a2:19:df:
ba:23:1e:c4:4e:bf:e5:de:98:fa:f2:40:a9:67:dc:
3c:1d:f0:b5:3e:83:fd:9f:81:f7:da:86:8e:fb:89:
32:26:fc:2c:8a:31:74:4e:11:29:e0:40:47:37:95:
0a:3e:17:39:e4:f0:7c:cc:d8:56:5d:02:55:32:a6:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:29:B5:31:C2:26:EF:19:E4:DA:40:43:DE:24:E5:08:15:C5:65
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:4b:42:1d:79:d2:5b:8a:7f:ae:93:d7:d5:a4:0a:85:ff:
2a:de:f1:64:4b:f2:c0:09:34:ce:65:86:9c:42:10:eb:da:fd:
9d:c3:f8:ca:e8:1c:c7:35:db:66:d5:d6:79:01:12:e9:ab:50:
ef:b1:31:4a:ec:24:0b:f8:c7:48:9f:65:69:06:ed:70:3e:da:
11:fb:6f:c2:72:0d:d4:cc:c5:f1:1a:73:4d:98:b9:6e:54:91:
b2:7b:15:31:46:a2:4d:28:4f:5d:2c:dd:4c:54:45:ab:15:3c:
9a:97:93:74:49:5a:cb:7b:4b:05:93:3d:7d:4e:55:c6:ff:ad:
b4:3e:49:2e:29:c7:84:0f:9e:a7:24:de:b2:b9:58:2a:4d:cc:
04:f1:09:e4:aa:12:60:33:8d:44:e0:b7:55:30:ed:f6:0f:ec:
a1:d6:31:fb:6e:95:ba:f5:ca:80:bf:53:8e:be:86:9c:0b:e5:
eb:5c:ea:e4:98:7f:c9:b3:e5:25:24:35:4b:b8:b1:70:b2:99:
8a:dc:d1:f5:d2:b1:af:03:b6:19:eb:66:d2:1c:6a:19:7f:5d:
f3:97:f7:19:1c:8b:63:78:f2:7b:79:58:1e:20:9b:c1:e6:f5:
53:1a:e6:c9:6b:96:06:7c:3d:f2:bc:26:8c:91:4d:d5:5d:67:
a3:75:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:49 2025 by rpki-client