Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File: _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier: kw2VCWDNvjElHq8NWEuBmZeQUg/m97rHW0Pdcq7oGfM=
Subject key identifier: 8A:D8:05:33:16:37:F3:46:C9:1E:98:E4:00:47:5B:74:36:17:A7:99
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer: /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial: 019A71B90CBC68868008E33E1E4EC796B934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number: 020B
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: mq5s2OWMApVjaF3kkGH+nakHONoTn21gZP4zfrbzTKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0c:bc:68:86:80:08:e3:3e:1e:4e:c7:96:b9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=8ad805331637f346c91e98e400475b743617a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:1b:f6:0a:16:ac:bd:05:fa:f8:8f:fe:4c:
79:90:85:e9:ff:11:28:f9:d7:0c:4c:c3:97:42:0c:
ce:05:a0:af:75:4f:2e:77:45:50:70:88:a4:24:97:
34:78:de:48:28:9f:0d:fb:8a:b1:8c:15:4c:d3:aa:
38:3b:71:39:82:6b:68:ba:65:81:fc:50:9d:52:f6:
ed:16:47:7f:ca:8f:89:5a:01:7d:42:50:22:1f:fa:
4a:b7:49:d8:1f:b0:52:99:32:38:c2:aa:a6:ba:fc:
5d:74:a5:18:17:41:1d:2d:9f:d9:d6:f2:93:da:86:
3e:c5:f6:e1:83:64:2c:0a:c4:17:dd:4f:84:c0:94:
81:d1:6d:48:3d:06:6e:b6:27:8c:b5:30:a9:b9:dc:
46:8c:dc:75:f5:5a:27:ac:2d:89:ab:49:2e:6d:64:
5d:3a:12:50:3f:be:68:6d:8c:4c:f9:ad:b8:b9:07:
f6:24:15:7e:3e:a8:d0:58:b1:13:f2:a1:99:7c:b1:
15:4d:88:1d:bf:33:dc:28:84:d3:45:5f:db:27:37:
d7:6f:55:0f:55:69:d9:d8:56:6c:48:5b:24:e7:49:
7f:0c:1f:48:54:b9:68:2c:08:03:36:e6:25:d0:8b:
51:0f:6f:4e:2a:88:0f:56:6a:89:2b:2f:8a:da:2c:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D8:05:33:16:37:F3:46:C9:1E:98:E4:00:47:5B:74:36:17:A7:99
X509v3 Authority Key Identifier:
keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e4:9e:c7:ed:96:75:68:6f:6a:0b:ac:7b:1c:86:b7:73:a9:
24:3d:66:2a:08:82:b3:be:fa:45:9c:96:ec:72:e5:37:e3:c0:
66:e5:22:50:c2:de:db:3d:28:38:e9:c9:b3:62:fe:b4:dd:51:
73:a4:90:dd:e5:7a:2f:23:36:20:e2:f9:fe:4b:ae:2f:bd:7a:
27:00:12:07:83:6c:fd:d3:cb:1b:7b:d0:2b:b7:13:03:a5:05:
ee:96:89:77:df:d7:f4:fe:5c:4f:03:82:0a:54:44:a6:11:35:
11:4f:98:e1:5c:35:23:22:b8:bb:c5:5b:f8:36:6e:e4:6b:80:
20:52:ee:f1:06:0e:16:f8:d4:87:6d:3a:24:22:47:0d:b0:95:
2a:18:e4:36:77:d4:e8:91:6c:cc:e8:ee:a9:6b:6d:be:a0:c9:
c5:08:4a:c8:b8:9f:82:b7:a8:a3:26:9f:53:cf:2a:e9:83:3b:
10:c0:a7:c8:80:d0:d9:e8:46:ec:7d:b9:d9:aa:85:d2:49:34:
70:e2:36:85:65:ce:fc:d8:ae:86:36:11:80:bd:8e:b6:e5:57:
df:86:e4:cc:05:4d:93:4c:91:e4:52:83:2e:65:fd:7c:be:9e:
42:84:89:07:05:de:de:4a:50:cb:12:41:ff:94:3e:7f:fd:8c:
d6:16:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client