Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: DKGnbr2LzRBvHgn5IHuzXnq68fCdtM+Ghi2ojFiKPVE=
Subject key identifier: 95:DE:24:A0:77:A3:52:4F:63:7D:F0:61:85:8F:31:37:34:63:B1:27
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019A044868FDD50EC41853D1C379D37D0CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 1452
Signing time: Tue 21 Oct 2025 01:00:45 +0000
Manifest this update: Tue 21 Oct 2025 01:00:45 +0000
Manifest next update: Wed 22 Oct 2025 01:00:45 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: YF8UgzgQ/azWK0wpIUFhC4oX981gj/Zw//8Av4Roco8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:68:fd:d5:0e:c4:18:53:d1:c3:79:d3:7d:0c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Oct 21 01:00:45 2025 GMT
Not After : Oct 22 01:00:45 2025 GMT
Subject: CN=95de24a077a3524f637df061858f31373463b127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:65:e7:81:fb:76:69:a1:41:02:72:d6:59:
8a:83:ae:cc:67:5e:4c:e7:1a:35:c7:94:69:24:27:
25:9d:20:c3:92:2d:99:cf:23:7e:b1:62:bc:2b:e4:
dc:a4:99:f8:82:b4:69:35:a1:81:57:cc:0f:6b:1b:
7b:4f:dd:b5:b9:29:96:85:4d:e9:08:4b:a2:a3:d3:
83:5c:51:91:19:e0:07:9c:02:73:be:d4:24:59:bd:
fa:9b:85:3d:56:ff:24:f6:70:42:55:de:db:f2:bc:
32:63:a0:c7:dd:5e:9c:0d:ec:55:f2:52:29:0f:af:
b5:40:f7:2a:b3:2e:1e:2c:c4:20:80:cb:2e:3c:79:
20:3a:4a:c8:e1:81:ea:84:c1:33:2e:ee:cf:45:c7:
77:f7:46:7a:f0:70:84:06:82:16:d7:92:b7:fb:d7:
24:4d:c9:0d:51:da:c5:f7:b3:ce:bf:a8:e1:57:ba:
10:1d:6a:0d:a8:a8:20:3c:6d:ee:d2:0b:66:11:c6:
a7:3c:f8:3f:d7:a7:57:b8:fb:59:d8:bc:f3:89:16:
e6:68:7b:8e:2f:5d:29:14:fe:58:d4:3f:92:66:18:
7a:3b:a9:1f:35:b1:96:91:9e:68:3c:62:00:cb:6f:
a6:d6:ca:70:f7:d7:54:c7:60:41:4b:61:75:9e:0f:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:24:A0:77:A3:52:4F:63:7D:F0:61:85:8F:31:37:34:63:B1:27
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e4:09:8b:f2:41:bf:1e:a8:0c:45:4c:89:9b:c6:21:9a:f6:
9c:f9:66:cb:20:96:34:9c:c6:6e:63:49:f6:8f:ab:b9:50:c2:
fb:c4:e0:fb:d0:22:eb:c6:15:b5:35:40:76:21:3f:f9:9d:c5:
82:a0:65:78:9c:89:62:14:30:06:7f:95:f0:bb:68:14:c2:37:
05:fd:b2:e6:96:c7:a2:e8:54:9b:89:21:88:d0:0e:8c:e0:58:
f3:3e:3e:a3:eb:5d:20:ce:0e:77:d5:0f:9d:4d:d3:8f:dc:71:
5c:5a:7d:67:26:2f:fa:a3:66:da:07:51:40:b9:49:e9:6e:ff:
77:a1:81:01:5b:ee:74:a6:4b:bc:f7:6b:3a:76:f6:74:81:db:
e5:eb:67:da:86:75:44:dd:38:b0:8e:d5:9b:ae:a4:57:2e:b1:
51:59:db:9c:dc:94:9b:c1:30:ce:74:2a:3b:79:a8:b7:8a:b1:
f2:fc:99:64:90:a8:d7:b4:fa:d9:a2:70:1e:f9:32:82:38:1c:
90:a1:df:0b:52:4a:b5:4f:41:12:5a:99:d9:3d:9c:6b:2d:6b:
05:bb:43:ea:e7:94:cc:ed:c1:ae:e4:a4:6e:aa:69:02:35:09:
42:74:b9:a6:ff:50:4e:0a:14:fa:7c:79:7e:52:5b:d0:e8:c6:
d1:7b:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:04:50 2025 by rpki-client