Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: OT7nRjsExanMqdFLSiN8dJQJ9ogk6TDDe/hNqNKmROA=
Subject key identifier: EA:9E:ED:22:99:8F:26:5F:8A:E8:7E:41:28:79:2E:50:24:FD:73:CB
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 019A725CE33E063A3B347E398A9727A593D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0FDC
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: 9KrrT15KZjwOFwArrZz12dPK9QF6f3FXco+Ju7OiXUw=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e3:3e:06:3a:3b:34:7e:39:8a:97:27:a5:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=ea9eed22998f265f8ae87e4128792e5024fd73cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:b3:af:3a:80:ff:7f:fd:fa:a5:c6:3b:1c:
bf:b0:24:2b:4d:83:e9:9b:5c:06:9c:34:20:68:2a:
66:88:4b:ac:77:ef:50:20:cf:15:28:dd:51:69:0e:
e7:87:16:45:f2:28:69:d1:e4:13:6a:6a:14:0c:43:
69:f4:f6:01:ba:d4:d4:ba:e3:0b:16:25:f5:31:c0:
e4:ad:03:5b:76:8d:22:0c:44:93:f4:00:0b:29:9d:
c4:45:49:fe:ff:35:68:f3:3b:67:b9:4e:7c:18:49:
d3:99:92:14:37:d0:ee:03:c9:4c:a0:b4:d7:74:4f:
42:ff:f4:2d:34:e9:be:b8:fc:c8:d0:b9:1e:cf:bf:
62:0c:51:a9:6a:b5:57:00:81:27:9f:e6:cb:d6:d0:
e3:a3:2d:c2:5b:82:35:b9:b8:cb:c2:f8:4b:6c:0d:
1a:81:4c:e5:f5:d5:67:41:36:8c:2d:66:7c:d7:62:
f3:a8:02:79:17:4a:ac:35:b7:79:a9:40:34:77:b5:
3a:a7:a9:30:83:c3:77:44:65:72:e7:5e:e5:46:0b:
7f:9a:b1:2e:dd:01:f7:56:07:dd:67:19:8d:d3:4d:
ba:53:42:12:c0:c7:ad:e0:c8:88:39:7b:2d:27:fc:
e4:eb:b9:9b:81:19:62:fc:7e:f8:4b:7a:84:e2:05:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:ED:22:99:8F:26:5F:8A:E8:7E:41:28:79:2E:50:24:FD:73:CB
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ed:30:8e:81:9b:17:68:22:58:d1:e2:9e:d2:f6:f3:37:7b:
73:bd:09:e7:6a:ad:80:41:41:79:11:7b:89:e6:8b:56:aa:92:
29:82:11:a3:6b:a1:37:fc:a0:ce:7c:01:5e:31:19:13:5f:b4:
c6:6b:41:18:eb:75:04:a9:21:f1:04:cb:21:10:45:df:6b:d5:
78:ed:4d:18:33:29:6f:95:cb:2e:eb:b7:f1:28:ad:c9:85:18:
d8:a0:8b:4a:13:3b:c0:a7:92:7d:f4:00:51:63:09:8d:70:e7:
c6:5e:b8:05:4a:45:49:05:6b:d9:5c:64:56:28:2d:42:32:0e:
d0:b7:c1:53:fa:35:34:ef:93:c7:71:ee:66:df:f8:f3:2c:12:
3c:65:88:66:0e:d7:fb:7e:61:14:fb:17:ab:71:40:0d:64:a3:
7c:9b:0c:fe:20:d5:31:ab:5e:0f:17:c2:bd:b5:e1:b3:d9:73:
47:c2:97:5c:90:3f:d1:a9:a3:f9:fb:a9:95:75:3e:1d:73:e2:
2d:f5:57:74:5f:a1:b9:7e:32:a6:31:f9:a5:3c:d6:1a:a8:ed:
73:bc:3c:09:75:6c:cb:e2:14:64:e3:66:52:92:a9:bd:63:53:
09:33:5c:2a:ec:08:63:de:ff:dc:b2:1d:0c:d5:94:1e:90:66:
aa:24:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:54 2025 by rpki-client