Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: P7YAK64iUTjbJ4e83d/b7ZvTRKA6FW1Sr+hR8SzzAms=
Subject key identifier: D3:C6:03:12:F7:25:65:F3:2D:7A:64:F0:50:30:87:29:5F:2F:2F:74
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 0199FE4744152F397FA8604D2B13D38E7BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 0650
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: 6PDM8lWOifFw1iYfLaTZ/hnk/2l04DJ62f6z5Rft/kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:44:15:2f:39:7f:a8:60:4d:2b:13:d3:8e:7b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=d3c60312f72565f32d7a64f0503087295f2f2f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:48:e0:6c:9c:a7:4b:84:2e:c6:3c:48:ce:
c6:45:fe:79:cd:f4:00:4d:30:a2:6c:ac:0a:4a:f1:
69:ee:83:61:10:f5:e1:ba:0c:23:98:a9:de:cf:0d:
a8:67:1f:5e:7c:8e:81:9a:db:76:56:cc:5b:7b:1b:
fd:9d:e7:38:2f:31:ba:d1:be:3c:05:f5:61:8b:87:
a0:4a:64:b0:80:01:d7:50:07:44:83:4b:a0:e1:e4:
64:09:54:44:8e:60:e9:36:9e:ce:6b:e5:9b:f6:71:
b1:52:35:6f:cc:cf:94:4a:67:63:38:82:3a:f0:6b:
51:31:21:96:ab:7b:7f:74:b9:2e:63:97:07:1d:73:
ab:d2:ed:a4:8f:c7:6a:49:86:66:f7:b4:56:96:bc:
25:fb:42:88:8d:d2:ce:b9:41:a0:0a:0a:51:3c:fb:
ab:9a:aa:43:5f:36:34:db:7b:0c:5a:4a:33:5c:af:
c5:38:30:b8:32:41:40:1e:94:00:43:f4:e7:26:ce:
89:0c:39:4b:4d:0e:1e:db:60:8c:96:9d:28:53:1a:
4c:68:b6:82:61:3e:af:72:79:9e:19:ae:a7:7b:a5:
60:bd:d3:71:05:7c:11:44:84:7d:24:0d:80:01:32:
4a:4e:84:f2:58:03:cd:6b:ae:ac:3a:28:ab:6e:41:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:03:12:F7:25:65:F3:2D:7A:64:F0:50:30:87:29:5F:2F:2F:74
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f0:e1:7e:53:aa:3b:9e:e7:e5:46:c0:35:80:8e:9a:80:6f:
5b:c8:5f:fd:c8:f3:5b:b4:c4:8d:62:29:d6:ba:68:ca:ae:47:
3a:b5:44:5b:c7:db:8a:27:69:2b:91:0b:6d:81:36:95:7f:e4:
75:8c:a7:ab:a3:6e:4b:08:df:99:c8:48:73:b0:c8:30:79:ab:
3b:85:e8:6d:69:3a:8c:b6:f2:99:b6:a3:33:c2:b0:91:64:f7:
8f:02:01:ca:65:13:cf:5f:d1:7c:0f:53:11:58:41:99:94:8f:
7d:77:a5:d3:51:e6:90:47:ec:5d:4f:e1:54:e8:51:00:78:89:
e4:01:20:88:16:7a:83:19:d3:7b:90:d0:5e:ce:b8:9f:06:b1:
06:71:d5:be:64:33:cc:44:47:d0:33:23:98:a7:27:bb:db:b2:
65:8f:c2:ea:24:f1:c5:3e:30:e2:f8:cf:c7:0e:ab:74:0d:76:
fc:ed:bb:42:45:77:17:6b:ba:6f:8e:0e:0c:81:ce:fa:8d:4f:
24:ab:d1:1d:4e:61:96:3b:33:16:ed:71:9a:f8:7f:b8:34:b0:
d8:22:ea:8c:45:63:ef:52:ad:f1:27:6b:29:61:f2:4e:44:78:
7f:8e:3c:a5:04:a6:dd:92:4a:7d:b3:b4:ca:2d:8e:9d:18:2f:
4b:e7:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:58 2025 by rpki-client