Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: WPN85ynaYzRhSryujmWRPv1SXZ4rz2vSv2WhgrCG7wc=
Subject key identifier: 50:06:BA:3E:02:AA:DE:F8:11:DD:C3:B2:D4:B7:2E:08:64:62:B1:59
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 0199FD342BFA75B313FDAE67B42DF1C7D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 1621
Signing time: Sun 19 Oct 2025 16:01:18 +0000
Manifest this update: Sun 19 Oct 2025 16:01:18 +0000
Manifest next update: Mon 20 Oct 2025 16:01:18 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: Rz2Utk80GOpizrS35QKrzuVcrrcbjyrrTS2ZHv0gxwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2b:fa:75:b3:13:fd:ae:67:b4:2d:f1:c7:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Oct 19 16:01:18 2025 GMT
Not After : Oct 20 16:01:18 2025 GMT
Subject: CN=5006ba3e02aadef811ddc3b2d4b72e086462b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:b5:82:c5:77:3c:de:68:02:a0:ed:71:c2:
78:50:f6:f7:95:bb:bb:39:88:54:a8:3b:04:7c:98:
4b:4a:40:c1:90:cf:9d:67:48:f6:47:19:c6:4e:06:
fd:28:07:ac:0a:cc:24:f2:d7:d9:14:fd:24:f8:bc:
13:5f:05:44:41:b6:c7:97:93:92:64:ca:ff:50:56:
76:ce:bb:1c:e7:e1:ab:7f:ae:1a:44:ea:19:b9:03:
b4:c2:b2:a4:57:59:aa:9a:4f:33:f1:54:63:15:94:
2a:6c:63:1c:ae:37:b9:9f:78:b2:6d:15:06:39:ce:
96:cf:ff:ea:eb:ce:e6:81:e5:34:98:6a:f5:43:d5:
1b:6c:cb:fd:68:2a:24:c5:ed:cf:24:cb:d5:41:10:
2f:2d:9d:d2:7b:26:a0:51:fc:82:88:ae:2e:6f:b6:
ab:b5:ad:a2:f8:f2:c2:29:f2:8f:d2:44:7b:85:77:
0f:ec:71:ee:6f:de:8f:cb:66:c4:cb:44:ed:0d:f6:
25:58:09:6b:42:cf:54:08:32:03:ab:18:6b:f4:87:
08:04:35:32:81:0a:03:88:f2:da:67:26:b2:fb:a2:
92:38:96:70:5e:ca:d4:92:15:19:8a:48:97:b5:05:
02:71:a5:c2:17:fa:b1:a8:88:74:99:ab:88:53:7f:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:BA:3E:02:AA:DE:F8:11:DD:C3:B2:D4:B7:2E:08:64:62:B1:59
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:eb:e4:18:80:37:90:17:98:f0:5a:08:f3:c1:de:3e:1f:
68:a4:32:f9:dd:a2:59:36:01:1e:b1:9b:98:76:12:65:74:3c:
ed:75:aa:2e:c9:25:cb:4c:4b:a7:2f:3f:66:ee:ef:8f:f3:1a:
82:88:ac:b3:ce:84:65:f1:3f:d5:82:a8:0b:28:9e:3d:56:62:
cf:1a:3d:7d:d5:28:32:71:2c:da:60:e9:2b:0f:6c:85:e2:9f:
67:ca:a0:d6:8f:5c:97:a3:3e:42:38:18:b4:df:54:39:e1:2b:
ba:90:b0:8e:48:d6:8a:d3:6a:3d:1b:12:5f:5c:2d:3c:5a:a5:
4a:5a:8f:16:70:d0:e6:84:f6:73:44:ff:55:fd:08:5f:b7:a6:
0e:b1:45:3e:3d:ac:44:22:2f:a9:2e:5f:3b:4e:ad:2c:33:c9:
cd:4f:ef:57:ec:55:83:6d:65:d4:aa:3b:ec:0d:6a:3e:be:ee:
db:03:9f:c2:b5:90:53:1f:2d:a6:18:a8:f9:0a:7d:db:63:0a:
4a:e6:4b:35:4a:17:6e:a0:94:08:d4:36:2d:5e:3d:a3:a0:74:
38:b4:fb:6a:72:73:a4:5f:57:37:a5:fa:1a:da:f6:88:2f:f2:
c0:b9:0a:5f:71:3a:4d:07:a5:59:a9:33:4a:c6:0b:1b:52:44:
dc:34:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:59 2025 by rpki-client