Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File: GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier: iGN67mti6cpLB3eSYlDN3LLHED52p8kAiGLnmklWCEk=
Subject key identifier: AC:27:C6:B4:DB:77:53:D7:2A:A6:41:FA:29:60:F5:43:CF:A3:5E:47
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer: /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial: 019A72266C1C2C9F4B4967AE3427C590238E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: 9Ig+G0g9kg21Zh6h/PMqPZJenpFCF8uBpE5BdqpAhu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:1c:2c:9f:4b:49:67:ae:34:27:c5:90:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=ac27c6b4db7753d72aa641fa2960f543cfa35e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:75:f8:d0:d3:24:33:1b:1a:d5:e3:a4:04:
43:37:5e:ba:e1:e4:52:b1:95:52:6c:d1:27:df:2f:
ee:ce:7d:a6:47:12:d7:6c:99:87:0c:f1:8b:a3:4b:
ba:06:06:b6:76:75:ee:c1:6d:ec:76:84:4d:45:de:
53:78:98:be:27:9d:59:a1:48:93:2d:ac:2f:58:e4:
63:2c:9a:66:65:a2:e6:a1:73:48:6a:30:fa:b9:22:
04:e3:0d:eb:ce:ff:e1:4f:8b:26:81:b9:fa:03:82:
a4:34:4f:46:b3:74:ea:ce:99:c2:fe:8d:0f:a9:be:
5e:57:b1:6d:e8:93:eb:30:1b:97:f1:e2:db:fa:bc:
dc:de:99:f6:c5:af:6a:02:24:28:34:b2:14:ed:bf:
70:d2:e2:a5:6b:6e:1a:c4:a3:ec:f7:7c:6d:9c:92:
d6:06:d1:f1:01:21:ca:c7:74:49:47:12:c1:a8:07:
33:9b:2e:92:43:53:b0:8e:45:5b:6b:f0:84:f4:45:
65:c3:4b:69:fa:67:01:58:51:ff:73:be:6c:8f:ca:
24:0e:ab:a2:0e:ce:c9:30:0d:82:54:11:86:bd:d5:
9f:1e:e8:a3:fb:36:e1:ea:63:fd:fd:ed:c8:55:1f:
85:49:0b:fa:f5:c8:54:b9:d4:8b:ff:fb:d6:6d:d9:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:C6:B4:DB:77:53:D7:2A:A6:41:FA:29:60:F5:43:CF:A3:5E:47
X509v3 Authority Key Identifier:
keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:7a:b0:65:00:6d:d7:8b:8b:51:09:26:fe:ab:e4:64:52:
2b:d7:af:68:53:fe:18:70:42:a3:7d:60:43:67:88:e8:99:dc:
82:55:9d:ee:b6:f7:c3:c8:e3:d1:49:36:50:61:14:3d:80:e1:
6e:6e:e4:03:1d:5e:6a:73:ee:d1:a1:1a:39:70:f4:85:27:fe:
8c:67:61:51:cb:c2:11:14:2e:26:c3:ea:d9:c8:9c:32:fe:83:
8b:6a:4b:a8:fa:62:8e:25:60:ad:fd:45:c4:65:e6:a9:21:da:
a7:96:fb:72:8e:de:d6:62:e6:f2:98:95:73:73:0e:88:41:4b:
9c:6a:f0:43:6e:a9:dd:ac:14:f3:83:34:6c:6a:ef:1c:9a:b8:
f6:ab:dd:66:9b:81:c5:65:b4:7b:03:31:97:10:87:56:88:9b:
52:d7:a3:04:2b:e0:22:28:5b:ea:f2:c1:54:2c:a7:d0:9c:91:
18:bf:42:fd:7d:c9:c0:67:4c:33:4e:ef:1c:c3:37:81:d3:7f:
3a:18:d5:a3:f6:69:a1:83:40:38:dc:2f:35:47:71:7c:bc:70:
17:33:24:9d:ad:76:15:6b:f8:d9:9a:b7:53:13:1d:c1:9a:cd:
0c:af:e5:c7:0a:6b:55:d4:3f:0e:58:27:43:73:d5:4d:85:d1:
03:69:11:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmwcLJ9LSWeuNCfFkCOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NzdiMTlkNDg0N2ZjM2Y0OTVhZjkzNmM1YjFhMTkyOGM5
MTI3NDgwHhcNMjUxMTExMDkwMTUxWhcNMjUxMTEyMDkwMTUxWjAzMTEwLwYDVQQD
EyhhYzI3YzZiNGRiNzc1M2Q3MmFhNjQxZmEyOTYwZjU0M2NmYTM1ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtB1+NDTJDMbGtXjpARDN1664eRS
sZVSbNEn3y/uzn2mRxLXbJmHDPGLo0u6Bga2dnXuwW3sdoRNRd5TeJi+J51ZoUiT
LawvWORjLJpmZaLmoXNIajD6uSIE4w3rzv/hT4smgbn6A4KkNE9Gs3TqzpnC/o0P
qb5eV7Ft6JPrMBuX8eLb+rzc3pn2xa9qAiQoNLIU7b9w0uKla24axKPs93xtnJLW
BtHxASHKx3RJRxLBqAczmy6SQ1OwjkVba/CE9EVlw0tp+mcBWFH/c75sj8okDqui
Ds7JMA2CVBGGvdWfHuij+zbh6mP9/e3IVR+FSQv69chUudSL//vWbdnfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwnxrTbd1PXKqZB+ilg9UPPo15HMB8GA1UdIwQY
MBaAFBh3sZ1IR/w/SVr5NsWxoZKMkSdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2Mzgt
YWM5YTkzMTcxYWE1LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jMTIyYTctNTcxMi00YmJkLWI2MzgtYWM5YTkzMTcxYWE1
LzEvR0hleG5VaEhfRDlKV3ZrMnhiR2hrb3lSSjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1F6sGUA
bdeLi1EJJv6r5GRSK9evaFP+GHBCo31gQ2eI6JncglWd7rb3w8jj0Uk2UGEUPYDh
bm7kAx1eanPu0aEaOXD0hSf+jGdhUcvCERQuJsPq2cicMv6Di2pLqPpijiVgrf1F
xGXmqSHap5b7co7e1mLm8piVc3MOiEFLnGrwQ26p3awU84M0bGrvHJq49qvdZpuB
xWW0ewMxlxCHVoibUtejBCvgIihb6vLBVCyn0JyRGL9C/X3JwGdMM07vHMM3gdN/
OhjVo/ZpoYNAONwvNUdxfLxwFzMkna12FWv42Zq3UxMdwZrNDK/lxwprVdQ/Dlgn
Q3PVTYXRA2kRfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client