Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: gjjRnMQgEW8ZdFw1GxWqe+OW8/nUYpWnFxAHNgnXwuA=
Subject key identifier: D5:B1:3B:FD:D6:3E:F0:62:03:55:7A:B1:25:69:0D:3B:D2:C8:4F:AC
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 0199FC8F1F540AA895602042E481A7AB215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 088D
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: craGtYGMGwOV2hIi/qYJuv/514hVI6kdNFAXeUDYWdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1f:54:0a:a8:95:60:20:42:e4:81:a7:ab:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=d5b13bfdd63ef06203557ab125690d3bd2c84fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:3b:5b:f4:89:8d:66:5b:43:cc:55:b1:c0:
5f:58:8b:e5:52:ab:c3:bd:8d:fd:a9:2b:76:04:fb:
af:57:49:b4:6c:4f:4b:21:00:74:e7:c1:07:0e:07:
0f:9e:98:95:c5:40:9e:7d:79:6a:3d:c3:1f:84:a3:
86:65:5f:20:06:d6:01:6e:f6:d5:10:23:c4:45:a6:
5e:9f:06:67:35:9c:ae:22:1c:92:6e:fc:59:b5:f9:
13:28:51:db:6a:c7:28:0e:30:72:d0:ca:61:b9:74:
9c:86:28:ba:a5:57:e3:ae:94:81:02:9f:dd:51:d7:
01:a6:97:14:6e:04:ae:3c:c0:b8:5b:b5:7b:b2:fe:
36:87:ac:da:a6:ba:e0:57:b2:ad:3d:ec:55:ce:a2:
3a:28:89:79:8e:24:e8:6f:6e:82:43:ed:dd:e8:70:
b2:41:89:49:05:45:d2:31:a0:39:d5:ba:0d:a9:08:
4a:26:45:64:c9:85:aa:49:8e:d0:44:53:e7:87:64:
08:ab:81:08:79:89:97:57:4c:ed:79:88:d6:21:20:
55:13:94:f8:dc:4d:82:c0:33:12:e3:6b:9f:b9:ed:
29:90:cd:fd:23:e9:aa:1d:d5:0e:15:b2:bb:d7:32:
63:ef:b9:50:94:11:2b:88:cc:92:53:da:4d:70:e0:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:3B:FD:D6:3E:F0:62:03:55:7A:B1:25:69:0D:3B:D2:C8:4F:AC
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0b:3c:a3:a1:a5:e6:8f:8a:3c:5b:46:25:03:09:c5:76:7f:
f0:90:fc:a9:fb:96:0e:5a:5b:3d:1b:6d:91:4a:f5:e6:32:aa:
87:dc:20:b8:87:22:dd:af:dc:59:09:4d:0d:04:2f:72:4c:30:
a1:02:d4:c7:b7:6a:7f:9d:dc:84:f3:ce:e3:c2:be:ad:83:6d:
c9:27:01:b4:9b:df:dc:59:06:bb:fc:3a:3e:17:5e:a3:c3:d2:
26:eb:e8:6a:46:4a:db:e8:61:2a:c9:56:8f:82:4f:9e:9d:ed:
38:8b:1d:72:26:2f:ee:dc:50:94:71:fd:81:0f:59:ee:e6:d0:
2d:55:ee:60:f6:af:ac:86:c7:af:fe:56:7f:2b:4e:18:e7:c0:
42:29:7d:c2:0f:1a:f5:67:da:15:c0:7a:45:06:0a:ca:42:3e:
d1:73:fb:c5:28:5f:e5:ea:3a:02:a4:6f:23:75:42:92:a0:db:
2e:c6:86:46:04:1b:55:df:05:54:17:54:71:fb:57:2c:f6:0f:
81:0a:b3:9d:cb:b3:a6:8b:94:ae:26:26:78:ff:70:0e:d9:1c:
e5:b2:0f:68:bf:c7:c5:d9:f3:97:53:1b:74:58:b4:83:6e:6e:
9a:fb:95:f5:6b:db:5b:94:aa:be:63:08:ce:ac:60:e8:e0:7c:
d3:88:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:45:00 2025 by rpki-client