Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
File: Gcxj87NPFwGJ0HPIi31lL3Azofw.mft (raw, json)
Hash identifier: llywPM6geqH1COu8Y9JdQoLBZBeyt8/No96HSYlyEuQ=
Subject key identifier: AC:71:30:E1:01:14:4A:68:32:E7:65:75:47:E7:36:CE:5E:95:02:9C
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Certificate issuer: /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial: 0199FC8FA12B8752F7F3EE197902068F5FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
Manifest number: 0466
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: Gcxj87NPFwGJ0HPIi31lL3Azofw.crl (hash: oFgDd9SBxHIYzhUqwtCLqIxey8ZYC+lalYb1DAKL3ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a1:2b:87:52:f7:f3:ee:19:79:02:06:8f:5f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=ac7130e101144a6832e7657547e736ce5e95029c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:98:8b:99:6a:2b:ce:97:8c:c5:28:31:0c:
f0:ac:34:96:45:80:a7:6a:9b:15:02:e4:03:7e:64:
21:0c:d8:ee:40:2a:aa:3d:a5:b9:31:c3:fb:d0:ae:
81:b9:98:1f:94:db:0a:97:d9:a0:3e:0a:55:59:43:
92:4b:71:d5:17:4f:e9:01:31:f8:3b:ea:12:23:ab:
eb:05:25:4b:00:48:1a:03:fd:69:fb:05:99:9c:a7:
b6:b3:a8:51:2f:61:59:a4:63:9a:f4:a9:49:db:98:
31:a0:bf:3a:05:05:90:3d:61:fc:9e:05:49:82:f0:
41:f5:03:67:cc:11:1f:2b:7b:03:e1:ff:fa:b0:ef:
e8:bf:a3:00:e4:0a:ef:aa:52:7d:9f:42:b5:db:d2:
0a:4f:7a:9d:73:c9:ef:da:46:6e:d3:04:97:23:66:
40:6f:d3:10:f2:33:0a:d1:82:f3:b2:ba:dc:94:52:
c1:9f:51:d4:5b:7c:ba:37:07:0c:cf:dc:6c:cc:ee:
94:04:45:55:59:cf:2c:c1:8d:7b:c2:9b:c5:a9:61:
50:92:59:ee:f0:26:5d:29:45:c7:a4:0d:98:a7:64:
ee:de:d3:30:6d:14:dc:f4:cf:01:05:cf:97:e8:4d:
3f:3d:9c:69:3a:be:6c:0e:ae:f0:68:b2:d8:ab:32:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:71:30:E1:01:14:4A:68:32:E7:65:75:47:E7:36:CE:5E:95:02:9C
X509v3 Authority Key Identifier:
keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:e5:68:c5:cd:83:70:e6:6a:39:c4:a9:c1:11:4e:51:72:
76:c1:2e:94:b6:b2:1c:70:2c:66:c9:5e:e3:96:92:05:c4:75:
7f:9d:d2:67:44:e9:95:6c:79:96:0b:02:b0:57:04:23:4a:15:
dc:31:56:81:f5:60:09:63:d9:8a:2c:f0:74:f5:a7:3a:24:f4:
f7:b0:2a:db:9a:b7:d1:91:78:1d:1a:da:70:4d:21:d4:c7:e4:
d9:84:48:9a:97:41:d4:48:3d:ef:a7:5e:da:d8:db:d1:fb:46:
d7:16:09:3a:ab:40:88:46:b4:17:12:40:87:52:49:f7:f5:30:
8c:e4:0a:f7:37:e3:e9:da:2a:91:1c:51:eb:03:6f:45:21:91:
e3:fd:e5:48:b9:9d:9b:80:33:94:51:d2:be:2b:da:b5:14:18:
a8:39:8e:f7:d6:00:cc:3b:e0:08:2a:2a:5d:fb:eb:b5:18:ee:
f4:95:39:0a:ed:f8:23:1c:a2:df:35:4a:3c:57:c5:fa:87:e3:
5e:c9:5a:fb:5c:f2:1b:d5:3b:b3:c7:0a:7a:c6:15:d2:ae:df:
2b:ee:2b:a5:fa:ae:a3:fb:49:63:b8:1d:b9:c3:29:6e:79:0d:
d5:23:c7:45:26:ed:c5:0a:29:c9:3f:9a:24:23:d8:ed:9d:ed:
9c:dd:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:36 2025 by rpki-client