Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: mKddX3n5RQU3NyGy5o3PFyuaAuBTemOf8IFD0NEwWHc=
Subject key identifier: D7:C3:F3:2D:14:A5:7E:69:81:2E:36:AD:FB:CE:C3:6D:0F:D2:81:62
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 019A725C8B536DD9C66350508E3CB1CC0EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 08CA
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: EZ01kBnw8mZc2tU0T3630d2esFtZ3sXfNvxbLf/WXQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8b:53:6d:d9:c6:63:50:50:8e:3c:b1:cc:0e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=d7c3f32d14a57e69812e36adfbcec36d0fd28162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:d0:10:b0:30:c9:8d:70:c9:c7:f5:7d:4b:
55:4d:dd:65:f8:32:11:65:95:2a:06:e5:0d:a8:d2:
50:16:01:5a:e8:80:84:b2:8b:57:38:3e:06:32:a3:
d4:99:a4:00:8d:41:9c:09:3c:ab:82:d2:80:9d:bb:
ad:08:5f:69:e8:0b:10:e9:92:31:9c:95:11:12:7c:
b4:d7:5e:34:d8:69:e4:1f:c0:ba:6e:86:ef:23:8c:
b9:72:bc:80:30:1b:df:56:10:ed:b0:be:94:1c:98:
65:a2:f3:a9:61:7f:63:3c:b1:1e:90:43:37:9e:00:
f5:df:1c:ce:37:1e:80:8c:4d:dd:ec:79:59:4b:02:
2c:12:02:0e:a8:9e:6d:97:bd:52:65:b9:3b:6f:61:
c4:54:e6:13:06:2c:ed:8f:a8:73:81:55:b0:9d:d2:
5c:7f:85:97:07:fb:37:e4:81:61:ca:c5:23:68:9a:
78:2e:f0:b3:27:31:6f:0c:83:35:c2:a1:47:cd:76:
39:57:22:81:70:51:cf:c2:93:2f:ca:2c:90:e9:f2:
e1:65:7f:1b:70:2e:d9:5a:6d:1c:99:63:f6:33:54:
72:07:84:c2:3b:aa:1d:e6:34:37:64:bc:0a:72:aa:
2c:14:31:5b:e7:1f:e8:23:0b:2f:fb:88:50:bf:58:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:F3:2D:14:A5:7E:69:81:2E:36:AD:FB:CE:C3:6D:0F:D2:81:62
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5f:36:9b:67:aa:fe:bb:f2:36:dd:ef:e4:29:df:04:81:60:
33:b8:54:cf:ac:a3:eb:d2:5b:01:da:6a:e5:be:a7:aa:48:b0:
eb:a0:85:cf:28:49:49:94:29:02:fc:c9:cc:57:43:f1:87:df:
dc:c8:2f:0c:a0:ec:4f:5d:17:2c:5f:6d:8a:09:24:28:20:af:
c5:36:96:b0:1a:9b:0d:47:cb:e3:b1:07:6f:1a:82:6f:0d:fa:
33:29:f2:a9:5f:38:dc:f1:5c:23:f0:5d:b4:ed:43:b6:ca:50:
3e:44:2b:a4:af:7f:c7:0c:e7:95:e7:70:44:c2:84:56:5d:67:
15:a9:72:19:02:f6:be:7f:0d:8d:d0:fb:a5:92:fa:fa:07:5f:
be:f1:24:f8:3d:cc:31:2a:b7:48:0c:57:df:b0:e1:d2:1f:d9:
a3:0c:84:9b:83:a1:71:ea:8a:48:04:a9:6f:6b:8a:f1:ee:98:
ea:9c:23:61:9d:f8:59:5c:5c:dc:32:13:6b:3d:fb:c7:43:5a:
09:a8:5f:7a:62:5c:f6:d0:28:21:ee:5c:32:14:56:ce:1b:ca:
7c:ff:f1:e8:5b:48:24:43:5d:fc:1c:99:d8:22:32:f8:a5:cf:
a0:db:ac:0c:df:3d:71:62:b3:84:7f:d8:ce:0d:3e:db:73:d1:
eb:f8:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:52 2025 by rpki-client