Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
File: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft (raw, json)
Hash identifier: 4KntEtIGhuLO0Gi527jcZG4wuL4US1bsaZXe0p80EYU=
Subject key identifier: 2B:D2:4E:A5:3A:C9:10:B4:AF:0D:FA:EC:99:05:48:45:70:C8:A8:B0
Authority key identifier: 80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
Certificate issuer: /CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Certificate serial: 019A70DC3672A9BC58A5CC1486731935D850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
Manifest number: 4A
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl (hash: FiE9qodX+3DlfGNteNW0cUoCiA3Ti29LSgY4AEPT92I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:36:72:a9:bc:58:a5:cc:14:86:73:19:35:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eacf62b34a4efc5b2fd524e592167c6744101e
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=2bd24ea53ac910b4af0dfaec9905484570c8a8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:78:aa:a7:e7:27:ba:fa:8e:a8:ef:19:01:
2e:d7:e7:5d:34:1a:5c:95:b5:1a:bc:94:56:70:ea:
c9:3d:2b:7b:01:49:ea:93:eb:55:fa:b7:b1:00:33:
2a:56:78:dd:62:b7:54:d6:92:50:19:a2:85:1b:1d:
04:27:ed:3d:77:8e:b2:e3:05:b2:cb:e0:61:26:17:
c3:6e:81:73:7e:f9:48:02:44:18:e0:6b:86:14:5a:
81:ac:30:f7:f6:c7:b8:fd:3b:0e:bc:0c:2c:d8:20:
ba:4b:14:27:a6:5d:0a:44:13:e0:5b:cb:d3:42:b1:
8b:60:91:e3:a3:31:32:7e:06:17:76:90:45:32:e6:
44:5e:b8:9c:71:6b:81:04:2f:30:90:1a:b1:58:75:
61:e0:14:59:e5:d0:6a:9c:13:7c:44:8f:21:ef:5d:
0b:37:b7:e6:c9:dd:2d:46:0f:6c:fd:c7:48:aa:27:
7e:ba:7a:f2:dd:ee:46:0a:a4:4e:b5:1d:1e:54:0b:
0b:18:75:5e:ca:a2:b1:da:8f:cb:73:6d:fc:95:cf:
20:49:41:2d:8a:e1:be:b0:ec:ec:62:74:d4:36:25:
32:08:d8:2a:b8:af:df:f9:81:3e:3d:f7:53:69:b0:
e3:c7:8d:7d:28:35:61:50:aa:85:27:c3:3c:08:4c:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:4E:A5:3A:C9:10:B4:AF:0D:FA:EC:99:05:48:45:70:C8:A8:B0
X509v3 Authority Key Identifier:
keyid:80:EA:CF:62:B3:4A:4E:FC:5B:2F:D5:24:E5:92:16:7C:67:44:10:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/47c16d-7c4f-4ebd-9b00-7128f853a406/1/gOrPYrNKTvxbL9Uk5ZIWfGdEEB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:23:93:82:39:46:1e:97:ec:fb:c8:3a:83:5f:a5:ba:18:9b:
e6:d7:41:6a:99:c6:24:53:fb:64:8a:ea:ba:0b:79:38:20:a6:
53:44:70:5f:f3:77:39:af:5e:9e:3a:37:29:4d:67:68:3d:9e:
27:45:bc:e3:9c:c4:8f:7b:b8:21:a9:e2:10:df:d0:40:36:e8:
05:f9:42:b8:dd:f7:0d:28:97:27:a6:f7:4b:73:e2:b7:a0:f6:
2c:71:96:60:35:44:3e:4e:08:10:8e:e5:ef:87:ce:9a:c2:f3:
81:f4:50:24:01:b3:fd:3a:7d:a9:a5:20:f9:e5:d7:6f:6d:b8:
14:2e:52:dd:77:6c:4d:c1:0a:f8:95:66:4a:73:8e:29:14:4f:
47:43:d9:71:12:9a:4f:f1:24:04:74:55:20:e0:f8:57:2e:06:
8e:7e:52:2e:bf:eb:d1:db:10:b9:e8:79:e6:5a:9d:59:62:83:
8c:c1:1a:a1:21:43:a4:98:58:33:5d:5a:9d:3a:17:46:fd:b6:
fa:7c:41:89:1f:0d:cf:a1:e7:77:d3:da:0d:7d:a7:31:5b:cc:
65:28:b0:76:7e:8c:4e:c0:95:13:e1:11:48:19:f8:93:59:fb:
37:3b:fe:be:54:30:16:27:09:71:25:3d:de:ce:5b:0d:cb:78:
17:36:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:00 2025 by rpki-client