Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: allcqex+3HtW0DA3MDcEp8d9Qg8pmpqTMDi7YeD/Aj0=
Subject key identifier: 5A:3C:5F:28:4E:AF:A6:68:6E:C0:98:BB:F3:E9:3C:52:FF:86:7F:D7
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 019A4DAAF343DB7156D277EC372AD4444B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: +gaTvNEZI8h3tXBqDAyolke7epTL0DmIzl557TWUlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f3:43:db:71:56:d2:77:ec:37:2a:d4:44:4b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=5a3c5f284eafa6686ec098bbf3e93c52ff867fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:07:c9:9c:5b:ee:1d:fa:ca:8a:59:ab:ce:
a1:79:cc:d0:e9:09:59:cb:3b:65:d2:03:8d:c0:f9:
eb:aa:22:f4:28:33:57:b2:50:82:56:6e:4c:05:51:
5a:51:9a:07:31:e7:2a:2f:31:20:13:cd:fb:f8:07:
e1:72:b0:91:20:e2:d7:27:81:8a:c4:76:b9:30:45:
d3:81:12:ca:66:93:17:be:8b:e4:f8:f6:e1:6a:56:
87:d7:ae:1c:7b:1e:25:fe:ab:46:87:b6:d7:fb:0a:
6a:65:39:2c:41:c6:58:4c:64:72:7b:72:c7:5c:56:
25:a5:66:b0:7f:55:bc:43:99:70:72:11:10:d7:82:
41:e0:ff:f2:8a:7e:ee:c0:98:2b:5b:02:98:ea:4e:
16:c7:36:c8:db:a1:e5:ff:c3:d9:a0:0b:2b:b5:8c:
d8:bb:af:3c:5f:a5:ff:47:ba:34:67:9e:bb:cb:71:
05:c6:57:09:9e:a3:32:b3:7b:10:8a:e3:bf:fa:75:
29:98:f2:9d:05:08:7e:8a:b4:b4:17:1b:f9:5b:5f:
11:66:1a:c2:7b:39:ed:74:0d:05:0a:44:3e:73:cc:
a8:17:f6:21:c7:86:df:fb:94:44:6d:c9:be:63:f0:
ed:4e:ef:59:61:33:4e:8f:8e:83:67:90:b0:88:7f:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:5F:28:4E:AF:A6:68:6E:C0:98:BB:F3:E9:3C:52:FF:86:7F:D7
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:86:39:76:cc:36:07:a4:db:a9:db:3b:f5:94:55:2d:49:dd:
38:13:ae:f8:88:e2:55:f9:ec:a3:e5:4a:6d:4a:ea:89:76:b1:
3c:7c:21:f5:ed:79:0d:67:6a:48:51:da:7c:4f:11:db:7c:fe:
f9:1e:0c:4b:93:31:3c:27:d0:f2:03:8b:2d:37:dd:ce:85:6c:
66:2b:d5:d1:13:d7:fd:ec:de:f5:41:00:a4:9a:68:32:7e:78:
c4:72:ea:30:1d:5f:9a:72:9b:8b:a9:ed:78:05:c4:8f:2a:5b:
d4:14:8f:35:ab:1d:31:2b:66:3f:5e:0e:b8:1a:2f:f7:cb:68:
ec:a9:77:d3:82:c6:0d:b9:67:b1:91:fc:5c:62:e3:33:d4:2b:
5b:e8:1a:76:44:36:f7:c5:a9:e9:33:6d:2b:11:cc:79:82:d5:
f7:6e:07:60:71:76:97:1a:44:79:79:60:51:3d:25:1a:6e:b4:
dc:2b:97:d2:42:5d:67:ed:ed:3f:ae:0c:ab:7a:fd:f6:a1:9d:
0e:65:8b:89:4d:9f:1a:d8:09:98:e5:00:61:85:2b:b1:f8:58:
e3:4c:d8:53:71:e5:cd:cf:0f:c1:98:1f:fd:56:0e:70:d0:99:
69:24:7f:33:64:e6:5f:87:8d:f1:bd:9b:86:11:30:40:e0:6a:
f2:e6:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:00 2025 by rpki-client