Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier: wNB9UsZg6DUGA3/ZDLERxjUxREiU5//p78oVfuMAOtg=
Subject key identifier: 24:A0:4A:58:8F:21:23:D9:EE:5D:94:E7:FF:AE:9F:0D:4D:ED:C7:2B
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial: 019A71B8C26FC9CAFA39459C566FF40A69D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: exyknrCtkkc93lzEaLyyCNIUUbOeVmt4jjzqELPpON4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c2:6f:c9:ca:fa:39:45:9c:56:6f:f4:0a:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81689572b200ba4879381c8574274265592a14ab
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=24a04a588f2123d9ee5d94e7ffae9f0d4dedc72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:4c:65:96:a2:f5:d8:e2:a0:a0:02:36:29:
32:1b:a1:3d:e4:fa:0b:0b:73:14:af:d8:0a:5b:5a:
1c:cc:38:d5:8c:ef:7e:ce:34:ed:c2:3b:2a:6b:ec:
c2:74:38:bd:c6:f4:fb:47:be:bd:65:ee:8f:36:91:
7e:3a:0e:9c:bb:fe:ae:1b:bc:58:11:b5:a1:b3:f1:
bf:fc:ed:31:0f:f1:0b:0b:00:3e:e8:ec:13:e5:3c:
60:4c:f1:13:b5:65:df:fb:a0:cc:cb:df:79:94:bf:
3c:bd:0b:aa:1a:c1:de:a6:14:22:a6:72:39:86:3b:
d0:d8:ea:48:a2:3d:b2:80:c8:57:bd:fe:fa:b9:40:
c7:ee:61:b6:d6:b3:88:ec:55:f7:f4:1a:c1:4e:1a:
80:29:0b:32:16:e2:3b:7c:05:b4:2b:14:3a:b7:f8:
b8:13:5a:6b:84:ef:eb:24:37:28:4a:6a:dd:06:e0:
32:82:e3:72:98:86:37:4d:35:8a:74:cf:6b:0f:10:
5c:ee:82:b4:e0:8b:a6:b4:75:9d:2e:8e:31:e4:12:
7b:c2:c5:9e:8b:be:38:8f:3e:39:6a:ac:e5:6c:f3:
08:16:2b:81:a3:79:f3:84:b0:ea:42:31:7f:19:f4:
73:ed:e6:df:ba:28:df:55:15:8b:7f:7b:0a:1a:83:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:4A:58:8F:21:23:D9:EE:5D:94:E7:FF:AE:9F:0D:4D:ED:C7:2B
X509v3 Authority Key Identifier:
keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:ac:5c:9f:46:04:91:eb:1f:fb:6c:ed:04:37:85:5d:6c:
e3:06:ab:15:d0:47:f9:cf:f1:a0:2a:da:ce:cb:04:c3:31:dc:
61:1d:ae:e5:7f:f5:c1:5f:90:da:a1:c4:df:31:b0:7d:dd:78:
eb:b6:ee:89:cb:a5:cd:4a:f4:04:19:bf:ae:fd:9e:ed:a0:45:
36:e8:93:6a:ab:72:62:2a:43:24:c8:71:1c:e6:db:de:26:5a:
3d:cd:4e:6f:ec:bb:5a:9a:e3:0f:4a:fe:28:3c:45:c5:16:76:
73:26:f5:e9:72:1e:53:d3:91:2b:8f:c7:5e:61:18:c8:7d:fc:
9a:9c:71:bd:ca:ab:9c:cc:8f:e3:51:8f:c2:17:13:fa:a2:63:
89:93:7f:6a:e7:e1:87:82:c6:46:05:78:e4:cf:09:90:ed:1c:
45:34:1c:30:fc:52:02:5e:2a:cb:6d:a2:d0:5c:69:80:30:54:
e0:29:c0:19:3b:6c:f8:65:8e:95:ce:c3:e8:c5:c8:d2:c7:79:
de:65:80:96:70:01:64:36:51:42:57:b2:5c:43:4c:0c:1d:fc:
36:e0:62:cf:4b:0b:54:b0:43:88:4e:f0:91:83:c8:15:4d:fc:
22:3c:99:87:6c:3b:fc:d4:e4:27:8e:79:18:bd:47:f7:3d:77:
13:10:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client