Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: +he8MU4nUuzHcVPVMLDKXbJXFKPXda5K2FXXSMME8uw=
Subject key identifier: 37:C4:5A:7C:AB:34:F6:24:11:2A:BF:FF:FD:29:37:4A:2D:7C:94:E1
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 0199FC5910D66BB0A4BBE83FE02002EF37D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 0790
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: ZBRgtz6q0OVvoycWdme0uVg81GEx/PDCbY4JgDk59Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:10:d6:6b:b0:a4:bb:e8:3f:e0:20:02:ef:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=37c45a7cab34f624112abffffd29374a2d7c94e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:04:cb:1c:bd:84:55:93:7a:45:70:78:e6:
5b:6f:f6:48:b9:c8:c6:2c:ae:a2:cc:53:57:82:10:
1a:af:ea:b0:8e:e5:2e:1f:3d:0d:c4:22:1d:f6:7c:
21:d4:65:22:c7:b3:3c:69:a2:8d:bf:8a:b6:08:ec:
c9:94:55:67:11:6e:dd:14:c7:4b:9a:b2:35:a8:df:
dc:2b:bc:b7:b7:8e:7e:55:94:dc:8e:fc:d4:e5:8c:
bb:17:f2:8c:4d:a6:7b:80:c3:41:76:2c:1c:09:82:
1e:59:be:d2:6e:35:8e:f2:ce:d4:e2:32:2f:e6:26:
a4:c6:83:2b:f1:92:e6:2a:2e:09:21:a4:81:09:a9:
2c:ec:6f:80:a4:f2:6f:19:7c:1a:6a:3e:a1:63:cf:
2f:23:69:7c:75:5d:52:8f:ce:13:0a:1d:d0:c7:71:
db:04:e8:fc:85:56:e4:11:92:98:f4:c6:21:ab:52:
ea:1d:9d:40:7c:a5:61:50:72:05:df:8d:a7:c3:b0:
c1:73:9f:a9:c4:63:5a:9c:8c:c9:3c:77:b4:c0:f6:
80:7d:f7:11:64:10:4c:d8:88:cd:af:67:ee:1f:2f:
f3:47:71:d9:b7:08:31:47:55:bc:fa:08:75:bc:dc:
22:e2:26:2c:27:f0:78:8b:5d:22:54:0c:72:e6:3c:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:5A:7C:AB:34:F6:24:11:2A:BF:FF:FD:29:37:4A:2D:7C:94:E1
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:30:b4:ce:00:51:66:74:4b:c7:d3:34:26:30:87:b8:09:8b:
26:63:22:46:0e:30:59:2d:8b:3b:aa:13:19:31:cd:5e:9e:91:
81:cc:a2:0b:84:be:41:4f:25:8a:d3:ea:9f:d9:5a:7e:e3:50:
d7:92:59:54:99:bb:0b:2d:9d:d2:4f:8e:e7:27:6b:dd:b6:05:
f2:ad:f6:56:c6:09:35:78:eb:2f:ec:f5:a9:c9:08:27:ca:07:
9c:54:d6:3a:94:65:59:53:0b:d9:1b:be:9c:31:06:23:c7:8c:
cc:79:3c:d2:a5:06:58:f8:84:b5:71:a8:11:ea:9d:55:31:c9:
90:b5:a0:28:9b:f6:69:2a:e7:97:74:94:54:cf:26:0f:a8:13:
c8:da:99:10:76:3d:fa:dc:17:e2:9a:e1:d8:50:51:86:13:d7:
41:82:08:a8:b2:b7:2b:29:e9:15:0e:1a:7e:bf:a9:87:79:eb:
7a:af:19:d0:e4:9e:2a:00:cd:b9:c3:7c:8b:65:f8:c9:ab:a3:
b2:27:57:6e:35:d4:85:1c:88:41:20:09:2d:f3:e2:75:7c:b7:
25:99:02:34:dc:f8:e7:9f:dd:cb:8d:21:cd:70:8a:a2:ed:aa:
5b:23:65:f4:b9:ca:cc:d2:c2:41:9e:5f:d6:9f:96:a9:de:27:
b1:e4:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:44 2025 by rpki-client