Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
File: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft (raw, json)
Hash identifier: 7oRqjvdjKDaG8I2RFYtcM6RaUiRcBPGjcmw3wRuuuwc=
Subject key identifier: 10:23:AA:70:A6:26:FC:3F:A7:37:74:E3:27:4C:29:FC:E0:3A:A7:BA
Authority key identifier: 80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
Certificate issuer: /CN=80e7137d0d80586246c6aff496727b603d351692
Certificate serial: 019A71EEC03E2CFE352707EE649DBEACC9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
Manifest number: 81
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl (hash: Lc8fuSERJY5ogpoKjkLqWbnlLWEC92Dz1MW/w5NFT3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c0:3e:2c:fe:35:27:07:ee:64:9d:be:ac:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e7137d0d80586246c6aff496727b603d351692
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=1023aa70a626fc3fa73774e3274c29fce03aa7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:4c:6b:05:da:bd:ad:b0:31:a0:b6:bc:ab:
24:d3:4d:69:06:1d:c8:d9:89:07:f8:8b:0c:e7:d4:
3b:fb:3d:31:9a:e6:6b:89:14:d7:0c:d0:fc:c3:d6:
25:7b:d3:72:7a:d0:c0:57:59:2a:9f:40:d6:33:32:
6f:60:b4:43:17:b0:45:da:8a:29:f0:df:e9:c7:81:
64:79:21:9d:85:8a:93:06:58:79:ef:8f:d7:ba:8b:
72:87:8c:07:96:36:06:56:b1:1c:de:93:08:48:b0:
b6:42:f5:a2:f4:dd:00:38:70:12:db:4d:e4:4e:d7:
61:58:84:c9:46:ee:20:ac:68:24:d6:4e:35:54:db:
ca:b1:b0:79:a9:90:37:76:64:d6:76:4a:f5:ea:23:
d0:a2:99:db:5e:ba:88:2f:35:0d:a8:2e:17:fa:fa:
e8:5f:7c:0d:2f:28:94:24:d8:6b:f0:79:4e:d2:84:
2f:a2:6d:f7:d0:08:b6:fe:f4:7b:f9:20:3e:ec:69:
2f:ba:b1:1f:89:89:4e:24:4e:43:aa:d8:dc:02:c6:
b0:8c:36:7f:7e:4a:ff:9b:bd:29:eb:a2:21:b7:cf:
8a:d0:eb:07:04:8f:03:90:d0:94:c7:e2:3f:40:26:
ab:2e:d9:05:aa:45:33:df:d7:28:af:17:b4:04:c7:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:AA:70:A6:26:FC:3F:A7:37:74:E3:27:4C:29:FC:E0:3A:A7:BA
X509v3 Authority Key Identifier:
keyid:80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:53:37:01:e6:03:1c:48:e8:de:fa:a3:3f:1c:54:cd:df:85:
22:16:c7:8b:46:7a:16:38:a9:7a:84:e4:1d:42:0e:cd:4a:82:
3e:7f:cb:0a:cf:61:8d:1f:0e:0e:fb:6e:67:ba:72:39:87:17:
3b:72:1c:ec:2e:1f:68:22:ef:4e:b5:bd:5e:3f:83:f0:95:f7:
1c:04:d7:72:58:66:51:ab:e6:c6:a1:cc:d6:9b:6c:79:f3:8f:
d6:dc:7a:ba:a3:43:32:e0:20:8f:d2:30:30:4c:23:d2:85:fb:
50:49:73:32:4b:27:02:3d:21:1f:d3:4a:0b:f0:12:98:c1:fb:
f2:d1:f5:53:2f:ae:fc:ba:83:e0:a5:19:26:f0:19:8e:ab:09:
fe:e6:69:01:e8:be:8d:ea:81:9c:26:59:9b:ce:4d:80:ea:35:
c9:b4:d2:77:5f:32:51:53:26:95:f1:80:c8:f9:cf:74:4a:40:
10:98:fd:1e:bf:df:6a:04:c9:18:67:a4:ee:1a:8a:59:28:d8:
89:07:57:0f:ab:aa:20:5a:d5:0b:37:30:cc:eb:31:60:30:f3:
f7:ab:0c:c3:20:b0:49:da:04:77:6d:38:b6:9a:04:b8:8e:b7:
87:4c:ac:ff:91:36:ee:fb:0d:10:64:60:ff:ad:2e:82:26:ea:
15:e8:5e:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sA+LP41JwfuZJ2+rMm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTcxMzdkMGQ4MDU4NjI0NmM2YWZmNDk2NzI3YjYwM2Qz
NTE2OTIwHhcNMjUxMTExMDgwMTAzWhcNMjUxMTEyMDgwMTAzWjAzMTEwLwYDVQQD
EygxMDIzYWE3MGE2MjZmYzNmYTczNzc0ZTMyNzRjMjlmY2UwM2FhN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbxMawXava2wMaC2vKsk001pBh3I
2YkH+IsM59Q7+z0xmuZriRTXDND8w9Yle9NyetDAV1kqn0DWMzJvYLRDF7BF2oop
8N/px4FkeSGdhYqTBlh574/Xuotyh4wHljYGVrEc3pMISLC2QvWi9N0AOHAS203k
TtdhWITJRu4grGgk1k41VNvKsbB5qZA3dmTWdkr16iPQopnbXrqILzUNqC4X+vro
X3wNLyiUJNhr8HlO0oQvom330Ai2/vR7+SA+7GkvurEfiYlOJE5DqtjcAsawjDZ/
fkr/m70p66Iht8+K0OsHBI8DkNCUx+I/QCarLtkFqkUz39corxe0BMf9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAjqnCmJvw/pzd04ydMKfzgOqe6MB8GA1UdIwQY
MBaAFIDnE30NgFhiRsav9JZye2A9NRaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgt
ODJjODAyNjNiNDdlLzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgtODJjODAyNjNiNDdl
LzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlM3AeYD
HEjo3vqjPxxUzd+FIhbHi0Z6FjipeoTkHUIOzUqCPn/LCs9hjR8ODvtuZ7pyOYcX
O3Ic7C4faCLvTrW9Xj+D8JX3HATXclhmUavmxqHM1ptsefOP1tx6uqNDMuAgj9Iw
MEwj0oX7UElzMksnAj0hH9NKC/ASmMH78tH1Uy+u/LqD4KUZJvAZjqsJ/uZpAei+
jeqBnCZZm85NgOo1ybTSd18yUVMmlfGAyPnPdEpAEJj9Hr/fagTJGGek7hqKWSjY
iQdXD6uqIFrVCzcwzOsxYDDz96sMwyCwSdoEd204tpoEuI63h0ys/5E27vsNEGRg
/60ugibqFehebQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client