Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
File: GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft (raw, json)
Hash identifier: aQdnwg2XAGxrnnmTH10fYuWlsjAsCcnUxg6wbhF6n7E=
Subject key identifier: CE:2B:91:BD:CB:20:8F:6A:6D:04:DE:C5:C3:BF:56:2D:34:68:40:49
Authority key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
Certificate issuer: /CN=1a66819ed62a71090cf437e4263012d4c035067d
Certificate serial: 019A72262F2DE9A7383C0500677D9B364F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl (hash: N2E6LEqhk2bqCj9ntQoRD5VoI1iuLoHkWMiGmtGQuKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2f:2d:e9:a7:38:3c:05:00:67:7d:9b:36:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a66819ed62a71090cf437e4263012d4c035067d
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=ce2b91bdcb208f6a6d04dec5c3bf562d34684049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:b3:7b:8c:fe:68:6a:49:07:c4:a4:52:96:
1f:41:41:42:66:be:81:9c:a1:55:9d:31:18:98:45:
90:4c:13:b0:b9:ea:e6:fa:92:4e:fe:39:50:ae:c7:
ab:a1:3b:0c:cb:16:2e:ab:d2:17:b3:17:25:6f:02:
4e:b7:33:20:65:1b:7f:f9:34:dc:5e:b9:ce:01:19:
fe:37:96:c5:49:14:41:9a:50:ae:7c:7b:e3:2c:fb:
da:6f:68:7c:17:e9:fb:62:3f:cf:e5:b9:b1:8f:c0:
7e:70:4b:20:67:4d:a3:fe:aa:cb:92:24:67:0e:3b:
72:5f:0f:2f:cf:09:de:66:04:15:bf:01:ca:4d:5b:
12:dd:1a:cf:b6:92:c0:2c:07:6e:97:91:6e:a9:51:
47:0b:9e:97:f8:82:cd:0a:cf:59:2e:0f:36:a8:97:
be:85:3f:7c:af:68:1a:35:8e:92:77:ba:64:a7:cb:
21:57:6b:30:0d:1f:13:26:ac:13:8a:96:d2:c0:46:
31:8c:ec:c6:6c:26:4f:4c:4b:bd:f8:af:ed:91:a2:
2c:ad:32:d7:9d:70:3d:12:5c:a8:21:72:b2:f9:1a:
13:11:8e:cc:96:26:97:be:c8:c1:08:c3:79:34:01:
23:ab:68:10:62:6f:e2:f4:59:b9:5a:f8:18:c2:89:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:91:BD:CB:20:8F:6A:6D:04:DE:C5:C3:BF:56:2D:34:68:40:49
X509v3 Authority Key Identifier:
keyid:1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:eb:91:e3:ab:30:45:a3:7e:23:00:a8:31:cd:71:e2:cf:
15:05:ff:d7:d7:3f:05:f9:8f:f7:95:e4:65:f2:e6:7a:89:99:
aa:06:e7:b0:1e:7d:cc:1d:29:ec:18:77:ad:a5:d8:10:01:90:
e7:e1:0f:ca:30:98:8d:60:03:4c:3a:74:29:41:75:c9:f6:da:
51:fc:2b:62:6e:02:3c:08:00:41:7c:69:97:1d:07:50:7b:6a:
5e:b2:6b:72:91:c0:c9:35:74:93:8d:c9:70:c7:17:45:28:f1:
db:a3:90:75:1f:ae:1c:86:27:e6:c2:31:88:76:bb:a3:6b:80:
47:9f:a9:b9:c8:6f:78:c0:1d:ed:66:22:58:37:91:a9:9e:c4:
30:d1:12:52:ee:eb:9c:3a:95:40:7a:2a:a8:98:0f:73:88:8c:
4c:1a:fe:81:d0:72:b2:9d:d0:41:46:3d:db:54:62:e0:48:1e:
c7:05:80:3f:f4:06:8c:5a:ef:2c:a2:03:b6:d8:3d:4c:5b:c8:
7c:c6:e1:56:4d:c8:8d:02:7f:1a:3f:51:0b:42:5a:b1:5a:4f:
d5:50:5a:b2:a4:63:67:a1:a4:50:df:8d:c2:1b:3c:83:cf:8a:
d7:d1:b8:ea:01:95:29:79:4f:f0:0e:52:0e:9b:b0:2a:ef:20:
a9:75:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:46 2025 by rpki-client