Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File: gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier: kggN1gFt98JjHpqjF/xzrxcWpMlf+L7xaMtfuaSkHzQ=
Subject key identifier: 5D:07:BE:6E:37:28:DF:59:63:DB:9C:A2:35:80:47:17:E2:6B:BE:BC
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial: 019A006C40418668739158F3C3102ECD550D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number: 0881
Signing time: Mon 20 Oct 2025 07:01:25 +0000
Manifest this update: Mon 20 Oct 2025 07:01:25 +0000
Manifest next update: Tue 21 Oct 2025 07:01:25 +0000
Files and hashes: 1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: jVdZfNwzMQzoBZyY4JY7bC8QpCbkegqVoQHSgt4npNA=)
2: tgPmLmeCalXg1Y4YKFYEpDBpLis.roa (hash: E95Pu7lKY/fzLNqx288foQ/dCyRdu2HVykfNqinzNk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:40:41:86:68:73:91:58:f3:c3:10:2e:cd:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
Validity
Not Before: Oct 20 07:01:25 2025 GMT
Not After : Oct 21 07:01:25 2025 GMT
Subject: CN=5d07be6e3728df5963db9ca235804717e26bbebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:8b:5c:a8:33:ae:d1:36:a2:41:4a:99:2f:
05:c1:50:e1:8e:89:86:52:e6:e7:3c:47:13:58:dd:
1a:e1:fe:ae:ab:c4:2f:bb:ef:0d:24:25:46:35:77:
62:ab:88:a3:2c:72:76:2a:f5:26:88:0b:0a:7a:db:
5e:f8:de:ab:f0:bb:1a:1d:2f:b6:3b:1e:af:18:dd:
f6:c6:f7:b9:8c:0b:23:d3:76:92:eb:bd:b6:19:3b:
b7:68:6e:5e:06:cb:18:62:14:f2:fb:96:ed:b6:7e:
3e:fa:1c:45:3a:26:4e:53:ef:e6:a3:c9:4f:f7:8a:
25:a3:5c:24:75:ea:52:44:ff:f8:52:25:da:62:7b:
56:a4:00:91:fc:2a:50:a2:db:92:e3:9d:4c:46:0d:
ec:ff:fa:b5:10:28:f8:7e:39:d4:d1:e3:59:94:09:
43:05:89:d8:7b:06:3e:49:46:af:2a:4e:3b:8e:04:
61:eb:07:b0:ba:1f:82:7a:eb:29:26:92:81:1d:0d:
8e:5a:9f:08:00:d0:68:81:6c:54:7c:21:e5:d6:fa:
6d:fb:17:0c:54:a8:71:e6:de:52:c8:61:9c:29:7a:
bb:b8:83:2b:9c:ba:d4:98:0a:58:12:0f:2f:4c:80:
c4:40:76:cb:af:9f:bc:e4:31:55:78:fb:ca:aa:da:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:07:BE:6E:37:28:DF:59:63:DB:9C:A2:35:80:47:17:E2:6B:BE:BC
X509v3 Authority Key Identifier:
keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:dc:32:6d:15:18:64:d3:6d:99:21:2d:86:88:94:2f:80:
8f:35:d4:6e:8b:7a:ff:43:54:20:7e:20:3d:a7:c5:7d:80:a2:
c8:6d:33:3e:b2:6c:ff:a7:d6:c2:1a:6c:bd:e9:ee:d7:ef:1c:
d3:48:9c:18:95:25:ac:73:f5:a7:ee:ab:43:15:bf:d7:15:2c:
3d:5b:cf:e4:6b:2d:84:14:b1:0c:b5:7c:43:0f:19:54:7d:1f:
91:72:0b:eb:b7:8e:f9:cb:b9:ca:1e:c4:7f:de:ae:a4:fe:d3:
98:d7:25:49:ce:69:b2:4d:d1:79:c7:85:ba:9f:0c:a3:3b:81:
71:63:d8:52:91:c8:92:4b:85:e6:5e:f4:0f:0f:e3:92:f0:14:
b1:19:42:3e:cd:6e:d4:d9:0a:e4:97:fc:db:3d:36:3b:97:b6:
aa:67:8d:24:f1:68:8b:77:de:f1:4b:d7:37:12:62:ec:8c:9c:
d3:76:95:a4:26:1b:81:d8:c1:87:4a:82:85:be:03:32:ee:5e:
7c:27:84:5a:cc:c8:0c:8e:c3:95:18:79:64:0a:81:b1:18:e5:
08:49:51:9c:cc:c8:09:07:c4:4e:7c:c2:94:f5:57:bf:15:9e:
41:73:66:bc:16:88:66:c6:38:19:cb:1e:6b:00:90:be:4a:f8:
2f:5d:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:52 2025 by rpki-client