Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: S/LjLh1jVdwweBaR+/XXOUkrtefdYwakOgpt43hpy0M=
Subject key identifier: 27:C1:0F:4C:B8:38:ED:10:DE:E8:E1:05:F5:E0:E3:EF:9C:CD:12:06
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 0199FBEB8D69F18103F124E8C91C1CDA3A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 1311
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: 2ZU1Vud6pxKNjglq0rlmKV5/HIJuNI8mP5OWXA2KJKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8d:69:f1:81:03:f1:24:e8:c9:1c:1c:da:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=27c10f4cb838ed10dee8e105f5e0e3ef9ccd1206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:ad:4f:1f:c1:02:c1:c0:9d:a5:ab:1a:01:
f9:e4:d4:e6:e1:fa:e8:00:c9:ee:b3:ad:31:ca:c7:
71:bd:a6:2d:fe:fa:c0:03:45:11:02:7d:14:e9:e9:
05:6e:05:b6:93:ff:ee:6c:e7:16:c6:57:27:d4:2f:
4c:9a:e4:81:a3:cc:3b:c4:9b:a8:05:36:6e:83:68:
62:20:76:dc:b4:d6:1e:b5:e0:9a:14:6c:79:cb:ce:
13:f5:3a:e9:11:f1:08:89:22:02:f1:43:c9:06:ce:
9d:e1:9f:20:a6:9c:32:8b:63:51:a8:61:0f:ce:85:
7a:49:fe:c5:b8:e1:a1:22:9f:9f:c5:0d:36:cd:31:
cd:67:79:c0:da:e3:f7:75:cc:e1:53:e2:99:56:55:
c7:4b:de:f8:db:88:23:bb:cb:25:ae:10:d2:35:5b:
3a:e9:90:be:80:b8:03:05:68:88:48:4d:54:a4:b6:
8e:45:cd:c8:2c:d2:e6:1f:9d:81:8a:c6:07:08:a0:
c5:e5:98:c8:a6:b4:31:b7:97:01:27:c9:03:9f:fd:
46:ba:6f:c9:5d:0d:e3:10:8b:af:3f:69:c6:e9:e5:
3a:16:0d:38:bb:a8:3b:ae:7e:be:1f:96:13:b5:98:
db:2d:f8:5f:18:9f:49:8d:ae:71:eb:23:9f:e8:11:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:0F:4C:B8:38:ED:10:DE:E8:E1:05:F5:E0:E3:EF:9C:CD:12:06
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:5b:b5:de:62:d2:ee:da:a8:41:70:f3:05:c6:cc:6d:f5:
1c:4e:2a:a2:ef:fa:db:13:67:2d:c6:3c:47:e8:c4:5a:f4:70:
12:60:3e:d8:55:a4:7c:fe:cd:d9:c7:16:0a:0d:73:95:88:34:
8b:22:62:a3:81:9c:b9:09:56:23:0d:30:88:fa:af:c6:80:31:
45:e4:ee:10:c5:e1:06:5a:af:d5:70:de:09:b3:5f:2c:95:fb:
9d:1a:c6:ce:d3:84:18:34:da:05:b0:2b:6d:d0:e6:d6:2f:c3:
e0:e7:d0:fa:eb:79:e4:0b:9b:83:58:11:cd:b4:ca:02:18:f7:
a9:f9:2d:68:26:4f:81:e0:e6:71:c1:84:82:cc:d1:f2:82:4c:
86:dc:f8:70:8a:8c:44:1b:4f:90:0c:71:e1:b2:b6:6a:76:a3:
4d:ab:90:78:45:a0:4e:67:4d:50:ad:48:5d:68:af:d7:7e:9c:
d2:7d:b4:68:78:93:77:d2:7c:21:f8:c4:4d:71:1d:9e:9d:27:
ca:ed:09:4d:b7:ef:e0:b3:78:73:6d:b1:84:4d:18:89:a7:84:
67:a6:4d:cc:86:33:62:ef:3a:76:a8:23:63:7e:54:18:1d:2f:
9c:5b:d7:9b:48:2a:55:68:67:a0:10:48:10:2a:9d:be:98:11:
e5:27:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:46 2025 by rpki-client