Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: 3ei5JiaJMZZq4PQfDE6ceDUw/h/XuvPyXs/4inykm+Q=
Subject key identifier: B3:A3:BE:2F:95:F8:95:7C:5B:39:91:82:22:18:4D:7B:3A:07:A0:DF
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 0199FBEB0A09412C904CB958047499F30FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0E25
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: 6h/2iNIOGBZrR9GqtuD9udWYSq0LYzVeFkUqIDoyEUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:09:41:2c:90:4c:b9:58:04:74:99:f3:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=b3a3be2f95f8957c5b39918222184d7b3a07a0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:53:f7:f9:59:7d:41:5b:4d:c5:ed:a4:55:
f2:6b:d3:00:e8:56:47:c3:1d:38:56:84:24:69:54:
41:b2:a0:93:bf:36:10:39:67:b1:47:34:97:f7:86:
82:75:e0:89:bf:82:4b:92:82:d3:e8:21:85:42:3f:
c4:3b:d1:82:f8:7d:91:a9:49:2e:14:bb:4b:fc:8d:
57:b3:a9:76:17:73:a5:78:81:fb:fe:7e:d7:ed:90:
b0:ff:10:f2:93:5c:c9:b4:a6:02:a2:2b:b7:6b:c6:
1a:1b:f8:08:c5:14:a8:7c:ff:bf:8a:ef:ae:b2:b2:
49:61:26:f1:5f:06:f0:12:9a:d6:f2:92:77:f1:dd:
12:e8:ae:0c:35:67:70:17:54:be:66:3f:d1:b1:73:
0d:7f:9e:04:13:08:1a:aa:89:1f:55:e8:e9:63:b6:
fc:d1:27:b7:67:f2:59:c0:bf:6d:24:c4:64:13:b3:
e5:f7:36:57:c8:c5:60:cd:bd:57:8c:42:15:5d:f4:
34:80:6e:96:07:e1:de:1d:4a:41:d9:14:2a:f6:f0:
76:54:f2:e2:8f:75:2f:7e:6a:5d:3e:94:b7:d1:eb:
d2:35:30:64:c1:62:ec:c2:13:b7:01:af:f9:f1:47:
40:d7:05:5a:ed:ed:b2:73:be:af:1a:3a:8a:94:bd:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:BE:2F:95:F8:95:7C:5B:39:91:82:22:18:4D:7B:3A:07:A0:DF
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:92:0b:90:2e:a1:3e:be:13:d0:f5:4f:f9:c3:f5:a3:34:
40:57:b9:0a:89:0d:ae:83:55:84:fc:35:ab:26:d9:ef:c0:08:
ef:98:64:e2:8f:d4:b5:9c:cd:5a:6f:0e:91:f1:e1:e2:a3:14:
08:96:b8:ee:ff:f1:2e:1a:e5:61:23:09:b7:dd:3b:d7:4c:89:
8d:b9:2b:f0:87:1b:5e:84:9a:d5:1d:85:a6:39:a9:5f:71:70:
d5:6e:98:34:f6:10:0a:53:e9:23:43:36:70:63:63:7f:ad:f4:
75:e7:8f:4f:9b:43:7a:22:f6:e3:2f:d3:c2:3b:ed:1c:a9:4b:
e8:9a:c4:f9:d4:2a:0d:a4:56:e2:78:f4:ed:38:8b:08:25:0e:
d4:eb:d6:d7:47:b8:cc:7a:93:5c:69:31:a2:2b:14:17:40:03:
4d:48:e8:dc:6b:90:e8:b2:6f:19:e3:22:2c:cd:dc:41:ff:02:
89:44:cc:a6:a0:1e:f4:63:c7:79:40:c1:32:fe:9a:b5:87:cf:
38:94:e3:1a:96:67:18:64:aa:a8:fe:38:63:af:db:a2:1f:25:
6e:3f:a2:a4:50:65:47:57:fc:96:36:af:42:ac:84:25:7b:2f:
74:c5:1a:6c:64:0c:20:fd:48:e4:99:20:28:e8:91:5e:c6:cf:
ce:32:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client