Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File: gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier: pswL3ZkNWn4VD8esgwdDjMzfRdjHnnIOhYHAIN7DBpk=
Subject key identifier: 35:79:8D:6E:C3:8B:91:AF:EC:A5:AA:1D:5A:D7:D0:FA:1B:4F:E9:B3
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer: /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial: 0199FBEBB5EE0D05E8FD16CA9289E870A8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number: 1050
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: z5kcxKMn+OlCL6qyPeC50XkyAM7aX7QwkIX1QFoS8/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b5:ee:0d:05:e8:fd:16:ca:92:89:e8:70:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=35798d6ec38b91afeca5aa1d5ad7d0fa1b4fe9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:56:ff:0b:13:e7:fc:cf:bd:4a:c4:55:bd:
86:4b:10:2f:b7:da:c2:8c:ab:64:36:ca:99:02:30:
81:24:76:99:d3:3d:a7:5e:23:a5:e1:dd:1e:29:61:
00:8a:dc:b2:70:e7:85:bf:1b:b1:7c:6d:35:17:5a:
8d:87:b5:60:63:4f:bb:bb:0b:9d:4e:51:96:c1:32:
8c:07:a9:c6:f5:71:a7:f6:aa:1e:47:35:85:9d:35:
98:a8:b6:52:f8:2b:af:a4:02:f9:93:12:f6:e5:97:
0d:e4:4d:1b:e6:fd:96:75:b9:c6:2c:db:6b:8b:02:
c4:8c:b2:8c:fd:72:bb:77:fb:39:6d:28:c0:c1:59:
33:ef:7a:4c:64:d3:55:fc:dc:9a:3b:ff:1c:48:a7:
30:12:5d:2b:cd:e3:78:1e:3d:a1:d4:61:00:f6:ab:
00:3d:5c:43:9f:e2:49:2a:1f:52:73:28:fc:fb:b5:
17:a3:d9:30:20:3b:5d:1e:78:45:31:d5:a3:c5:cb:
fd:e4:b4:d8:e6:56:27:fd:29:bd:96:0e:1b:b3:99:
53:f1:75:50:d2:c4:8b:18:a2:79:69:b9:19:f7:5c:
35:eb:3c:91:70:7b:c5:31:69:7d:4d:81:90:26:a9:
e1:64:b5:ab:26:0d:36:e9:c6:a8:1d:e2:37:60:5a:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:8D:6E:C3:8B:91:AF:EC:A5:AA:1D:5A:D7:D0:FA:1B:4F:E9:B3
X509v3 Authority Key Identifier:
keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:25:e6:10:98:83:09:f1:9a:ad:1c:76:f5:3b:d9:6e:ca:70:
79:22:4e:76:42:d2:2e:de:b0:89:8c:12:df:80:b7:43:24:5a:
84:26:7a:b0:87:4d:b2:ee:77:69:5d:9c:aa:af:23:c5:ec:a5:
08:ad:2b:60:f9:21:eb:90:dd:7d:54:d7:32:6b:98:fc:2f:d5:
6c:04:d6:1a:f9:19:23:93:37:14:96:23:e5:f7:4c:a4:58:56:
f4:8f:34:d1:14:45:b4:76:ea:66:cb:6f:c3:de:7d:cd:ee:8c:
c8:f3:c1:b4:b2:42:1a:bb:6f:fe:56:de:c7:14:59:1c:cc:fa:
a7:dd:ef:1a:76:72:50:c7:f0:33:a8:48:1c:8e:d9:33:2c:f4:
11:86:86:b1:5c:b4:61:db:46:34:77:0a:75:01:c8:c8:6e:80:
81:65:c9:a5:b6:ad:71:1c:bb:df:d8:f6:43:b9:64:2d:d3:91:
bf:15:1e:31:b2:dd:6e:67:1b:8f:24:b6:9e:75:22:1c:b8:ae:
c5:db:a8:f0:86:84:af:be:3f:62:d7:da:9a:e6:0b:bb:91:c7:
30:d4:6a:0e:2d:af:70:a8:ef:11:21:6b:8e:ee:4d:57:8b:f3:
f4:d9:38:65:19:2f:2b:23:a0:d5:9f:30:73:f9:97:34:df:18:
3f:e5:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:06 2025 by rpki-client