Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: aOzUsx1815eq8LchXakNXJFZu+OpBwCqkkMrtCPDCqk=
Subject key identifier: D0:EA:B4:C6:5D:EC:B0:DE:76:A0:11:55:A4:7A:E9:9F:6A:E0:94:44
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 0199FD348A68962B33CCD13DF758ED1C9E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1374
Signing time: Sun 19 Oct 2025 16:01:42 +0000
Manifest this update: Sun 19 Oct 2025 16:01:42 +0000
Manifest next update: Mon 20 Oct 2025 16:01:42 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 4hmeicpN1FgOGqHWUNoMLxYAJ2VfA/JPkOQ3isbwaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8a:68:96:2b:33:cc:d1:3d:f7:58:ed:1c:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Oct 19 16:01:42 2025 GMT
Not After : Oct 20 16:01:42 2025 GMT
Subject: CN=d0eab4c65decb0de76a01155a47ae99f6ae09444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:31:0f:51:e8:16:a8:fa:e1:f8:b7:51:12:
48:d2:78:ac:b6:1f:71:04:1d:ba:0d:4d:fd:02:3c:
0c:0c:65:be:a5:9d:42:6e:ca:85:38:d0:2d:43:55:
ef:e6:1c:5d:89:4d:a7:39:3a:55:b7:15:26:bf:1b:
b7:e4:e6:19:42:b1:96:56:a5:2e:88:c0:9f:68:d1:
5c:58:bb:a3:6d:e7:68:72:ec:44:7b:72:51:32:07:
58:16:f3:e2:86:dd:aa:ee:56:be:64:f6:e8:49:b2:
87:d0:b5:86:37:71:5d:6f:bd:bd:35:11:99:a8:35:
01:84:4e:84:20:4f:57:8a:9e:88:26:28:af:74:0d:
11:ee:15:f8:ce:8b:87:f2:40:c7:f5:2d:db:10:4e:
d2:77:63:e7:07:7e:af:7f:6a:95:25:ab:51:7a:d9:
e2:e2:38:de:13:89:49:86:47:e1:e4:0a:f5:71:cf:
16:89:d5:c4:b1:52:17:d8:3f:4b:23:5c:74:98:84:
13:94:19:d7:81:4d:43:e8:db:2e:52:ef:6a:c1:7e:
6f:e5:a5:7b:35:56:79:e2:78:fc:6c:5f:e6:a4:29:
d6:34:2a:69:2e:41:b3:ac:19:46:b5:3c:9b:09:4e:
b5:78:11:de:77:3f:95:a3:07:e3:20:93:c6:7e:7d:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:B4:C6:5D:EC:B0:DE:76:A0:11:55:A4:7A:E9:9F:6A:E0:94:44
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:6c:8a:ce:04:19:e5:5b:38:3c:80:df:26:40:b7:3d:e6:
f6:a2:ab:81:b5:b4:b0:9b:3b:4f:b6:45:66:89:74:3f:bc:dc:
4c:de:35:8e:f9:b2:e0:58:d5:95:f3:c8:cd:7b:78:d8:49:14:
d2:25:62:59:fb:3d:61:35:29:db:cc:9a:5a:9e:8b:d0:b3:a1:
b5:4b:c3:64:64:45:c5:bf:06:24:81:da:25:09:78:93:f6:65:
21:53:56:81:b2:48:cb:1a:5e:85:b5:3b:ce:63:87:9f:a0:fb:
c7:ac:bf:a0:03:2a:98:0d:74:c5:38:66:8d:7b:69:fb:a0:e9:
87:39:f5:9d:33:7e:8d:bb:cf:75:80:9d:ca:af:40:61:39:ab:
ec:09:8a:41:68:fb:a2:77:6f:71:66:36:5d:a3:fa:e8:5b:d7:
2a:f1:ec:36:ef:b1:68:05:9c:23:fa:c5:4a:d4:e9:96:30:d7:
de:75:9c:ef:ce:83:b5:52:c4:90:2f:d5:e0:b4:f2:c5:e5:ea:
8f:a5:c0:c6:9d:6a:28:19:e8:7c:4f:81:8e:fb:a2:38:f3:68:
7a:9a:45:59:a6:c8:75:68:71:5a:13:a1:66:c2:d1:d5:ce:9d:
2e:21:57:a2:73:d4:e1:00:4a:89:8a:5c:7e:2a:64:70:4d:0d:
6c:94:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:20 2025 by rpki-client