Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: yE5qinb6ta8DNDjqAg7uzs44PMsJ9C9aIn6qnsrZxEs=
Subject key identifier: E0:56:BD:4C:88:8F:C7:9C:74:F4:DA:D8:AD:11:F5:A8:FA:76:5A:9A
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 0199FB4602D16A2DE32306211A44C5795953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 09A9
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: CgCQ5C4BQg0PYw3Paw0VNDYDGwYYukmxYAtmmAQ8zDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:02:d1:6a:2d:e3:23:06:21:1a:44:c5:79:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=e056bd4c888fc79c74f4dad8ad11f5a8fa765a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:3f:4d:0c:df:ef:64:b2:84:91:0a:11:41:
5d:25:43:c1:92:89:b0:6e:62:ea:b5:e5:f2:12:14:
85:8f:67:14:3f:fe:be:b0:c8:1c:90:8f:2a:08:15:
c6:fd:02:9a:ea:b3:a2:1e:75:54:ce:3d:a3:65:34:
27:49:b8:ae:f8:30:f3:9e:2a:0d:25:06:1b:b9:0d:
26:56:d8:b6:9e:14:9d:76:2e:e9:fe:ec:02:ae:a3:
3d:4d:e7:8a:4c:27:d7:10:73:9e:f3:bc:64:0e:db:
88:12:a9:7a:fb:8d:61:a7:8a:d6:ae:af:91:bc:0f:
2f:54:87:00:43:bd:fc:77:2a:08:b9:68:e1:51:c7:
88:af:70:5e:77:46:bd:64:2e:60:79:bc:c6:7f:4f:
38:34:3e:3b:7f:42:13:cf:97:52:8f:42:81:19:27:
a3:b0:14:01:49:71:df:a8:0b:9c:a3:5d:20:17:42:
c3:7b:9d:20:53:c1:ce:40:37:63:3b:c8:4e:8c:0e:
79:a8:4f:60:46:80:aa:9b:8b:78:0c:02:bf:a8:01:
54:31:bd:a6:bb:a0:0d:4e:46:b3:9a:b0:76:e0:a9:
eb:74:09:70:41:3c:a7:9f:d7:54:df:f1:69:ec:cd:
b4:b2:03:c8:74:05:57:e9:35:13:4f:f9:6c:00:49:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:BD:4C:88:8F:C7:9C:74:F4:DA:D8:AD:11:F5:A8:FA:76:5A:9A
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:a5:e5:26:9b:b8:a2:88:72:ac:9f:d7:8f:a6:ff:e4:8f:
05:0b:9f:1b:97:2b:14:d8:0d:5f:01:65:11:de:9b:4f:e1:c6:
6a:8e:a0:8b:1a:fe:ae:9f:d6:8e:d4:65:07:d7:03:69:4f:11:
7d:e5:3b:44:c7:c4:12:03:20:78:45:c3:f4:b5:bb:59:6a:04:
ff:0d:98:e1:6f:95:b1:60:a1:83:c9:d1:f7:d4:e2:23:84:78:
f9:24:4e:ee:2d:de:9c:15:d1:f0:73:4f:15:43:16:52:7b:a8:
62:7c:6b:e5:94:11:db:f1:8e:4a:4d:e2:6e:9f:a3:d4:eb:28:
af:b4:d4:70:bd:d3:44:be:f1:96:ef:b2:4d:6b:d9:76:77:91:
31:05:9a:96:09:54:02:62:a9:11:1a:88:f6:bd:86:04:a5:30:
ca:2b:95:0f:0c:d0:5a:73:47:79:60:18:b8:b7:9d:dd:7d:86:
db:59:c5:ba:82:f8:9b:ac:30:76:05:56:93:f3:12:2a:9f:cc:
72:94:54:ad:8c:9d:07:38:3d:52:c1:7a:1b:ab:74:0f:46:d1:
a8:2d:91:bf:39:9c:56:9d:bb:b8:57:e7:6e:5c:8f:21:04:3b:
86:90:b9:48:dd:b3:c9:f2:bb:07:0d:66:0c:b8:50:d6:bf:54:
2b:24:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client