Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
File: gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft (raw, json)
Hash identifier: smZI4ka+GTviXm+Q/qSLjjdzCOixaZMcAT43msGamjI=
Subject key identifier: D9:45:88:EF:C1:C5:20:CF:38:44:1D:2D:C3:1D:9D:03:6F:BD:77:D3
Authority key identifier: 80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
Certificate issuer: /CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Certificate serial: 019A706E7D7C9FB66F334AA3A3791B4D77C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
Manifest number: 19
Signing time: Tue 11 Nov 2025 01:01:20 +0000
Manifest this update: Tue 11 Nov 2025 01:01:20 +0000
Manifest next update: Wed 12 Nov 2025 01:01:20 +0000
Files and hashes: 1: gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl (hash: s44ou1ZvLU8wOfUyVqWJN9M4FB+7CLmDJUVtO/Rmzgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:7d:7c:9f:b6:6f:33:4a:a3:a3:79:1b:4d:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802d2f8505e2baeedf7e050d27942f54ac6a0a56
Validity
Not Before: Nov 11 01:01:20 2025 GMT
Not After : Nov 12 01:01:20 2025 GMT
Subject: CN=d94588efc1c520cf38441d2dc31d9d036fbd77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:08:82:03:b0:bd:62:ef:ac:ec:90:08:c2:
d6:47:b9:78:6a:a6:5b:ef:5c:27:6d:16:99:29:6c:
6f:77:45:6d:d4:9e:93:43:90:7a:c4:a8:3d:ff:ef:
8d:03:75:9e:06:40:e0:bf:ba:e0:2b:6d:1c:42:20:
96:35:b2:d8:fa:0b:0e:33:ed:44:7f:49:13:19:4a:
38:aa:b5:eb:6e:bf:9c:32:ad:a9:37:6d:83:07:44:
b1:24:9a:24:a4:06:d0:58:b0:5d:d3:d4:68:c5:07:
30:4b:22:57:7f:cb:38:56:6b:83:30:43:9f:2b:13:
01:bf:5a:11:bb:1c:8b:32:ca:72:3e:96:cd:60:4b:
8d:3d:e7:84:54:d6:08:fb:ee:4e:d3:14:92:7e:13:
3f:92:f6:3c:98:3d:26:12:e6:13:ba:64:78:72:a9:
62:cb:a6:af:8a:90:3f:6a:d6:e3:d5:b4:ed:1c:3a:
18:5f:60:d6:56:7c:36:16:9e:89:c8:4a:9a:08:b8:
d6:32:96:bc:5c:6c:ce:e0:65:4b:e7:5f:81:c3:b8:
b0:b8:68:ed:eb:f9:5f:b2:b2:7c:25:f1:08:e8:11:
9c:3e:d3:fe:fb:74:97:9b:22:87:b0:37:2d:94:49:
c9:91:75:64:29:8e:52:67:b0:4f:d0:6a:dd:b7:70:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:88:EF:C1:C5:20:CF:38:44:1D:2D:C3:1D:9D:03:6F:BD:77:D3
X509v3 Authority Key Identifier:
keyid:80:2D:2F:85:05:E2:BA:EE:DF:7E:05:0D:27:94:2F:54:AC:6A:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC0vhQXiuu7ffgUNJ5QvVKxqClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ca7d80-b3a2-49dc-999b-ad201f1eb194/1/gC0vhQXiuu7ffgUNJ5QvVKxqClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a9:ef:86:e7:cb:1d:fc:14:91:87:13:de:c9:f3:49:a2:36:
a3:05:81:6b:a9:43:59:b1:a2:e8:9e:59:b3:e7:7c:32:44:4f:
e0:e1:b9:07:1d:97:5f:6a:3f:45:d6:42:6a:8d:b5:43:54:67:
84:76:9a:0e:0e:74:7f:d0:42:da:2c:c2:06:ce:32:1c:c8:5e:
d3:2e:47:70:b4:10:3b:2b:f2:81:87:90:32:23:3b:60:51:95:
1c:c4:04:36:36:c5:3b:62:c8:e1:80:bf:4d:58:5a:a1:cd:0d:
3b:a4:5b:25:9b:40:f2:f3:68:13:30:5f:2a:04:df:f6:00:9e:
ce:16:38:52:32:fc:e8:98:18:1b:15:2a:bf:2f:21:f2:21:21:
ee:40:f0:8c:73:64:66:f6:d1:29:41:9e:c3:9f:61:d1:4d:6e:
62:dd:7b:de:bf:d8:b1:6c:9e:30:8b:41:f6:b2:c2:d5:ee:31:
21:c7:4c:9a:94:96:1e:8f:df:23:65:9e:91:d3:8b:5b:d8:ac:
79:74:a6:5a:80:a3:48:d8:ad:67:a1:7a:94:95:20:69:f1:27:
0e:61:1b:90:a4:d3:0f:b9:ec:ec:ab:2e:a7:6e:20:a0:7b:f8:
25:6a:4f:c6:ff:38:be:5b:87:84:0b:b3:e8:bc:02:b5:3e:c2:
b8:72:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:52 2025 by rpki-client