Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: pYmCFBs63IJAf1CGE9cSrXDXBL5QrrvVh8ZZ8YFzQN0=
Subject key identifier: B8:54:7F:65:19:83:50:70:1E:03:36:8F:D5:92:2A:82:5E:30:37:1F
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 0199FBEBCC7BAD1BB4F39761F1EDA82D78E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 14FB
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: gj+P37I5uEYE7quqaycE9pJXp3giDziTeer363w8A50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cc:7b:ad:1b:b4:f3:97:61:f1:ed:a8:2d:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=b8547f65198350701e03368fd5922a825e30371f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:e2:22:af:ac:b8:6d:ea:47:ed:8f:1c:b8:
1c:5f:c0:d7:16:06:6b:05:11:77:03:f5:79:f0:ce:
c3:8d:b2:59:9a:39:2c:24:c3:f3:31:4b:bb:19:4c:
78:55:2c:03:48:ab:c6:cb:41:45:11:1e:31:f8:25:
57:07:b3:fe:de:5b:7f:22:ce:84:94:01:6e:83:f8:
5a:7a:01:73:33:fe:99:01:ba:e9:f9:b3:e9:8d:1c:
0e:5b:51:3b:8c:33:60:b3:3d:d6:9a:19:19:04:56:
36:1b:54:1a:03:83:bd:29:b5:2e:41:bb:54:97:24:
36:07:08:a3:41:20:0d:80:d5:f3:db:e9:e1:49:d7:
d9:30:55:50:c4:a0:e2:67:91:01:3b:69:eb:1d:ad:
c7:cc:9e:c4:70:75:71:b1:46:b7:6b:37:86:a0:4a:
39:9b:6c:04:f6:0a:96:c3:1e:76:59:e5:47:a2:cf:
9b:f9:06:e7:51:f6:7e:87:45:38:71:1b:d5:45:78:
8d:fe:18:27:a9:ee:36:90:67:28:c1:bc:1d:60:26:
64:52:5b:29:a4:76:cf:fd:f2:bb:f2:17:7b:40:4c:
ad:c7:a5:eb:37:4a:16:f8:82:23:75:4c:1d:7e:b4:
a7:f7:39:11:7f:83:ef:15:fc:72:7e:63:c9:02:cd:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:7F:65:19:83:50:70:1E:03:36:8F:D5:92:2A:82:5E:30:37:1F
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:08:05:58:2b:3e:52:8d:1a:fc:da:2c:14:3d:72:70:25:90:
e6:81:48:c5:57:f1:be:e5:9d:da:bb:c6:7d:67:ad:33:19:b2:
ba:37:bd:a7:a8:78:31:e5:81:8c:3a:98:d2:a9:65:4f:a5:69:
8f:b5:6d:08:1d:c8:89:ec:26:e0:46:8d:75:bb:10:17:c5:16:
0e:50:0b:4f:f1:3d:b0:a0:3d:6a:f4:8f:19:8c:ff:47:00:d9:
f7:b3:6c:1e:9e:03:38:6b:a1:07:75:32:e6:36:fc:8d:0e:52:
cb:5c:7d:eb:d9:5b:47:8b:e4:e0:0d:39:88:93:bf:dd:d3:fd:
b1:2e:45:23:02:0b:ea:b0:20:f3:e5:a9:f3:27:0e:e2:85:fe:
75:13:1c:fe:ef:de:6a:8e:13:f5:dc:a6:4e:f3:df:cf:6a:56:
51:99:a6:33:8c:48:43:e0:ee:07:13:bd:b7:20:6f:98:bd:ca:
ae:02:3e:30:23:84:e4:5a:a9:ce:fd:66:39:85:01:ce:18:1d:
e2:b6:58:18:f6:17:63:f3:b9:cd:98:e5:7a:ee:96:cb:57:9a:
30:42:29:47:75:93:43:08:62:de:b4:0d:7d:65:be:41:6f:06:
0e:8d:42:8f:f3:e3:d4:bb:88:17:14:21:07:b6:2c:67:c9:94:
90:d7:65:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768x7rRu085dh8e2oLXjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDU1N2E4ODY4ZTZkMjYxNmFkMzY3NTRkYzZkYzkxMmI3
Y2Q3ZDYwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
EyhiODU0N2Y2NTE5ODM1MDcwMWUwMzM2OGZkNTkyMmE4MjVlMzAzNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7fiIq+suG3qR+2PHLgcX8DXFgZr
BRF3A/V58M7DjbJZmjksJMPzMUu7GUx4VSwDSKvGy0FFER4x+CVXB7P+3lt/Is6E
lAFug/haegFzM/6ZAbrp+bPpjRwOW1E7jDNgsz3WmhkZBFY2G1QaA4O9KbUuQbtU
lyQ2BwijQSANgNXz2+nhSdfZMFVQxKDiZ5EBO2nrHa3HzJ7EcHVxsUa3azeGoEo5
m2wE9gqWwx52WeVHos+b+QbnUfZ+h0U4cRvVRXiN/hgnqe42kGcowbwdYCZkUlsp
pHbP/fK78hd7QEytx6XrN0oW+IIjdUwdfrSn9zkRf4PvFfxyfmPJAs2PXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhUf2UZg1BwHgM2j9WSKoJeMDcfMB8GA1UdIwQY
MBaAFIHVV6iGjm0mFq02dU3G3JErfNfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgt
ZGZiYTE1ZTRiN2E1LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jOTIzM2MtMTI1Yi00YzU1LTkyNjgtZGZiYTE1ZTRiN2E1
LzEvZ2RWWHFJYU9iU1lXclRaMVRjYmNrU3Q4MTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwgFWCs+
Uo0a/NosFD1ycCWQ5oFIxVfxvuWd2rvGfWetMxmyuje9p6h4MeWBjDqY0qllT6Vp
j7VtCB3Iiewm4EaNdbsQF8UWDlALT/E9sKA9avSPGYz/RwDZ97NsHp4DOGuhB3Uy
5jb8jQ5Sy1x969lbR4vk4A05iJO/3dP9sS5FIwIL6rAg8+Wp8ycO4oX+dRMc/u/e
ao4T9dymTvPfz2pWUZmmM4xIQ+DuBxO9tyBvmL3KrgI+MCOE5Fqpzv1mOYUBzhgd
4rZYGPYXY/O5zZjleu6Wy1eaMEIpR3WTQwhi3rQNfWW+QW8GDo1Cj/Pj1LuIFxQh
B7YsZ8mUkNdl6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:18 2025 by rpki-client