Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: ZPIDrL3n5Ca3omEDyPeguC033J/ZphPAkEzzs4K7//A=
Subject key identifier: 19:20:A3:E0:4A:67:64:3E:53:3E:7C:9B:3B:13:66:38:B5:F0:14:1F
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 0199FBEAA917ED79BE57BBCE40BAA10D92FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: 1nKZXqLeghocakNkKDyHtu1PlNrCj6nv5Q6cI3neVE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a9:17:ed:79:be:57:bb:ce:40:ba:a1:0d:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=1920a3e04a67643e533e7c9b3b136638b5f0141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:86:eb:35:a2:5b:f9:d1:88:80:cf:c8:29:
7e:25:21:3d:7a:32:8a:86:8d:4b:7c:62:23:97:f6:
28:27:62:44:cb:a2:c4:e0:3d:4d:ef:d9:09:4c:f3:
e1:fa:3e:b7:9a:f2:25:85:f5:59:5c:fa:5f:d2:28:
4a:2f:8c:98:d5:f9:a7:63:a5:7f:d5:b0:fa:cf:52:
8c:50:41:be:00:63:5c:c7:33:75:d2:a8:b2:25:98:
c3:e4:76:cf:dc:9c:e2:1a:2e:a7:33:3f:a9:d6:11:
a1:5b:01:ab:47:32:65:ab:3a:02:5b:68:b9:e1:ed:
ed:3b:cf:8c:94:8e:4c:ed:65:d9:b9:68:2d:31:04:
90:4d:5f:ae:d2:46:f0:ea:13:6b:01:e0:7c:0e:41:
fd:28:b7:d6:bf:01:fd:91:a3:f4:62:29:c5:1a:33:
b9:1f:0f:b8:97:85:14:1d:6d:b6:5a:06:88:77:64:
a4:de:87:5c:21:e5:2c:01:45:e7:ef:e4:be:ea:ca:
15:c1:e8:ce:07:3f:45:54:8a:bb:dd:57:63:fd:5c:
c6:e3:0a:a5:2f:38:63:25:ed:35:eb:7d:09:25:6d:
98:d5:67:8f:e3:cf:2d:fa:c3:87:b4:c5:ea:8c:35:
a1:58:1b:02:61:bc:05:2c:af:58:98:d3:5a:4b:a7:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:20:A3:E0:4A:67:64:3E:53:3E:7C:9B:3B:13:66:38:B5:F0:14:1F
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:4e:b2:31:f7:3c:71:95:4b:fb:c6:4a:24:90:9d:fb:f9:
12:37:80:da:ef:cf:f1:0f:f4:10:5c:7f:43:69:45:f9:fa:0f:
e8:7d:5b:a7:0d:8b:2a:06:f4:80:aa:81:37:49:7b:57:57:31:
19:db:80:b3:f5:b0:54:e9:f9:75:3d:e6:0a:7a:06:94:20:ab:
30:52:5f:d8:39:3a:5e:5d:fc:88:80:97:5d:05:c2:b5:b6:b3:
da:0e:85:3d:7d:81:be:ea:f7:80:a2:51:04:ce:7a:ec:39:a6:
eb:01:eb:da:1f:87:60:fd:bf:21:5d:4b:26:91:b9:b1:be:75:
46:57:2b:0e:c3:51:65:ca:04:fe:e7:60:0a:a1:57:25:62:db:
17:22:9c:91:2d:5e:65:ce:7d:d5:7a:f4:ed:1a:31:c0:29:f7:
a5:b0:8a:62:47:fa:51:99:62:cb:00:ec:26:77:a9:cb:85:86:
e1:ac:18:92:b1:38:e8:de:40:0e:a4:f4:1f:a7:bc:21:79:2d:
6b:2e:50:54:42:92:bc:30:62:00:5e:a1:c4:7f:6f:91:20:fd:
4e:7e:c1:3b:28:4b:3d:75:1a:4b:57:eb:82:b7:36:48:49:19:
43:5a:8f:3d:a2:3b:3e:b8:be:27:ac:fb:69:eb:0c:7a:67:d2:
62:e1:76:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qkX7Xm+V7vOQLqhDZL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM0NWE4MmNlNzE2ZGQzZTc2MzMxNzJmODcwMzA0N2Y2
YjdkOTQwHhcNMjUxMDE5MTAwMTIzWhcNMjUxMDIwMTAwMTIzWjAzMTEwLwYDVQQD
EygxOTIwYTNlMDRhNjc2NDNlNTMzZTdjOWIzYjEzNjYzOGI1ZjAxNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxliG6zWiW/nRiIDPyCl+JSE9ejKK
ho1LfGIjl/YoJ2JEy6LE4D1N79kJTPPh+j63mvIlhfVZXPpf0ihKL4yY1fmnY6V/
1bD6z1KMUEG+AGNcxzN10qiyJZjD5HbP3JziGi6nMz+p1hGhWwGrRzJlqzoCW2i5
4e3tO8+MlI5M7WXZuWgtMQSQTV+u0kbw6hNrAeB8DkH9KLfWvwH9kaP0YinFGjO5
Hw+4l4UUHW22WgaId2Sk3odcIeUsAUXn7+S+6soVwejOBz9FVIq73Vdj/VzG4wql
LzhjJe01630JJW2Y1WeP488t+sOHtMXqjDWhWBsCYbwFLK9YmNNaS6cWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkgo+BKZ2Q+Uz58mzsTZji18BQfMB8GA1UdIwQY
MBaAFIDzRags5xbdPnYzFy+HAwR/a32UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAt
NzRjNWRiN2MwOTNhLzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wOTEzMzAtNWY4My00YWQxLTllMTAtNzRjNWRiN2MwOTNh
LzEvZ1BORnFDem5GdDAtZGpNWEw0Y0RCSDlyZlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbFOsjH3
PHGVS/vGSiSQnfv5EjeA2u/P8Q/0EFx/Q2lF+foP6H1bpw2LKgb0gKqBN0l7V1cx
GduAs/WwVOn5dT3mCnoGlCCrMFJf2Dk6Xl38iICXXQXCtbaz2g6FPX2Bvur3gKJR
BM567Dmm6wHr2h+HYP2/IV1LJpG5sb51RlcrDsNRZcoE/udgCqFXJWLbFyKckS1e
Zc591Xr07RoxwCn3pbCKYkf6UZliywDsJnepy4WG4awYkrE46N5ADqT0H6e8IXkt
ay5QVEKSvDBiAF6hxH9vkSD9Tn7BOyhLPXUaS1frgrc2SEkZQ1qPPaI7Pri+J6z7
aesMemfSYuF2qA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:43 2025 by rpki-client