Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: /WeCKZCaM9W0zNzsu3u/FnIZTKdURYDPZDK5ouDPITQ=
Subject key identifier: F8:16:D3:E2:5F:1C:07:2C:E1:81:15:A9:E0:5F:F6:79:E5:B9:A2:9A
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 019A7112E5DF2E67D791AB3BFA80ED29CAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 167B
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: 4QFZ4ESvqfgbQJ78Tnt9QianqFZgBJRskEfn84z9H5w=)
2: oqdpV3Xk0NT7skwENXjSQjVV8BM.roa (hash: 16NskiWXB3ABFUN6srz9/Gadxy8aqe8x+NDzXv8hAB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e5:df:2e:67:d7:91:ab:3b:fa:80:ed:29:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=f816d3e25f1c072ce18115a9e05ff679e5b9a29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:1c:21:92:de:bf:2e:76:91:9d:0c:86:5f:
74:7e:1d:d8:aa:6c:e7:eb:78:65:3c:5f:95:9a:c4:
31:fa:e2:4a:1b:d7:d8:39:7a:32:27:f1:f2:71:a2:
95:38:d2:b2:28:29:55:4f:8b:03:b3:c2:7f:0b:e4:
dc:5d:8c:6e:32:17:29:dd:7b:64:4e:99:d0:0c:b2:
a6:d1:4a:a7:b4:ec:6b:6f:60:fe:ff:a5:99:15:1e:
50:ab:35:4b:83:9c:bc:85:87:4c:99:ad:81:78:4e:
24:a3:d3:aa:6a:2a:7f:00:ab:76:6f:d8:6b:a8:54:
92:45:78:12:8b:b5:ea:43:42:67:54:f7:de:90:6c:
79:3a:9c:53:ea:18:15:0c:a4:2f:96:f2:18:44:d6:
f9:d1:4c:ea:bb:d3:29:c5:5b:3e:36:cd:8b:87:ad:
36:54:ae:cb:21:00:78:41:a6:7f:c0:cb:14:7e:84:
56:1b:64:f8:16:ac:4d:fd:f9:dc:80:6a:eb:ad:86:
a0:27:7f:82:39:e7:7c:51:dc:6f:99:04:c9:d7:a1:
cd:55:3c:bf:a6:79:16:5c:99:28:c9:9e:f8:bb:e6:
e2:e6:24:85:6f:47:b0:b1:88:76:0f:b7:95:b1:8a:
49:32:e1:a2:7c:c3:0c:4b:9f:33:5b:f0:92:da:66:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:D3:E2:5F:1C:07:2C:E1:81:15:A9:E0:5F:F6:79:E5:B9:A2:9A
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:0c:09:35:be:78:5c:33:c7:07:f7:28:7f:86:16:64:5d:
ff:fe:68:53:05:12:99:3f:ee:24:c8:00:71:bd:16:cc:ae:bf:
fe:2e:7e:80:35:a9:d9:15:95:f7:98:9b:e1:ab:f1:6e:8d:bf:
82:11:40:36:09:2e:48:bf:1a:b2:57:3a:ac:35:90:b5:71:65:
d4:4f:07:fc:80:60:73:3b:18:d1:50:8a:e3:4b:cb:cc:15:9e:
09:b6:b1:d4:11:50:a4:c3:7a:a3:6e:44:a3:43:68:86:12:79:
54:06:fa:67:3c:50:8c:d7:83:d7:62:3a:eb:9a:ad:67:01:8c:
00:5e:b9:f1:18:16:cb:5c:c2:fc:96:73:9e:0d:16:67:51:ba:
f5:5e:76:2d:eb:e1:04:de:41:26:e7:43:35:ab:99:31:ef:39:
cd:fe:e4:e8:ec:f0:33:8d:06:3f:b3:d9:36:c6:37:97:a1:af:
03:20:08:1f:a5:ca:cb:de:52:af:e6:67:55:5c:27:b5:9a:79:
c2:72:64:2e:d7:1e:26:b4:8c:0f:dc:b8:6a:42:a7:fb:a8:83:
4e:7e:f4:df:09:51:14:92:3a:cf:ac:c2:f9:23:09:9e:df:ea:
31:4e:fd:70:9c:9c:37:b5:3d:38:67:1a:6d:95:d3:b8:e4:c6:
a3:77:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:45 2025 by rpki-client