Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: RT8xnyiHEiSf7lUk8/rHKcZxxUk//grf9gfHvgDFgR0=
Subject key identifier: A2:9B:F6:57:EB:11:C7:26:F2:85:AB:B3:1A:E1:86:CF:33:03:80:87
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019A722612E6AD08CA092305E46A95E0EE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 07CD
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: PmznQGCH88bzsnWByXqNKOjA9DX9aPp+MBNKGSZwTJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:12:e6:ad:08:ca:09:23:05:e4:6a:95:e0:ee:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=a29bf657eb11c726f285abb31ae186cf33038087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:dd:d7:4b:04:e9:4d:86:7a:31:2e:33:b2:
ab:76:d1:c7:fc:f0:63:1e:e2:d3:3e:a4:d1:fa:e0:
cf:cc:a1:a8:4f:c5:91:3d:b9:d5:0f:ac:1b:e9:2a:
b2:3e:31:be:5e:35:6c:76:f2:82:31:a6:7d:b5:17:
5f:23:d4:4a:cb:3f:c6:3c:c2:94:c1:43:dd:a2:df:
4a:b9:63:8e:b2:5d:fa:0e:7d:75:20:46:ac:f7:a4:
12:de:2c:a4:5c:53:c5:4f:56:39:58:67:7c:64:b9:
07:5f:4f:22:7b:dd:7d:5d:4f:7d:c1:5c:05:bd:de:
7b:24:09:34:a7:06:30:26:45:ad:78:4c:09:7b:50:
ab:19:ac:8f:17:52:d4:16:59:2f:13:1a:45:51:3b:
33:e6:8d:f0:d0:7d:78:2c:31:31:84:2a:50:d5:ad:
8e:30:19:03:4e:7f:ab:f3:eb:bd:b1:ae:83:4c:37:
8a:a0:d4:f2:a2:70:76:7a:e5:74:08:5c:59:9f:81:
34:8c:6b:3f:66:9f:c0:e2:ac:9c:fb:9c:98:21:d4:
51:94:63:0a:88:30:c1:1d:e6:f1:74:24:82:45:c6:
1a:b9:cd:25:64:8e:d6:4f:4f:a1:e6:68:ff:68:e8:
e1:ae:42:e8:81:54:c6:75:11:50:1c:5d:4d:47:01:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:F6:57:EB:11:C7:26:F2:85:AB:B3:1A:E1:86:CF:33:03:80:87
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:cd:db:ec:58:19:46:7e:2f:d3:17:f7:38:3d:15:2a:a7:
d7:44:64:2f:39:16:e2:ee:7d:a0:e9:35:71:27:e9:a4:17:3c:
93:c1:ed:66:e0:70:2f:ac:50:94:9c:6f:7e:14:24:93:5d:4c:
a1:83:df:9c:ef:36:cf:8b:5c:75:05:55:01:9e:71:47:80:59:
00:06:44:67:2e:4c:e5:df:16:66:7e:27:15:06:b8:62:be:4a:
1a:03:8e:e5:4e:9e:ea:74:10:4d:22:37:81:74:7a:da:ce:61:
33:1c:cb:d1:df:74:0c:03:b9:a8:2b:aa:92:74:21:2a:02:32:
8d:bd:33:f4:50:86:2b:d4:39:c5:47:33:57:5f:ac:e9:57:be:
1f:79:9a:ea:32:d4:63:89:7a:eb:5b:38:6a:0e:01:64:6e:95:
23:d3:10:e8:e6:b3:bc:02:61:f2:43:92:28:82:2d:91:65:4d:
c7:73:c4:f4:22:08:ca:da:1e:a7:d4:89:05:15:14:21:47:b8:
da:3e:74:21:97:5f:8c:14:62:1d:42:7a:30:7f:dd:fb:50:18:
60:7b:dd:9a:ff:62:09:f1:39:7a:68:d4:d5:4d:78:8c:1c:57:
69:49:63:4d:4e:25:14:8f:17:9c:20:35:22:96:a8:fc:cd:3b:
93:dd:05:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhLmrQjKCSMF5GqV4O4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjBjOTQzNTEwNjZlYzA2ZGViZmFiMmJjYTlkZmFlZDQw
N2U2OTgwHhcNMjUxMTExMDkwMTI4WhcNMjUxMTEyMDkwMTI4WjAzMTEwLwYDVQQD
EyhhMjliZjY1N2ViMTFjNzI2ZjI4NWFiYjMxYWUxODZjZjMzMDM4MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nnd10sE6U2GejEuM7KrdtHH/PBj
HuLTPqTR+uDPzKGoT8WRPbnVD6wb6SqyPjG+XjVsdvKCMaZ9tRdfI9RKyz/GPMKU
wUPdot9KuWOOsl36Dn11IEas96QS3iykXFPFT1Y5WGd8ZLkHX08ie919XU99wVwF
vd57JAk0pwYwJkWteEwJe1CrGayPF1LUFlkvExpFUTsz5o3w0H14LDExhCpQ1a2O
MBkDTn+r8+u9sa6DTDeKoNTyonB2euV0CFxZn4E0jGs/Zp/A4qyc+5yYIdRRlGMK
iDDBHebxdCSCRcYauc0lZI7WT0+h5mj/aOjhrkLogVTGdRFQHF1NRwEn7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKb9lfrEccm8oWrsxrhhs8zA4CHMB8GA1UdIwQY
MBaAFIJgyUNRBm7Abev6sryp367UB+aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQt
ODQ2NGE4MTE0MTgwLzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84NmNkOWEtZTczMi00ZmY1LWFlNDQtODQ2NGE4MTE0MTgw
LzEvZ21ESlExRUdic0J0Nl9xeXZLbmZydFFINXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrrN2+xY
GUZ+L9MX9zg9FSqn10RkLzkW4u59oOk1cSfppBc8k8HtZuBwL6xQlJxvfhQkk11M
oYPfnO82z4tcdQVVAZ5xR4BZAAZEZy5M5d8WZn4nFQa4Yr5KGgOO5U6e6nQQTSI3
gXR62s5hMxzL0d90DAO5qCuqknQhKgIyjb0z9FCGK9Q5xUczV1+s6Ve+H3ma6jLU
Y4l661s4ag4BZG6VI9MQ6OazvAJh8kOSKIItkWVNx3PE9CIIytoep9SJBRUUIUe4
2j50IZdfjBRiHUJ6MH/d+1AYYHvdmv9iCfE5emjU1U14jBxXaUljTU4lFI8XnCA1
Ipao/M07k90Fvg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:14 2025 by rpki-client