Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: pJZsqXNxvoe5aLhMGcVe0LIY/k5HEu3KS606lAlXSlg=
Subject key identifier: 69:37:3C:7C:9F:7E:EE:C8:C2:4F:16:DE:3C:BE:D8:16:FC:D0:51:41
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019A52D26341C482C22B40A2266730273E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 169F
Signing time: Wed 05 Nov 2025 07:01:50 +0000
Manifest this update: Wed 05 Nov 2025 07:01:50 +0000
Manifest next update: Thu 06 Nov 2025 07:01:50 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: eRuBgoS4uCathtV87hTcjmR0dzLBoS3mlPvoN+isQXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:63:41:c4:82:c2:2b:40:a2:26:67:30:27:3e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Nov 5 07:01:50 2025 GMT
Not After : Nov 6 07:01:50 2025 GMT
Subject: CN=69373c7c9f7eeec8c24f16de3cbed816fcd05141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:b2:af:51:23:21:10:33:ff:3a:9a:e8:de:
d9:7f:fb:d3:5a:40:1a:a7:63:43:56:2d:53:3f:f2:
52:3e:1d:f2:0d:ca:fa:c3:e5:00:d7:67:af:ee:e2:
66:78:66:7d:bb:52:9c:f5:6f:1f:9f:df:36:23:ba:
0a:fd:56:a6:0b:a6:e5:dd:54:66:9b:f8:09:98:52:
df:fc:23:d6:4f:0b:57:33:8e:bd:4f:d6:fd:fe:8f:
10:87:2a:d3:10:92:26:a4:f3:2e:2d:b3:2c:e2:66:
e2:aa:ec:ac:e6:fd:c6:83:84:ff:ba:c6:af:47:23:
de:87:db:1c:40:36:3d:85:3f:99:8e:fb:a5:80:21:
bf:e3:e4:f1:8d:ee:9d:64:41:35:79:d6:5a:1f:ed:
24:2f:6b:9c:74:d1:60:e9:4c:d4:66:ba:bb:16:09:
58:10:46:6a:23:1b:ac:39:f7:66:97:77:b6:21:3f:
21:be:4a:58:ec:5a:a5:15:b6:54:bb:57:92:c9:a3:
95:0a:23:c1:ee:b7:f6:38:14:9d:60:6c:15:7e:4d:
82:d5:16:f6:56:cb:df:99:1b:cd:12:88:30:6b:5f:
09:0e:46:87:ec:07:44:c6:09:fa:cc:57:68:45:b3:
88:ba:b1:06:f0:05:21:b1:4e:20:7e:a2:8c:9f:c4:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:3C:7C:9F:7E:EE:C8:C2:4F:16:DE:3C:BE:D8:16:FC:D0:51:41
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:0d:0d:e7:98:e4:16:24:34:cd:ce:af:92:12:66:71:07:
cf:21:1e:02:a6:01:29:76:55:a3:5a:d0:ac:5d:02:b4:3e:36:
e0:57:35:f8:80:c2:da:10:7a:16:3d:c1:b0:ac:7e:0c:46:80:
39:11:e7:fe:c6:6e:e5:d6:e3:23:11:39:9e:3d:0e:3b:a5:f4:
7a:39:7e:54:3e:65:76:25:4f:ad:36:c4:ab:60:a3:79:ee:44:
9d:35:47:d6:5e:44:52:d4:8a:c6:ab:2a:b0:80:f7:c6:64:01:
e1:db:0a:22:50:73:1d:73:af:67:4f:9c:0b:25:5b:c5:53:52:
df:be:4e:2a:05:a3:b5:36:14:b3:e5:73:dd:fc:93:61:74:2e:
70:d1:57:0f:36:ea:81:5f:bd:dd:b2:6a:13:be:3b:e2:27:6d:
ab:68:7d:57:08:b5:22:31:9a:a6:e3:da:6d:95:ca:2a:8c:25:
1e:8d:ac:4a:54:22:ff:41:51:c2:0b:60:1d:1b:e1:d6:3c:8c:
75:5f:26:42:cf:12:86:ef:2f:cc:0e:9a:83:bd:c7:59:3e:0f:
5b:f4:a2:c5:88:f6:dd:1f:e7:90:be:73:c2:3e:6b:81:d4:5b:
aa:16:3b:d2:0f:72:e6:30:84:cc:6a:80:1e:55:1e:67:9a:f9:
e6:a5:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:39 2025 by rpki-client