Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: a5zYR5YzuwYOQDnN+/4eLOuGkBVn+tDlJWGKA/rWzoQ=
Subject key identifier: 7D:C4:F6:4F:F3:01:EC:F4:E2:3E:58:5F:48:45:FE:29:FB:36:BC:00
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019A4E188E4D6C74B7A9FE22E332FE37DC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: A5cfdiv8UgZSAuAHx0g4FaOGrfTWf0+Kpa3FuBJ43Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8e:4d:6c:74:b7:a9:fe:22:e3:32:fe:37:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=7dc4f64ff301ecf4e23e585f4845fe29fb36bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:e5:a1:14:93:41:72:00:38:85:79:79:99:
ce:e8:aa:72:e2:41:68:67:a7:5b:5d:0c:48:36:88:
87:17:aa:b5:fe:bd:68:bf:1e:6f:6c:75:95:84:de:
62:99:b7:48:de:b9:38:12:b1:05:ab:2c:40:ac:d4:
2c:e5:3a:f7:fa:55:74:30:7a:69:16:cb:15:d9:40:
9f:fd:76:26:07:84:ef:2b:ce:c1:13:b9:76:ae:02:
20:1f:c2:ca:f9:82:ac:6d:6a:67:9d:c5:26:d5:29:
6b:a0:f8:43:37:e6:31:4a:b9:44:ba:d5:20:da:b5:
10:3b:80:61:bc:52:55:ee:bc:a8:9a:e7:39:e2:3f:
20:86:4c:b8:ca:1c:9b:3c:91:47:51:52:ff:d6:a9:
de:00:12:41:a0:c3:9f:9d:d5:53:90:cd:bd:2d:02:
6f:86:4b:f3:9a:b8:08:4d:7b:74:fd:49:9d:e1:ef:
dd:f2:ae:66:c8:83:65:4f:5e:05:33:bf:f2:b9:be:
09:b9:92:03:cf:e1:5a:83:e0:f8:6c:9e:10:9c:f3:
a0:2a:df:9e:4f:9e:61:de:88:26:f4:84:71:a6:ac:
61:5b:6d:b0:48:f8:88:10:9f:b0:2f:8b:11:bb:af:
e7:99:f2:6e:27:ae:a8:5b:78:8c:d8:ab:6d:8e:b6:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:F6:4F:F3:01:EC:F4:E2:3E:58:5F:48:45:FE:29:FB:36:BC:00
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:d1:a9:ae:60:7c:e8:01:8f:37:7b:3d:9f:43:9f:05:a3:
cb:4a:a4:0c:70:24:1f:34:f2:35:6c:42:b7:72:73:de:b2:53:
6c:8a:f6:57:64:14:23:d4:b0:93:63:8f:06:a3:30:d1:63:8e:
1c:f5:06:6f:32:67:02:50:bd:e1:2f:20:43:02:3a:88:6a:90:
db:36:77:c9:80:6f:7e:54:d7:2b:07:bf:d3:f3:06:4c:e0:b4:
7d:cf:37:63:bf:cf:5f:d6:e3:05:f2:47:d0:90:02:ff:2d:eb:
37:16:fe:53:c9:52:41:bc:79:a4:a2:d8:ea:15:e3:a2:37:c9:
2d:e3:13:76:2d:01:97:e8:48:fa:64:e0:d4:14:ef:6f:78:43:
66:37:8b:35:50:ba:e3:a5:34:5f:9e:91:f6:ef:92:dc:50:52:
c8:84:d2:7a:99:bf:b4:02:81:36:bc:6b:af:ba:21:ed:cf:4d:
08:3b:31:a5:45:ac:b7:67:06:33:15:2b:a9:d4:23:bb:f3:c2:
56:23:b8:e6:ef:43:62:5f:14:5d:af:f6:85:9f:7f:ae:95:50:
18:e5:ad:82:b7:38:1e:86:69:09:9b:6e:57:a8:1e:ce:21:b7:
56:d4:20:c6:1b:99:66:6a:04:a9:ef:16:84:7a:bb:4b:76:13:
ab:3c:5b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:57 2025 by rpki-client