Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: YyyQks12d4+KCtCkkUBBuu+FKz9DXXHvOJvFoigQVfc=
Subject key identifier: 06:7E:69:A7:C9:3C:60:B3:C0:A1:A8:68:08:6B:5E:95:78:41:84:25
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 019A722667EBD2394C84426BB6C3F1E54E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 068C
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: jKZPKwCsEZ/2OoUJwzAMRhAXUUVjH7J6CAZsNjYpjqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:67:eb:d2:39:4c:84:42:6b:b6:c3:f1:e5:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=067e69a7c93c60b3c0a1a868086b5e9578418425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:d1:fb:1b:ac:bd:e0:d6:56:10:48:82:06:
66:19:fb:6f:f2:56:d3:bb:96:e9:d9:58:e9:d7:80:
e1:6f:e4:c3:19:79:30:26:e3:7b:7e:4a:db:d2:c3:
ca:68:10:7c:be:da:5b:6a:e5:29:dc:1e:a2:e1:9c:
d5:52:b8:8a:66:12:99:2b:1e:b5:17:78:e2:57:e7:
ea:15:8d:13:83:01:1a:eb:e8:25:91:40:89:a8:5f:
a9:ee:a6:2d:e9:4d:36:05:c5:ad:c3:4d:49:fe:fb:
2a:6a:ca:5b:6e:0a:86:ae:7c:e7:87:d3:32:40:24:
27:9a:6d:16:36:a7:11:e8:2c:4a:d5:e6:00:31:03:
62:8b:5b:99:3a:84:bd:6d:d1:d2:58:b3:55:00:6a:
c2:aa:39:dc:20:cb:44:20:7a:80:28:e2:61:c0:e9:
d5:7a:10:68:83:e0:d8:77:a1:42:65:64:51:47:27:
da:a2:40:67:21:c9:ff:70:e2:6c:d6:e4:57:03:8c:
13:5d:be:f1:82:9e:57:12:89:67:1e:b8:97:27:09:
c4:a5:0b:07:6e:74:f4:df:09:6a:a7:1a:2d:ee:66:
84:27:ae:81:24:d4:aa:70:b3:21:cd:f3:a0:3d:85:
6e:96:ce:67:ce:21:31:98:88:4e:92:f3:67:b7:05:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:69:A7:C9:3C:60:B3:C0:A1:A8:68:08:6B:5E:95:78:41:84:25
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f4:d3:03:47:02:bc:8d:bd:c0:b9:ab:9b:f0:18:45:ee:f3:
63:d2:73:0a:07:63:2b:c1:8a:72:f9:b4:a7:2f:9f:0a:64:53:
a6:30:e8:5c:8e:fa:68:82:fa:e9:dc:27:d2:4a:6f:4b:17:f2:
6d:80:78:55:ea:32:55:b0:78:ac:0b:20:65:3c:86:f1:95:44:
73:9b:ad:42:29:a2:fe:d5:29:05:2b:44:f8:05:94:10:08:8e:
8e:7d:df:db:93:2d:06:95:eb:59:2f:eb:b2:a9:77:ab:c9:bc:
7c:01:2f:cc:d6:ab:7c:62:47:a8:e8:e0:73:d1:d0:4b:fa:47:
60:f5:3e:70:db:7c:ae:cd:e0:34:7e:61:9c:7b:04:bd:a7:30:
55:dd:96:cc:36:36:e0:55:aa:b1:8d:fc:23:20:ef:6b:96:c6:
87:09:1d:9b:23:77:ad:93:8f:ed:c8:a8:af:a4:d1:d3:4a:c6:
7c:50:64:cb:64:df:8b:24:45:37:ed:49:8b:0b:a5:bd:af:4f:
cd:d8:6e:55:eb:51:d8:d6:75:44:69:0e:b2:2a:e8:6a:bd:b1:
74:b1:f1:0e:61:a0:04:ab:f6:ca:d0:0e:20:fe:da:a3:08:a2:
ca:f2:0a:64:1f:51:9f:d1:b1:ce:df:c0:67:1c:3b:12:c0:4a:
85:ee:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:57 2025 by rpki-client