Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier: 7C+DasWI6RalwuSp3UAKzqi/vccv9DpZUq73G7YXla8=
Subject key identifier: D4:5C:66:7C:54:BF:E6:2B:F9:27:DB:E9:2A:36:D3:B9:87:27:74:68
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial: 019A71B8DF141CBB01F4D8907160404FB27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number: 04E8
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: gv5yqrvceDT9PiC2p4XhjC3XkvfbKcgVIYaKTHxFu1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:14:1c:bb:01:f4:d8:90:71:60:40:4f:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=d45c667c54bfe62bf927dbe92a36d3b987277468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:ed:dd:98:97:d2:e6:ea:e6:55:04:8c:53:
d5:13:48:f1:22:b5:8a:11:41:64:23:d3:41:c3:b7:
d1:d9:7f:99:a5:68:91:fc:a3:6a:e6:95:98:d6:a7:
ab:58:68:3d:1c:15:8a:30:b0:0f:24:e6:1c:0e:2e:
14:cd:d1:a7:c9:1f:20:46:1e:34:78:7d:3a:9e:6e:
4d:1c:0e:06:ca:3a:be:1c:94:5e:0e:57:29:42:75:
9a:f6:06:a8:18:d9:c8:8e:a2:3c:df:9a:47:ca:02:
e9:7b:df:17:76:81:6e:0d:8a:47:64:71:68:2f:b2:
d4:0f:25:a7:ba:ba:6c:10:54:0c:8b:80:03:5a:e4:
d8:5e:29:94:5b:33:60:fe:5f:a2:8c:0d:9d:2e:d4:
b6:b8:d7:e2:ad:63:17:97:de:cd:36:3c:3d:3d:c1:
82:f9:a9:fa:08:0a:fe:2c:4a:c8:2c:38:6b:c8:5f:
fb:9f:67:4a:bb:c6:91:37:6f:ee:2a:3c:12:fd:79:
7e:b5:f7:06:26:47:b9:0e:19:87:20:cd:77:b5:16:
cc:ff:a6:0d:f7:24:23:47:ee:1c:57:fd:77:f0:c7:
d4:a4:bd:80:02:be:f8:5e:a3:6b:b3:d4:82:ea:48:
11:4d:0b:5b:d6:c2:b8:22:e0:e3:ad:4e:74:50:dc:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:66:7C:54:BF:E6:2B:F9:27:DB:E9:2A:36:D3:B9:87:27:74:68
X509v3 Authority Key Identifier:
keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:54:ef:88:48:f6:80:3f:00:04:48:79:3f:c8:2b:56:af:bb:
87:96:a3:29:d6:78:f0:f3:ed:1e:7a:f9:8d:50:14:2a:10:29:
08:cc:ab:84:16:60:12:90:52:96:81:41:c0:5f:27:ae:8a:6f:
a8:ea:5f:55:f4:81:af:87:44:7a:c3:40:b3:23:72:54:5b:b0:
25:7a:8e:89:58:d3:f5:f9:4e:fb:8e:59:6a:eb:b7:1c:4f:db:
94:01:60:72:f5:8d:ec:0b:c7:09:90:7b:d8:0b:8b:5d:e3:e4:
c1:de:9e:aa:fe:21:9d:5f:38:23:5c:a1:c8:e8:c1:28:07:aa:
c3:47:b1:25:92:57:cd:1c:4a:6f:97:15:77:c0:e3:fe:0f:16:
b7:bb:62:74:d1:a5:fd:45:dc:6b:03:ca:d7:fd:95:bf:ae:ea:
0e:8b:e1:49:10:a3:e2:53:3b:9a:8b:7d:33:d8:84:4b:f8:a4:
37:1c:66:71:78:83:33:a0:49:79:b1:f1:7e:d7:db:8e:87:28:
ac:c5:c3:b8:3f:54:10:3b:5f:4c:a5:c7:d7:e1:1c:d3:93:f1:
e7:40:02:32:a6:10:98:7b:e7:c9:63:91:fe:0b:94:93:68:4b:
da:f7:ce:0f:6c:44:9e:3c:9a:ea:03:76:72:79:f6:ed:e3:21:
6f:3c:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client