Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: RZKduAMAHogN54evha21Tewo51I81AjBM1YU1tYR3WQ=
Subject key identifier: 30:A7:66:76:0B:6B:B9:0D:5B:79:6B:CF:64:57:DD:40:47:6D:B2:A4
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 019A71B80853758274AAB9360EBFBBE75BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1538
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: 7bUfBXi90YX2LtwkHTULMVplGOGjpsAC/o/teHafpUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:08:53:75:82:74:aa:b9:36:0e:bf:bb:e7:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=30a766760b6bb90d5b796bcf6457dd40476db2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:f8:b8:ec:6e:0a:00:c8:be:a7:b2:22:82:
66:9a:fd:28:f4:e5:c2:8e:e3:6f:be:1e:b1:52:cc:
9c:94:7b:24:5f:b5:94:24:7b:48:08:25:1b:cf:9b:
4c:62:fd:70:94:f5:2d:4a:36:f3:1f:9f:ec:ac:03:
82:cd:69:7c:d5:c9:f7:11:bb:13:ad:dd:d4:c0:65:
b6:1c:e3:80:c2:07:5a:ae:cc:88:ee:37:86:7a:96:
49:aa:cf:3f:b2:8c:aa:77:6b:42:f6:46:e8:22:2b:
71:dd:07:5a:87:70:8a:b5:74:21:6a:da:b0:09:31:
58:53:8d:0e:6c:e8:77:72:21:f3:4e:41:74:55:73:
1f:73:59:25:21:eb:0c:15:4d:26:62:f1:7b:73:cd:
fe:47:e1:e5:45:3a:b9:0a:91:db:39:37:45:b0:74:
67:20:f8:d4:1e:7f:3b:d0:8a:fd:35:26:e8:3d:ca:
e2:7d:db:8d:c5:03:a4:e2:3d:46:4d:34:7f:c5:92:
5f:97:ea:00:29:2a:9b:e6:72:48:d9:ad:97:85:b4:
f5:59:99:7a:ce:cc:ff:f4:2d:03:9f:35:82:be:f3:
34:ee:83:c2:29:b3:1f:8b:c1:e0:54:2e:e5:a4:d2:
99:42:00:aa:13:2e:fe:64:c0:5c:b1:60:d8:74:db:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A7:66:76:0B:6B:B9:0D:5B:79:6B:CF:64:57:DD:40:47:6D:B2:A4
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:af:97:b5:30:00:61:ea:bd:b6:45:2d:df:af:47:62:32:1b:
85:42:ae:ed:0f:cb:6c:5e:6f:0d:d4:a5:a3:dc:61:f0:3e:b3:
7c:59:31:bb:62:2e:83:6b:9b:dc:69:7b:f5:d6:ad:ff:15:1d:
d9:7c:91:3c:83:99:0d:62:b0:1c:9e:01:8f:a3:4b:ac:b0:20:
0b:44:c0:6e:28:18:4d:21:eb:ea:f8:07:37:92:ef:e6:aa:59:
b3:81:1a:1b:d9:34:12:b7:17:2e:9c:61:0f:ee:b0:8e:e6:e5:
99:b7:5d:da:d0:17:31:a4:41:15:52:f0:b8:d8:0d:61:1b:da:
06:42:30:fa:67:99:04:4c:0e:ff:40:94:28:be:53:43:b2:46:
a5:75:26:5b:2c:6e:3d:8f:46:24:6e:52:23:18:c6:bd:fe:ac:
aa:f8:86:5d:05:5d:0a:db:5c:eb:ab:ea:16:36:fc:86:15:ec:
b1:48:d3:61:37:08:cb:0c:a2:f5:2f:78:24:54:28:0d:0c:f5:
01:4d:ee:72:6d:86:ce:86:57:0a:44:e4:cb:fd:5b:a6:20:58:
52:6a:94:0b:05:31:5e:21:69:37:7b:3d:8e:ea:e8:9a:02:32:
84:fa:11:ef:c7:7a:bc:24:d9:56:58:af:9d:4a:05:e6:c3:06:
77:0f:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:53 2025 by rpki-client