Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: Pj5WsxCk/afOO5aNSBI0/rF4xLtfNw4/tww7Irx30EM=
Subject key identifier: B7:80:23:59:26:EE:84:C0:80:0B:A2:03:07:2D:8D:4B:E0:14:CC:F1
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019A0290593AC0B1E9F400FF10061C56C912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 051C
Signing time: Mon 20 Oct 2025 17:00:05 +0000
Manifest this update: Mon 20 Oct 2025 17:00:05 +0000
Manifest next update: Tue 21 Oct 2025 17:00:05 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: n5ZD6KCLcw0p85NWiIUtEQdqu8ZqGxl7ycRU4aca6uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:59:3a:c0:b1:e9:f4:00:ff:10:06:1c:56:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Oct 20 17:00:05 2025 GMT
Not After : Oct 21 17:00:05 2025 GMT
Subject: CN=b780235926ee84c0800ba203072d8d4be014ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:7d:36:77:45:5c:6a:77:28:db:50:5e:e5:
7f:88:1d:98:cf:c6:2f:7e:a1:b5:45:8c:df:6e:76:
8a:33:8c:ba:be:e0:12:f2:ae:d8:2b:3f:61:0a:6b:
32:6c:b4:60:60:d6:c8:34:59:3d:ad:5e:31:3f:4b:
e1:ea:95:18:1c:61:96:7c:62:86:fd:fa:80:0e:3f:
8d:af:e0:3b:79:1e:f6:ed:28:6e:8e:81:55:b7:fd:
c8:86:26:79:8c:57:ee:1c:c0:9b:68:10:73:18:e7:
48:21:e3:53:4d:3d:a6:ee:c1:73:86:a8:51:27:a9:
33:d1:14:4a:04:ea:c7:6a:45:3b:94:d3:14:b6:43:
73:e3:15:2f:47:2e:95:87:bf:50:61:85:db:da:55:
36:1b:a9:cc:96:7e:aa:70:43:e4:0a:62:18:95:1f:
f0:7e:80:c4:27:3a:9c:b7:84:34:2a:eb:0e:21:be:
71:07:4c:35:f7:25:24:a8:79:26:b6:3d:5c:91:a9:
3a:b9:af:2b:8b:7d:bf:c9:37:1c:4c:80:25:c5:a2:
a5:21:a7:7c:79:4b:48:b7:cf:e0:3c:05:bc:5f:de:
f3:1b:6e:1f:ee:ba:2a:db:10:fc:93:1e:73:12:d0:
f9:65:87:9c:dc:c8:3a:ec:1c:82:30:86:c9:5f:9c:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:23:59:26:EE:84:C0:80:0B:A2:03:07:2D:8D:4B:E0:14:CC:F1
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:ef:9d:a4:a6:1d:69:fd:ce:07:de:e4:f2:e6:82:ce:df:
27:df:38:38:0f:13:e2:73:5f:49:bb:a1:8a:64:3a:f7:d6:25:
f4:c5:db:62:42:c3:b9:f4:a3:08:7f:20:11:18:0e:87:d4:2d:
e1:fe:ca:67:13:00:00:4d:91:a1:43:06:45:b3:9d:ae:22:a0:
47:75:20:fb:f4:77:f9:fc:0b:d8:20:cb:ba:87:cf:66:8a:a0:
05:e4:7e:bf:e2:fe:db:d6:f7:bc:65:a3:8f:8c:a2:b6:44:2c:
bd:f0:06:92:d3:6b:c2:8e:3d:86:46:2c:53:2b:b9:eb:b3:4d:
c3:d4:31:61:34:9c:dc:3a:bc:f2:19:19:98:10:54:76:7a:44:
6a:e4:16:45:e1:3b:7f:fe:a6:85:88:a3:25:54:2c:33:6d:47:
a2:e1:0f:52:f3:12:51:29:cc:72:d5:85:b8:21:ae:b5:9d:7a:
f8:4e:c4:57:0d:34:d7:92:e6:f3:d0:6e:75:94:99:8c:b7:74:
b8:a0:e9:96:48:d2:74:0d:93:40:57:95:fc:13:d1:26:64:e8:
ef:14:8c:33:2f:89:8c:1e:ec:63:82:d9:98:f2:b6:ad:c9:4f:
19:55:ea:90:4a:5d:17:cc:07:ec:c7:a8:5f:29:eb:2f:c2:7b:
8e:ca:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:12 2025 by rpki-client