Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: biTBuMTyRXtrW/Cgg26Dj6fmUihgPb5Ny4qSmcElGY0=
Subject key identifier: 5D:DC:87:E5:79:7C:E6:6F:D9:33:7F:9C:BB:2E:D5:8E:4D:3B:B0:56
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 019A72261D029471F9F07714ADBCBE1F9292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: EQqVtG7ze6Ja8qzFYDGRg0WCbIB94d/uU1ZzVQpuwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1d:02:94:71:f9:f0:77:14:ad:bc:be:1f:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=5ddc87e5797ce66fd9337f9cbb2ed58e4d3bb056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:7d:15:aa:18:aa:4e:42:14:0a:bd:83:6e:
7d:24:5c:e5:07:26:5a:12:aa:a5:f1:a0:96:b9:59:
ad:a8:f3:f2:fc:da:82:90:b0:fd:c1:93:3a:57:d5:
2d:a6:fb:a3:01:84:1e:d1:7b:bf:bb:16:f9:95:bb:
0a:a0:0b:50:bd:25:93:d4:aa:77:38:d0:5b:7c:76:
b9:23:a6:25:c8:dd:b7:02:9f:0d:61:13:82:06:d8:
3e:cd:40:e0:41:c1:f4:fb:64:d4:35:f8:88:c6:ea:
ac:3c:46:51:23:2a:f5:74:dd:48:96:92:58:f9:5f:
df:56:45:b8:ca:8f:3d:46:a7:c6:bd:25:6f:a0:c1:
86:a1:c0:d0:6b:eb:67:30:13:86:c5:df:e2:5a:18:
18:41:12:a3:da:c1:d2:16:39:68:e2:6a:42:cd:ad:
21:07:7c:f5:7d:da:2e:ad:5b:7e:21:56:f5:fc:72:
6e:b0:c5:f2:a0:dc:a5:b9:00:a0:ae:e9:d3:ac:56:
e4:d6:c5:04:2c:79:87:33:a4:85:33:e6:1a:ef:c0:
b4:e2:99:0b:18:43:db:aa:8e:f8:50:f9:de:f9:63:
3e:92:4a:af:f7:e2:17:71:1b:89:f4:af:b6:e6:0e:
88:bb:fe:0f:05:7e:d0:9b:5e:ef:53:38:66:6e:6b:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DC:87:E5:79:7C:E6:6F:D9:33:7F:9C:BB:2E:D5:8E:4D:3B:B0:56
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:69:ac:05:73:0f:51:6e:25:1e:d1:03:1f:80:9a:94:dd:3b:
2b:82:2a:0c:85:44:ed:68:5f:a0:49:f2:d6:9f:fb:da:8e:a6:
26:9d:f7:c0:2f:20:29:2c:70:fb:1b:b3:e2:c1:91:08:ae:06:
39:67:0e:10:c1:f0:c7:3a:49:43:cc:15:16:de:e2:f5:8a:6f:
22:0e:96:5b:4c:38:18:05:db:c5:7a:87:c1:19:2a:95:7d:1a:
88:5c:37:e5:12:ed:f7:e9:91:02:0f:8f:aa:ca:9e:70:67:db:
bb:f1:05:68:96:63:a8:48:98:d8:a2:7b:ca:32:46:a5:9e:bd:
7d:60:7b:47:2c:d6:be:4f:b6:6b:8d:a1:6f:c0:da:0b:2c:fa:
42:b9:07:21:18:74:55:c3:8f:52:4c:07:64:13:15:dd:89:f1:
11:12:d1:cc:3c:05:b7:ab:fd:ab:c3:ff:b9:93:69:fe:bd:5e:
98:c1:dd:27:6d:ab:66:48:5a:0e:3d:53:1b:4b:81:9b:06:bf:
92:80:27:45:03:55:e7:01:e2:21:5d:d8:e1:93:22:22:4a:14:
b5:c9:82:c5:db:8f:18:cc:98:db:17:74:5e:71:df:34:c8:6b:
09:24:c9:d5:31:b0:84:b6:e4:ad:e3:1c:c2:5d:b2:0e:f1:8b:
62:7d:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:03 2025 by rpki-client