Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
File: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft (raw, json)
Hash identifier: e0mKDpD53jDF7MFDupCxSbjR3eHKdVOA5WlJ+A6IipQ=
Subject key identifier: 68:82:CD:0A:AF:5C:C8:25:17:C3:CF:84:81:40:4A:F2:DB:57:0A:C7
Authority key identifier: 80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
Certificate issuer: /CN=80e7137d0d80586246c6aff496727b603d351692
Certificate serial: 0199FC2171D82F5139A6C507FF9FDAF04DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
Manifest number: 44
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl (hash: BrL+XtIyE8SOYjUl0D5Tm0ezUC3D93FruZBPEE9pU0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:71:d8:2f:51:39:a6:c5:07:ff:9f:da:f0:4d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e7137d0d80586246c6aff496727b603d351692
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=6882cd0aaf5cc82517c3cf8481404af2db570ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:68:e3:06:fd:a7:4a:f1:ba:69:cd:71:8a:
8c:0c:69:80:2a:94:98:66:00:9b:d7:51:90:25:73:
38:8b:47:99:e4:b5:67:44:9b:02:b1:74:70:a8:8d:
a5:5e:96:ca:8e:1c:97:eb:53:87:18:b4:b3:2a:c5:
ec:f4:21:4f:ae:b0:44:21:09:64:f9:5b:18:fc:37:
bd:e7:3c:e0:d7:83:a1:71:4f:f9:82:f6:d2:ed:28:
2a:e6:9f:bf:e2:57:7b:48:e6:e4:5f:ac:7f:19:b9:
6b:66:c9:8f:9d:d2:d2:e4:15:57:bd:ae:ea:53:82:
d0:31:25:c0:78:5a:e4:93:fc:51:b8:1a:e7:8f:ae:
e3:67:0c:25:3b:90:3e:3a:1d:e3:7a:17:1c:f4:21:
93:d1:32:b5:f9:a8:6a:18:4c:2e:cd:68:1d:d4:8f:
db:c5:ab:56:b3:48:54:ed:59:98:15:af:76:52:92:
89:54:77:cb:95:54:a0:5e:18:4e:17:67:b9:ee:81:
13:45:29:c6:de:db:fa:e9:0b:27:69:3b:e6:38:cd:
49:05:3c:f1:3d:46:48:fb:0d:cd:05:b9:b0:1e:73:
63:30:c1:d4:ad:72:ff:2b:8b:fa:6f:2d:c0:fc:bf:
ba:0f:0e:94:0d:12:c9:a5:72:6f:ce:07:bd:5d:06:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:82:CD:0A:AF:5C:C8:25:17:C3:CF:84:81:40:4A:F2:DB:57:0A:C7
X509v3 Authority Key Identifier:
keyid:80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:25:f3:2f:13:f3:bc:69:ca:20:aa:09:54:64:44:e0:d9:
ec:6f:40:01:14:a5:f1:7c:83:9a:88:88:57:ac:ea:e1:af:8d:
5c:49:61:a9:a5:5a:1e:25:82:62:21:5c:9c:1f:68:66:57:86:
18:f6:ac:ea:9b:20:a2:a3:36:3c:44:04:b6:1e:07:8e:cc:70:
5d:de:e5:44:76:c0:65:5d:1d:a5:fa:86:0c:fb:fc:85:94:ab:
3d:a3:27:70:27:ad:89:12:ae:25:da:f3:6a:b0:91:21:19:65:
cd:f5:da:f3:39:91:f1:56:69:7e:3d:73:b6:f1:c3:f1:79:c0:
f4:c2:5f:c5:8a:97:91:01:ba:03:ca:45:fa:ef:7d:ec:41:76:
ba:31:61:f3:59:12:c1:9e:af:84:d0:06:70:c2:10:c7:f8:9c:
16:92:47:b5:63:e0:e2:f6:8f:75:6d:cf:16:53:ed:32:e8:4d:
cf:c9:f1:5f:f2:c3:af:d3:1d:bc:39:63:19:97:5a:6c:04:38:
c7:c3:50:41:68:47:cf:14:a1:0a:92:be:5d:6d:12:a6:7e:f1:
4e:75:2c:24:f1:f9:98:b7:9c:15:11:86:bd:d3:1f:d5:4a:6c:
df:61:98:bf:87:4d:8d:e2:fc:1d:7d:7a:33:e9:4a:b2:a1:59:
39:53:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:48 2025 by rpki-client