Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier: MXgWIftreLFjsJ7lIHIwb7W4/hPUkvor8i0WQ1YE+RY=
Subject key identifier: 7E:F1:0D:EF:BC:07:AE:06:04:20:9F:23:13:51:54:B3:69:2A:19:1A
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer: /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial: 0199FE7D81F5159229A89788CE7FA1FC98BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 22:01:02 +0000
Manifest this update: Sun 19 Oct 2025 22:01:02 +0000
Manifest next update: Mon 20 Oct 2025 22:01:02 +0000
Files and hashes: 1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: 6/fzpEKm+8/AfZpGdx0xHgumi0T6SAxZUa71MIDW0GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:81:f5:15:92:29:a8:97:88:ce:7f:a1:fc:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Validity
Not Before: Oct 19 22:01:02 2025 GMT
Not After : Oct 20 22:01:02 2025 GMT
Subject: CN=7ef10defbc07ae0604209f23135154b3692a191a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:0c:c6:54:56:e4:8a:86:fb:93:4f:e4:ba:
78:c8:43:b5:d0:21:b5:96:12:57:1c:a4:a4:c3:8c:
ca:0d:4d:a3:a4:25:42:e4:3d:f1:3e:87:3f:aa:ba:
24:7f:59:3e:d0:f2:0d:83:ef:8f:19:a6:9b:fb:9e:
17:21:fa:de:be:6f:69:cb:55:78:28:10:61:26:7c:
43:6b:c1:9c:ed:a1:a6:e2:e5:60:c4:1e:e3:af:3f:
71:d5:67:37:58:a9:07:7f:94:ff:c9:43:1a:3a:c1:
86:38:9b:15:1f:ec:1b:b7:4b:4d:0a:8f:5c:72:2f:
3f:a6:ae:25:00:55:30:f1:cd:3c:b3:7a:90:dd:11:
fc:28:4d:a3:9e:2e:26:15:3a:e0:a9:d2:e8:df:e5:
3b:ff:23:2d:d1:22:61:82:3e:d0:fe:1c:c1:2c:aa:
54:5f:5a:3b:5f:c0:d0:ed:d2:f6:5b:f0:d4:c9:f0:
58:e4:4e:67:26:be:d6:7f:23:2f:6c:cb:af:90:62:
44:2d:61:37:c4:4e:2c:f8:15:86:79:0b:ec:4d:62:
a1:a9:38:d7:b3:d5:2d:5f:d0:9d:92:3f:9c:12:c0:
0a:98:b8:9d:f2:1f:55:b6:b9:43:73:93:99:a7:20:
2c:04:cf:4e:0d:c2:cc:1f:fa:0b:8b:62:9c:3a:10:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:0D:EF:BC:07:AE:06:04:20:9F:23:13:51:54:B3:69:2A:19:1A
X509v3 Authority Key Identifier:
keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:60:eb:1f:ab:61:e2:15:74:93:e6:35:63:4b:d9:45:c3:bf:
8a:53:bf:d4:f3:8f:2b:82:c1:54:04:f9:6f:a1:df:ca:89:2c:
cf:89:8a:66:42:6c:d3:bc:dd:09:dd:2a:e6:9e:83:9b:7d:1c:
e8:27:e9:ab:c0:90:bd:61:8a:3b:df:ee:96:22:12:6a:b3:5e:
13:54:0c:e6:ff:46:89:c8:17:88:a4:40:1c:42:3c:be:ac:d1:
05:cf:3b:d1:79:18:dd:06:d8:35:f0:b0:60:ad:0c:e6:34:01:
a7:07:fe:30:cd:12:96:34:39:cc:26:af:60:52:0b:52:b9:39:
73:a7:3f:38:f1:5c:a5:f5:f9:64:42:24:22:b9:f5:37:78:99:
4c:a8:f0:c8:50:fa:eb:cf:0e:f2:70:a9:5d:40:0e:57:34:05:
54:1c:ed:c4:c1:49:91:c3:42:b2:94:2a:51:8c:a4:29:97:eb:
a1:9c:c0:25:5c:3f:d1:a4:d3:a4:ab:b2:59:e4:63:13:21:a7:
5f:1b:7d:49:7f:97:ed:0f:a4:49:8a:2a:1e:dd:ef:69:22:05:
1e:f4:46:10:e2:99:55:b0:97:d2:d0:5c:5a:f4:fd:0e:b0:45:
00:76:a4:57:87:47:95:7f:0d:fc:84:b5:44:93:31:95:86:ce:
44:63:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:51 2025 by rpki-client