
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: LRRK3LFADxPc4Q+w9guc8YJaniqf9neZQ5y/PipQ1Tc=
Subject key identifier: A5:DA:DB:9F:D8:6C:48:A9:F3:C6:A6:72:09:A5:D6:DF:BA:42:6E:F8
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019916F65981154B5FD1D13D4FC8C9975AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 04A2
Signing time: Thu 04 Sep 2025 23:01:07 +0000
Manifest this update: Thu 04 Sep 2025 23:01:07 +0000
Manifest next update: Fri 05 Sep 2025 23:01:07 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: tqe3lYo0ph4UeHzEg9DFGVcLMAwd/oAav560PucQoZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:59:81:15:4b:5f:d1:d1:3d:4f:c8:c9:97:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Sep 4 23:01:07 2025 GMT
Not After : Sep 5 23:01:07 2025 GMT
Subject: CN=a5dadb9fd86c48a9f3c6a67209a5d6dfba426ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:43:c3:6e:7d:1d:19:2b:59:57:6e:2d:8e:
c1:75:0f:f1:67:c0:66:d8:6a:39:1a:d0:33:57:18:
42:c2:14:66:62:4f:aa:47:88:82:05:d9:60:0b:17:
92:56:d3:02:e8:af:11:62:57:cb:c4:2d:29:9a:f9:
fb:80:6e:27:4b:39:04:b7:64:6f:7d:63:5a:87:fe:
71:6d:91:e9:c3:26:e6:44:52:52:b4:96:ef:a0:bc:
b0:01:1c:0e:60:e1:59:e2:3e:2a:47:b0:e8:c6:e1:
85:3d:e8:50:b4:ac:ca:b8:d0:72:b6:f8:fd:9f:89:
1c:42:98:c0:09:44:c8:55:67:32:6f:ee:f3:a2:8c:
a8:70:d1:3c:e6:f6:14:ad:03:f9:a6:82:bd:32:1a:
9b:14:b5:5e:31:ad:05:33:49:f8:3e:99:89:93:d6:
35:70:e3:28:c9:ff:3c:e3:e6:99:a3:6c:c8:9c:c2:
8b:8d:97:2c:77:ee:57:f7:33:fd:a5:83:6c:8b:7d:
2b:d1:c8:37:34:de:3e:a1:17:ed:0b:e5:2b:7d:bb:
b0:b0:ff:14:0e:b8:35:c3:29:ef:87:a6:a4:e1:a2:
f2:da:4e:4e:b2:73:8f:d1:6b:af:6d:56:f0:5b:ff:
87:62:28:89:d9:c5:6d:56:94:e6:07:94:e3:9a:79:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:DB:9F:D8:6C:48:A9:F3:C6:A6:72:09:A5:D6:DF:BA:42:6E:F8
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:11:49:7d:23:8d:2e:1e:ed:9f:f0:63:ef:da:ca:52:6e:
dd:14:14:a6:2f:03:c7:5d:67:51:b0:71:0e:d5:c7:a2:46:44:
08:64:d4:3c:20:a2:9d:aa:db:f1:70:76:42:b1:a8:8f:6d:8d:
c5:ee:16:07:0a:38:bb:a3:14:e5:11:b5:ec:66:9f:be:ce:77:
32:66:ab:15:f0:d1:3b:d7:8c:64:aa:75:8e:c4:67:2c:dc:dc:
50:25:b1:18:81:8b:18:26:64:13:7f:b9:42:96:67:43:7a:2b:
82:ff:80:7d:99:af:58:eb:55:ea:20:32:f0:18:ea:4c:ad:76:
d3:69:fe:14:a1:98:95:22:d9:5e:9b:1f:03:c9:a3:6a:85:cf:
14:43:52:42:f7:63:53:72:ce:46:7d:ad:55:7e:49:85:45:9d:
03:e6:14:7a:e7:33:27:a8:b5:35:a4:4d:65:61:60:4e:db:42:
73:1b:c5:98:69:7b:0f:ec:83:a0:81:10:76:6b:e2:e3:cf:a4:
eb:59:70:46:5c:3c:53:70:15:a8:7d:77:39:76:d1:03:1c:34:
8f:4a:86:f0:52:d1:c6:39:c0:18:ea:bc:f0:d6:2d:ad:22:66:
ba:96:21:94:7a:de:71:26:98:23:0f:d5:ee:9d:fd:2b:88:f2:
47:3a:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:27 2025 by rpki-client