Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: 5Kzgu3kp6PtKyvQDGxtG8xFy24Yi7jLP1RQrLg0LZmA=
Subject key identifier: D4:EC:4A:FC:14:47:AB:9F:65:AE:B5:CF:FE:44:45:54:BF:7B:9C:4D
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 019A72934441480FC4F313B5248B5796C325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0CBC
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: K0Lw+j5IL2Fn7Kw2Aq6PXBM2GNvQXTotzxvlzSTRcO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:41:48:0f:c4:f3:13:b5:24:8b:57:96:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=d4ec4afc1447ab9f65aeb5cffe444554bf7b9c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:a4:d1:9f:b0:4b:4d:c6:2e:5c:ed:e4:45:
48:42:7b:1e:23:65:38:98:c6:f8:f4:17:8e:20:0b:
20:37:ed:90:5a:ff:12:9a:d2:e8:3b:fb:2d:90:d2:
19:9b:18:a0:ff:c0:9c:36:8b:91:d1:39:40:dd:3b:
d7:ff:f1:44:2b:d5:65:8b:8b:55:90:f7:32:6f:39:
e5:c1:8d:54:50:65:71:bd:35:1b:c2:9b:8d:e6:c5:
5a:1e:5c:96:5f:66:e9:52:35:f2:81:fb:d1:cf:12:
42:f3:9f:ea:f6:3a:6c:b4:36:24:0e:1e:c4:e8:96:
56:c1:7b:32:27:70:a2:be:a3:1e:22:28:8c:9e:09:
06:ad:57:1e:a2:ca:e9:3d:c2:cd:e6:07:02:39:08:
de:b2:19:bf:34:16:07:19:2b:a2:74:f8:5c:57:3f:
59:92:e5:20:58:52:ad:06:b8:cb:4f:cd:83:5c:3e:
46:61:06:50:1d:f7:47:6e:9b:7f:ad:c3:8e:62:d6:
cd:ba:20:07:c2:0e:1c:84:5f:7b:09:46:5d:ec:30:
93:43:62:13:99:e5:c3:ce:15:53:13:28:5f:e0:02:
10:23:95:11:77:4f:6b:2e:f7:fc:e0:6c:58:70:39:
9e:ea:c5:c5:b5:c6:af:1e:00:24:61:1b:81:4a:3a:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EC:4A:FC:14:47:AB:9F:65:AE:B5:CF:FE:44:45:54:BF:7B:9C:4D
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:b7:9c:83:6e:cb:e3:16:95:e3:0a:bf:a9:7c:5d:d2:10:
54:e5:3e:14:7b:4a:f3:0b:92:e2:4c:10:90:14:1c:a8:be:44:
96:f8:ea:7c:8d:00:db:3b:08:ac:4d:46:b8:f8:cd:64:8a:0b:
29:fe:b9:09:9b:6b:67:68:a0:5c:52:39:a0:27:d6:5a:a0:14:
c2:7d:f5:19:d6:16:d4:a9:03:99:ba:be:c6:54:92:c0:a9:26:
22:f5:57:ef:45:34:47:9a:ba:c1:c4:1f:40:f6:2e:d5:46:36:
a2:84:88:75:4a:10:97:c0:54:e6:5e:c9:3b:e5:fc:33:43:13:
89:29:8f:1b:d2:09:25:c1:f1:6b:30:b7:21:2e:d7:bc:8f:b5:
fe:1e:2e:63:ec:76:35:01:7d:84:f6:af:53:f1:1f:0e:91:c4:
60:0a:ab:bd:18:3c:e6:23:0c:53:87:77:26:39:3b:17:46:b4:
d9:b0:7f:a4:6b:d2:f4:ab:2e:e4:da:93:9c:72:c8:95:51:fa:
2e:63:7d:2a:fb:3d:05:a6:eb:50:d4:98:a2:5e:03:72:2c:bd:
f9:ce:18:08:b7:7b:ee:0f:4e:46:85:0b:aa:9d:4c:4d:0b:5b:
c8:19:57:cb:cc:f0:d7:43:88:92:05:c2:16:b4:3a:bd:f2:15:
1b:fa:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:14 2025 by rpki-client