Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File: GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier: 6/ETv0PH6P+z4sThJz0II21/T7G3nVgutwbFSv10m8Y=
Subject key identifier: 5A:80:18:E7:6E:C8:EF:D0:11:5D:35:1A:61:75:5B:82:96:26:7F:31
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer: /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial: 0199FF59418DB77F6C1E73EB4DC641C43421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 02:01:03 +0000
Manifest this update: Mon 20 Oct 2025 02:01:03 +0000
Manifest next update: Tue 21 Oct 2025 02:01:03 +0000
Files and hashes: 1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: QgJli6TJ+iEAhH/AIyBgzojHE2w4RNeeVUaLmx+AmLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:41:8d:b7:7f:6c:1e:73:eb:4d:c6:41:c4:34:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Validity
Not Before: Oct 20 02:01:03 2025 GMT
Not After : Oct 21 02:01:03 2025 GMT
Subject: CN=5a8018e76ec8efd0115d351a61755b8296267f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:db:b1:84:59:d1:9d:d4:1b:c6:5f:96:51:
5b:61:e9:e4:44:cf:f2:9e:93:3b:c0:4d:04:79:6e:
e3:4f:0b:04:61:e4:da:fc:17:43:73:f1:e3:70:2a:
2b:e4:20:f3:f2:50:f1:35:86:a9:0c:45:87:f7:78:
2d:88:b1:f7:4f:21:3e:47:c3:90:9d:75:eb:3a:9a:
0d:00:7f:72:f6:db:f3:0e:c9:fe:fc:42:43:e6:36:
07:27:7e:0f:45:d5:74:51:15:91:a4:3d:96:fe:5c:
b1:bc:53:c0:1d:c9:47:9f:53:9e:e4:0e:1a:8c:cb:
2d:1f:6c:79:d9:fa:07:ac:0c:85:cd:cb:a6:2a:48:
e2:9a:ae:dc:fd:19:47:99:e0:91:38:45:62:d1:cc:
16:07:00:7a:a5:56:fa:5f:e1:13:04:4f:62:59:5c:
77:6b:d6:db:c9:d4:db:7c:48:9c:2f:8a:a5:42:34:
07:a1:45:e1:40:c9:f6:31:23:4b:c6:00:28:28:41:
ee:de:58:5d:ca:3b:da:05:27:d2:6a:7c:82:2d:b3:
78:7a:dc:2c:0b:5e:f4:65:26:d4:3b:1c:95:80:64:
4d:dd:8d:43:8b:a7:a2:42:ef:87:99:aa:28:ff:1f:
85:14:d2:2a:5a:e7:50:c3:8b:5c:56:37:03:c5:6a:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:18:E7:6E:C8:EF:D0:11:5D:35:1A:61:75:5B:82:96:26:7F:31
X509v3 Authority Key Identifier:
keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:97:89:3a:2c:87:da:7a:2d:93:69:a3:f1:71:aa:ce:9c:3a:
2a:c6:12:55:a6:75:46:3d:7b:47:37:96:80:6e:5e:6f:fc:61:
66:a6:a2:e1:35:f6:4c:62:96:c8:90:dc:a2:99:7c:c9:48:b5:
ca:2d:27:3f:0b:5c:85:fe:6b:70:10:ec:e0:cc:4e:fb:06:7f:
f6:d7:e2:b6:95:7d:f7:c7:0f:20:39:55:7a:7e:4b:1f:48:f2:
a7:02:09:16:bb:25:50:20:0c:26:06:98:fe:a1:5c:a8:0f:6e:
42:76:d1:08:44:b8:78:7f:7e:0f:ac:9a:1d:5c:93:d6:12:80:
1d:11:84:4b:06:99:7d:81:e6:84:b7:fa:eb:6e:73:7d:b8:83:
f2:55:8f:6f:81:06:f1:7a:fa:c5:d3:e9:48:82:2b:49:61:e0:
18:88:ce:60:76:e0:5b:9d:7c:5c:ce:04:e7:6f:53:44:91:ce:
f6:ed:61:8c:63:ea:c6:f3:e7:4e:a9:07:b1:68:58:d7:a1:b4:
e9:32:87:7d:4b:e7:81:1b:3f:98:94:6e:4a:aa:c2:b1:cb:93:
c3:99:6b:b2:c1:ad:2a:27:7c:43:7a:e3:f6:4f:1b:8f:25:45:
ac:3b:31:24:4a:82:39:29:48:19:a9:3e:12:f2:23:67:b4:a4:
1f:2e:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:13 2025 by rpki-client