Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: Xdz4sL1PAsm+pdrDieSopOkxHBsy3K8wJ2A5JxCvtaU=
Subject key identifier: A6:4C:B2:8E:61:0F:BB:31:31:9C:7A:F0:03:77:35:D4:B1:FA:16:06
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 0199FBEC2E2C0E877B7C7C6917B739BD0101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: V9rVujAKjhsnIhfdRMTv8cNPv92yW+DfdlNJqEm8lnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2e:2c:0e:87:7b:7c:7c:69:17:b7:39:bd:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=a64cb28e610fbb31319c7af0037735d4b1fa1606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:9e:b2:d7:ad:c4:7c:f6:d3:5d:fa:65:73:
a9:05:7f:47:7c:b2:9f:4e:42:97:cd:f2:1a:2c:21:
e5:af:08:e8:a7:07:bf:18:7f:51:a0:78:4f:92:fd:
73:5d:a8:0a:a5:ad:6e:63:a5:54:16:d0:19:16:4a:
c0:d4:69:1d:f9:ac:5d:4c:c0:23:4f:3f:c0:a4:3a:
8e:9e:1a:91:94:f5:bc:cb:4a:7b:4a:b3:c2:fe:6f:
06:4f:f1:66:7b:be:97:0c:f2:73:22:5e:c8:c2:af:
0f:7a:22:57:82:28:84:d0:cc:28:84:8c:3c:c9:e7:
07:67:65:4e:0b:e0:2e:cb:ed:26:42:d2:85:69:3e:
de:95:66:8f:b6:75:b3:47:29:09:04:79:dc:e8:07:
91:a1:1d:4d:d9:cc:c7:06:b0:9d:b7:70:e8:8c:84:
ea:86:c6:f6:53:f5:c1:ed:5f:e8:6d:37:73:09:a5:
02:77:fa:b8:29:53:12:58:db:83:aa:d9:34:3a:b1:
6a:b7:1d:64:32:e5:cd:18:46:71:f0:4f:0a:d9:b2:
32:ff:6c:a2:82:9b:f8:bb:03:7c:1e:0f:59:90:6c:
28:c1:fa:30:5f:23:02:9f:56:30:fc:f9:1b:23:ca:
36:30:ca:3d:49:6a:ea:51:0b:d5:3c:59:d4:0b:a5:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:B2:8E:61:0F:BB:31:31:9C:7A:F0:03:77:35:D4:B1:FA:16:06
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:88:57:2c:25:2a:4e:83:22:bb:59:68:e8:3c:9c:93:0d:6f:
65:a7:18:f2:87:29:4d:07:60:fc:cd:81:b6:f7:e4:b8:5c:85:
a7:38:4e:8b:0b:21:ad:e0:70:02:3b:b1:e3:ae:91:c8:b8:87:
45:0f:59:d0:04:88:d0:b6:b4:e8:08:54:92:17:d5:ec:89:56:
8d:e9:df:b3:a7:b6:a5:73:b1:0f:a3:7e:75:06:48:79:49:c6:
ff:57:92:3e:dc:2b:2f:18:c4:07:63:c2:d3:d1:9a:b9:e2:fc:
a0:f3:6b:7e:82:9c:29:df:7a:3f:ae:26:7e:39:5d:81:0a:df:
01:99:0f:77:43:d7:3c:b1:38:fe:3e:32:c0:b0:99:3e:56:42:
ff:f7:12:0e:dd:a5:12:0f:bf:71:9a:45:38:17:74:b6:ea:46:
2c:5e:1e:ad:a1:da:14:17:31:1d:69:ec:a8:1d:50:22:fd:5a:
74:15:d7:f3:94:55:a6:61:f1:f9:53:7d:12:1e:0c:ee:eb:dd:
30:37:c2:9a:c2:bd:6f:c4:f0:ec:9e:ab:a4:75:ea:36:4c:80:
3c:46:be:e5:c1:17:36:0e:f0:3f:e1:30:00:88:50:53:9a:5b:
a2:82:8c:dd:6a:f4:06:c3:15:b7:db:dc:ec:7e:44:d9:ec:0d:
9a:d1:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:00 2025 by rpki-client