Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: hZ2RmGogynPMCCy5tB1YTLqGLOq5okCKdtTe1U5BdcY=
Subject key identifier: EF:3A:71:08:E1:2F:40:0E:30:57:FD:DA:33:71:0D:DD:60:26:FC:3C
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019A725C71AB618901F0FDE830600857F2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: 6UAGpTy43fEtaWlmV2knUVr7O3hJZZQoX3bnYkAS8lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:71:ab:61:89:01:f0:fd:e8:30:60:08:57:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=ef3a7108e12f400e3057fdda33710ddd6026fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:98:59:af:a5:21:90:45:aa:aa:cf:44:8c:
ae:48:78:9c:ce:4a:c2:4e:3e:b2:c0:5d:c1:69:fa:
1b:9a:01:67:17:cc:34:5f:39:0e:97:16:fe:4b:91:
28:a1:a9:bf:f5:6d:04:5d:18:0c:25:2f:00:d7:c8:
63:ee:45:cb:6d:19:33:a3:f5:72:1d:51:db:ed:be:
57:8e:fa:10:01:5e:be:9f:26:47:7b:71:91:27:f9:
d8:ca:27:d5:5d:d4:17:2f:ae:ee:19:75:8b:fe:a7:
5c:e0:f8:a6:59:c6:cb:63:2b:72:ce:1c:e0:3c:8e:
71:c2:79:97:9d:06:9d:9a:67:ea:05:a1:22:fa:eb:
35:6a:9f:a9:17:98:41:80:f2:b3:aa:c6:79:d9:86:
e9:ce:e4:24:9c:27:df:2a:12:13:24:98:07:25:e2:
bd:c9:30:30:ee:88:0d:8d:87:28:18:e2:dc:25:31:
bd:58:33:3b:5b:03:80:d3:46:72:f6:06:5f:77:35:
b8:de:fe:ad:6a:bc:e5:e4:34:ac:f2:74:1e:a1:cb:
2a:6f:65:79:7f:2d:79:ed:c1:7a:f6:48:6a:e5:39:
e1:e3:a4:d9:e7:07:37:4c:df:a3:2d:23:10:b5:35:
a0:24:9d:7b:33:b3:a0:cc:bb:d5:fe:3d:4e:2a:4f:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:71:08:E1:2F:40:0E:30:57:FD:DA:33:71:0D:DD:60:26:FC:3C
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:5d:44:bd:03:9b:6e:37:e9:a0:f3:de:23:62:84:ec:8d:
c6:b7:27:b8:92:a5:cb:2d:0d:37:58:7c:b7:8f:78:3d:4c:a5:
27:5d:30:1b:8c:43:49:12:63:2a:ae:82:c9:73:82:58:06:a0:
b7:95:fa:4b:2f:af:95:7d:31:70:b3:34:27:48:6e:f3:3a:28:
6b:8f:e1:db:4d:eb:71:3a:e3:a1:92:93:68:6a:8c:34:22:7c:
fa:e1:55:a5:89:14:48:de:06:bb:e3:2c:85:06:8f:3a:5a:cf:
85:d5:cd:06:3a:3e:e3:cc:84:1a:74:cc:9d:d2:3d:a4:3a:34:
8c:2e:10:a2:29:4e:6c:bc:6b:bf:c8:b9:57:5a:1d:02:46:18:
f7:68:66:7e:ae:ec:7f:b3:27:3e:91:34:a8:c7:4b:8d:0c:3f:
97:49:be:90:8b:98:49:d4:03:96:fd:2a:8c:9e:bc:5d:89:98:
e3:2f:7c:69:ba:ed:c1:fe:6b:c6:36:38:b9:38:98:91:e6:96:
4e:f3:d5:7f:34:ee:5a:c5:fb:3e:98:61:90:f7:87:2f:89:9a:
12:27:ce:84:a8:92:45:53:eb:0c:38:01:be:9d:b2:98:d1:7e:
9c:ea:3d:8f:82:4a:27:6b:d1:1e:e8:0b:26:c7:e9:7d:3f:6d:
cc:ba:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:13 2025 by rpki-client