Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: cUYeqM/sNNMZVQQ68t/TbXbifzANC+oic9iVoRBOY9s=
Subject key identifier: 24:56:39:3B:DD:AE:48:07:3C:26:07:B0:5F:80:F2:72:B9:7D:50:63
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 0199FC591BD2C20D7FF12B6FF153B4CED6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 12:02:02 +0000
Manifest this update: Sun 19 Oct 2025 12:02:02 +0000
Manifest next update: Mon 20 Oct 2025 12:02:02 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: 6tvsO6GrcKayLq5+cLW5gsH76BpxIX/aid5BBuuhBoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1b:d2:c2:0d:7f:f1:2b:6f:f1:53:b4:ce:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Oct 19 12:02:02 2025 GMT
Not After : Oct 20 12:02:02 2025 GMT
Subject: CN=2456393bddae48073c2607b05f80f272b97d5063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3b:43:9b:40:da:78:a4:67:4c:88:98:d6:58:
3a:3c:90:ca:4d:a1:bd:e8:ec:b4:0b:03:30:e3:14:
79:12:d9:b0:9f:1d:80:db:15:f9:8f:33:10:a6:25:
37:1e:60:9b:5e:91:1b:be:2e:09:8e:01:41:57:b7:
72:57:4f:6e:65:ff:09:b2:76:6c:8b:6e:b5:c6:fa:
b9:6d:a9:7b:6b:88:41:c4:d1:0b:de:dd:31:53:ec:
5a:0f:28:8f:89:8b:79:97:3d:fc:6d:23:7f:fd:d4:
8c:94:6a:8e:25:3b:46:54:77:09:c8:88:3b:87:4c:
3e:bb:08:5c:5d:95:8a:ee:c4:72:2a:94:4e:d3:24:
03:d7:8b:14:fb:5b:d1:fa:47:f4:05:6a:bd:a5:4d:
89:aa:c5:2e:25:39:ca:04:e0:36:18:30:4c:b4:c8:
36:f2:5e:82:55:27:fd:2c:95:56:3c:1d:20:76:11:
b9:83:bb:cf:b8:18:d8:8c:b5:67:fa:4b:1d:23:a0:
51:b7:a4:86:1e:28:01:d0:24:22:eb:83:9c:54:ab:
e5:fa:fc:ca:14:b9:1c:7b:4b:b6:50:ac:8b:8c:28:
9b:d5:03:76:98:fc:95:9e:45:cc:f0:36:1e:d8:0c:
0d:1c:de:50:7b:2f:28:6d:8d:60:2e:d7:b3:e4:75:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:56:39:3B:DD:AE:48:07:3C:26:07:B0:5F:80:F2:72:B9:7D:50:63
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ff:72:21:5b:93:72:db:6b:ce:d1:8b:a8:5f:60:ad:44:0e:
e4:5b:e3:15:fe:c9:00:28:23:d0:70:40:fb:5e:16:44:e1:bc:
fa:85:52:c8:0b:dc:77:19:9d:7b:d6:13:9e:c7:02:50:7d:85:
64:8d:00:43:5b:94:ef:d9:1e:b0:4a:1c:a7:16:33:d4:df:fc:
1d:bf:f7:64:d1:b5:07:f1:ab:6f:22:7c:90:34:a9:c1:95:76:
80:03:04:5b:b8:23:c6:cf:38:04:29:2a:8b:ae:89:89:99:9a:
07:51:35:71:a6:6e:b5:7b:6c:d6:e4:b7:ca:fa:6f:d5:7f:f5:
58:1a:8c:2b:a4:1f:d4:63:8c:24:23:f0:a7:dc:11:47:7a:99:
61:f4:6f:0b:dd:8c:45:38:96:8f:00:47:f1:75:08:df:4a:f7:
44:ac:f7:65:0d:6d:12:48:68:26:2c:0c:d7:71:da:25:de:1a:
72:d4:68:39:61:f1:83:a7:2b:22:70:57:ac:d6:96:39:69:40:
6d:06:41:38:67:0d:e4:60:30:61:56:9b:09:6d:a7:c9:c1:e7:
7d:21:a6:bf:e3:1c:5b:98:cb:07:ec:28:0b:c0:9e:60:61:8d:
e0:ac:76:66:77:69:af:32:3e:b5:c2:30:a4:af:57:4f:52:0a:
bb:f5:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:56 2025 by rpki-client