Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: QkRnwPpTYZcDWEA7kECirB2gsA9TTOYAGP2BicX2Fek=
Subject key identifier: B4:DB:15:B3:9D:BF:C9:A7:A7:3F:3B:9A:67:F1:38:CE:B6:2E:F0:A5
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 019A71B7FCB6F26EEC24EB363BCC59BF1983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0E62
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: YPyRJwiOhjYAAPQBHmbi0lw22sxMH3gMl2BDZZFJ138=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fc:b6:f2:6e:ec:24:eb:36:3b:cc:59:bf:19:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=b4db15b39dbfc9a7a73f3b9a67f138ceb62ef0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:52:1a:68:97:14:55:70:e9:fb:82:3f:76:
8e:9b:91:c0:0f:ad:f6:b5:31:a7:66:df:cc:d0:bf:
f2:3b:51:8b:56:a6:99:c8:c6:50:d7:10:5a:23:0b:
64:e9:fa:03:10:04:a9:4b:a1:b0:74:a5:5e:f8:80:
c2:43:db:21:0e:13:a2:f5:10:5f:ea:4f:9a:7a:eb:
50:ea:b2:50:0a:38:36:3c:33:93:b0:97:75:c8:0d:
5c:52:e9:50:53:80:94:f6:71:2c:46:98:7a:50:59:
2a:79:07:2c:a9:4d:55:de:9a:01:78:37:fe:09:b7:
43:e7:30:49:72:7d:c2:f9:ee:b9:db:ac:e0:3f:13:
ac:6e:a2:b8:13:53:23:f3:85:34:f3:f8:4f:02:84:
ed:95:03:27:ec:a0:ba:00:f7:46:67:cc:49:54:66:
c2:33:b4:f0:29:6e:f4:c6:21:da:0a:03:48:a1:44:
57:5a:e5:d2:9d:8a:d1:99:22:6e:87:94:ef:89:d2:
6f:82:01:04:a3:e0:d6:48:e8:70:b8:e0:aa:75:3a:
77:3e:c5:50:b9:08:a3:09:93:ce:f4:52:1e:3c:0d:
cb:6d:14:ac:be:e1:ae:ff:c6:6f:18:48:b7:e6:59:
eb:12:ef:c3:74:bf:00:39:61:3d:49:59:52:00:d6:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:15:B3:9D:BF:C9:A7:A7:3F:3B:9A:67:F1:38:CE:B6:2E:F0:A5
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ea:91:b0:4f:5e:b1:26:7e:2a:b3:ff:dc:12:3d:ed:8f:5d:
f7:00:34:87:be:25:b1:c8:45:90:6d:96:b6:1f:ab:34:59:94:
58:7e:cc:46:47:5f:70:3e:3a:78:62:1b:ee:00:a7:eb:f3:7c:
c2:0b:6f:b9:11:e5:90:43:18:cf:b1:98:c5:8f:0a:17:34:e8:
15:0e:3d:86:2f:13:75:b0:ae:65:c3:76:c8:4c:7e:e9:43:9d:
c4:3c:ce:3a:a8:3f:a2:81:cd:f3:a9:af:79:76:06:86:73:44:
24:5d:06:7f:c7:f5:59:61:c5:91:44:d2:4d:97:54:11:e3:4a:
0b:3b:49:a9:a8:c7:ea:50:c9:cf:e9:d3:5d:bc:6c:9f:d5:d7:
a1:95:80:ab:48:97:2d:19:d3:eb:8c:7c:a3:e5:2c:1e:76:c5:
34:82:0a:26:52:e2:12:52:e9:e5:f3:a2:89:c5:d9:38:67:51:
61:3e:90:37:b2:95:e2:b9:16:9c:aa:5f:42:74:c7:b9:94:c9:
1f:23:19:ea:f9:e4:cc:66:5b:f9:ba:53:6c:90:34:1d:93:9e:
6f:52:2c:e0:a9:61:6d:b2:32:3d:97:bd:1b:ae:e6:a2:ca:4f:
55:29:ef:f1:9a:c9:8b:86:0a:61:8f:39:07:64:b2:49:09:44:
3f:86:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client