Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: xBlfusA6A6UJOTyN2M+JubNtT1CZAWzTdUhJaS30HqQ=
Subject key identifier: 10:8C:D1:39:25:1B:2A:D3:B0:7F:9C:6E:76:98:55:B5:3C:46:96:56
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 0198D515F1B6A0C757515216C6190B7376F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 10BF
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: 4lueTR6tsmKkGv2choxRxX/ze8oieR2lhiGat+eJRzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f1:b6:a0:c7:57:51:52:16:c6:19:0b:73:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=108cd139251b2ad3b07f9c6e769855b53c469656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:65:7f:03:dd:1f:63:cc:4f:1a:d4:cc:59:
c5:12:89:9d:02:20:74:c1:8e:0a:b5:39:67:8f:70:
26:d8:13:d3:0e:bb:da:b8:42:be:d8:7a:f9:b3:2d:
8d:91:bb:2e:8b:48:ba:e8:8d:b8:b3:78:c1:c5:5f:
06:51:35:54:2c:e2:ce:ef:75:df:81:a7:90:9e:63:
48:29:46:a2:0c:d0:aa:ab:7c:87:5b:1f:e5:59:87:
b9:13:c3:0c:c2:56:11:21:a0:81:3e:6c:dd:9e:19:
2c:df:2f:67:f0:f7:59:f7:f6:02:18:94:0a:d6:06:
be:f7:99:bb:ac:19:eb:35:9a:a1:1f:74:77:be:4d:
99:b4:45:cb:ab:8e:11:17:ad:48:33:49:0e:7f:4a:
b3:c5:96:c1:33:39:3c:cf:a1:09:f9:44:6a:f2:28:
a1:29:84:cb:4b:ab:80:47:7c:2a:53:aa:61:cb:35:
46:57:88:21:78:0c:e9:6a:a9:94:01:06:1d:7b:00:
1a:6b:e9:9c:35:a1:b8:49:4b:b0:64:b1:eb:2f:83:
a5:e2:94:34:d9:36:d4:60:9f:6b:cd:ea:e9:c9:f6:
97:ea:88:ef:0c:77:62:25:13:87:17:33:dc:33:63:
70:39:d6:74:e5:90:dc:89:1a:f4:7d:e8:ab:c6:d4:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:D1:39:25:1B:2A:D3:B0:7F:9C:6E:76:98:55:B5:3C:46:96:56
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5e:70:9e:e4:d2:99:ac:65:cf:5c:ba:47:2e:cb:87:83:86:
7b:e8:4c:6e:ba:98:e6:2a:7a:ee:47:f9:1c:88:a9:a3:4e:8b:
41:76:31:2d:e6:b3:ad:ca:4b:d3:57:ef:58:a9:a8:88:a4:c8:
fd:6b:98:6b:f6:c8:2b:ec:02:fe:de:06:68:fb:26:bb:e5:a4:
f2:55:cc:a9:14:8f:f2:4f:7a:d7:b7:f5:c4:ed:ff:2d:f9:9a:
70:ba:19:b4:91:04:32:5a:a7:09:1e:80:a4:62:43:40:a5:b0:
55:45:69:eb:6a:2f:4d:8a:5c:74:b6:57:92:1b:d7:e5:18:b5:
02:7f:9a:6b:c1:79:f1:e7:26:27:d3:d3:56:be:c3:8a:89:c8:
aa:1c:60:0c:43:1b:7d:05:61:a8:15:73:e1:38:66:d0:0d:68:
ea:4b:32:b0:3a:f4:56:b3:c3:e7:06:73:5b:7e:c5:de:1b:91:
3c:6f:25:d3:87:30:87:d5:0c:07:96:ef:90:10:59:57:4c:13:
52:03:8d:5e:21:6a:f8:23:c0:66:b4:0f:fb:d3:a0:c6:e5:b4:
48:4b:92:9c:87:26:7b:cf:6e:28:d7:be:0d:f7:e0:5e:3b:7c:
cd:42:a9:77:e0:f6:b9:74:bc:6d:66:89:39:3f:6a:fd:80:66:
e0:0b:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:52 2025 by rpki-client