Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: Q6pp0ux36UczvRYO7cN+0bdgU/iimEJuh9E+/wzc8+w=
Subject key identifier: 6A:F6:FF:BD:BD:D3:0C:EB:83:AF:30:5F:91:5E:AB:09:C3:B0:3D:BA
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0199FBEA87F680529ED68E6F4C2876EF9404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: IhLYItuFPWqxHLTJeb2C6AW8Cc+xaU0Kpg0IkmwXsWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:87:f6:80:52:9e:d6:8e:6f:4c:28:76:ef:94:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=6af6ffbdbdd30ceb83af305f915eab09c3b03dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:87:bd:a8:86:0b:35:a2:6f:f4:b0:f7:8e:
fa:c2:eb:f9:1a:9c:d5:51:60:1d:49:aa:32:11:ca:
4f:b4:30:98:2a:1c:31:c9:55:60:46:cb:b3:d0:c1:
8b:57:64:43:bd:a9:13:48:21:43:ab:a9:58:bb:ff:
94:50:b4:fb:a2:b7:2e:86:43:54:e1:70:7c:4e:ad:
86:fb:aa:0d:15:ba:65:49:d8:8e:0a:40:60:31:55:
32:31:a0:46:da:2a:6e:1b:d2:4d:1f:1e:3d:23:fc:
fb:4f:8b:0b:bb:f3:33:e0:63:22:4a:71:57:e3:77:
a2:94:f1:a5:a4:6d:d3:3b:0d:40:7b:4c:21:1e:7e:
22:a1:b1:0c:7e:71:78:5f:fe:c9:ef:0c:9a:1c:9f:
24:34:37:a4:4a:e5:11:58:4e:59:85:66:d3:4c:5c:
88:81:5c:e4:42:08:9a:3d:a7:cb:fb:e4:79:78:82:
3f:6c:d3:b1:59:a2:e8:c5:96:df:ad:ad:b3:e2:45:
60:55:3a:b8:dd:1f:60:7a:fe:0a:14:32:f2:93:72:
58:4a:f5:e1:65:89:08:b0:0e:74:80:cd:06:59:ea:
ff:71:a1:ee:35:b0:ab:57:94:b5:c6:f9:18:fc:c9:
ef:9f:dc:41:78:73:50:a5:c2:d8:25:11:a0:4f:f0:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:FF:BD:BD:D3:0C:EB:83:AF:30:5F:91:5E:AB:09:C3:B0:3D:BA
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e8:b7:70:02:e0:24:b5:09:23:04:35:3a:55:e8:3a:45:0d:
7e:20:0f:19:6a:e0:a8:36:95:5d:ec:ca:9c:23:5f:ac:c0:5a:
1c:fd:df:da:48:14:e9:7b:17:57:84:ce:6d:db:b2:5a:b2:44:
db:c1:cd:0f:86:94:68:e4:0c:c4:ea:4a:4b:23:e7:77:79:1f:
c6:e9:79:53:ed:9f:84:3a:ee:39:49:80:a2:f6:95:d3:ad:40:
d1:ae:a7:dc:68:59:10:e6:08:99:77:f6:b0:59:b9:8a:98:1a:
58:9e:2b:7a:4c:42:cb:2a:bd:dd:af:3c:4a:60:e1:90:f1:a5:
48:1d:b2:cd:3f:d3:a7:02:1e:97:6b:f0:fb:63:4d:e1:f0:5c:
b1:47:d8:aa:93:9e:2f:8e:eb:06:60:c5:d6:81:f6:b2:fe:2d:
69:61:ad:86:72:eb:21:65:2f:22:26:13:f2:0b:12:cb:3f:f0:
a5:9e:d7:cd:ec:13:84:ac:8c:37:77:ed:df:a9:83:e3:29:bc:
b5:e0:bd:a0:c7:2c:b2:6c:75:35:31:5b:1a:d2:50:38:37:64:
91:be:d3:3d:c1:32:0d:6a:65:a0:07:3b:25:8f:9d:a8:d4:b2:
19:51:85:0b:d7:1b:d1:85:4b:08:29:20:85:29:26:cb:2e:97:
85:69:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:09 2025 by rpki-client