Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: 7IOH6o+I/7Ky44IoZbD7eLe8pne7/NFh4X2AXmEGX7M=
Subject key identifier: 38:77:DF:68:A4:46:73:57:C2:22:2D:63:2F:69:CA:00:68:DA:11:2A
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019A73014DB50567095C4D372F6644EA67B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:00:56 +0000
Manifest this update: Tue 11 Nov 2025 13:00:56 +0000
Manifest next update: Wed 12 Nov 2025 13:00:56 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: Pap4T4KhGpSZ4KckHE+cuJy5r9zjQ60Az1vLB6eDrlE=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:4d:b5:05:67:09:5c:4d:37:2f:66:44:ea:67:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Nov 11 13:00:56 2025 GMT
Not After : Nov 12 13:00:56 2025 GMT
Subject: CN=3877df68a4467357c2222d632f69ca0068da112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:09:50:f6:6e:88:90:d5:75:b9:0b:c9:f9:
df:8e:bb:8e:0c:eb:69:d5:ee:c9:1c:06:59:55:a6:
dc:c1:51:bb:25:3f:b6:b9:15:2b:6d:56:0c:fe:79:
d0:94:28:7f:54:b6:4d:03:34:e0:ac:38:3e:f3:24:
da:73:e5:be:7a:80:12:a2:07:b7:d2:ab:5e:67:d4:
96:12:a2:06:db:e9:11:bb:83:4d:51:18:fb:30:29:
67:7e:8a:5f:9a:81:6a:26:b1:64:3a:80:24:a9:ca:
3a:80:5b:a8:19:1c:ff:60:d6:30:5f:4c:f2:c2:bf:
50:ef:32:3d:22:3d:08:80:98:0d:4c:2a:31:94:89:
82:af:56:17:30:d1:f0:61:9c:fe:3b:0a:40:23:b3:
5c:32:66:00:c4:0b:8d:e3:da:0e:e3:42:d1:46:9d:
55:bc:75:54:fc:c2:d4:6f:43:b0:2d:ca:33:26:4c:
c7:97:c1:8f:7c:8f:b0:8e:8c:b5:94:9d:cc:7c:d0:
0b:2d:53:28:ee:f1:e2:30:bd:15:9c:6b:9b:cc:1e:
d7:6d:c1:c8:71:7d:23:bb:b7:70:94:24:39:18:fc:
fa:13:ba:4e:e0:2a:1b:37:ed:70:f6:db:fd:2c:c2:
cc:f5:d9:30:00:da:8d:45:cc:1d:a7:91:84:2f:82:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:DF:68:A4:46:73:57:C2:22:2D:63:2F:69:CA:00:68:DA:11:2A
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3a:10:12:50:65:33:21:59:65:86:8a:28:7e:d6:43:2d:89:
eb:24:65:a3:52:4c:cc:e4:59:ae:8d:46:cc:da:98:90:ca:8d:
19:2e:52:ec:ed:b7:26:ca:e7:24:8a:8c:61:ad:9f:f6:7f:31:
1f:0f:66:bc:b5:f5:a2:2e:0f:49:f9:3d:cd:bf:9b:5b:2c:6c:
a9:ca:00:c1:58:c1:13:4d:22:ae:8d:f2:80:24:17:67:e3:b4:
64:76:ba:22:a3:5f:52:9c:f3:4f:51:0e:f8:44:ad:c1:e4:ad:
a3:6d:72:a3:51:d8:1b:48:ef:e5:36:8b:55:96:8d:ba:4a:e7:
6b:71:98:c5:0d:f1:9e:d8:7f:26:7f:ea:eb:16:15:0e:e2:cd:
9a:dd:7c:5a:71:51:af:33:50:9e:81:df:b1:da:ba:25:4e:23:
ea:8c:0e:1c:d3:7e:65:df:8d:83:d8:b5:10:72:36:c3:85:5b:
14:d5:ac:b4:e5:1e:b2:65:de:38:3c:b5:4e:de:f2:b5:26:d6:
30:69:b9:f4:7b:ab:79:19:af:1e:4c:81:60:17:b8:e6:54:0b:
25:fd:f2:5c:3f:3f:3f:71:e5:64:e3:7c:19:52:8e:3b:d9:0b:
8c:66:25:de:7f:37:67:02:19:bc:be:bd:2c:d8:3f:a8:00:18:
a8:2b:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:43 2025 by rpki-client