Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier: JJahoxKwP1pPsTKPBEd54S99CVQinliSVcN6LB2W5Cs=
Subject key identifier: A6:44:73:1F:52:48:14:CE:1C:84:E3:CF:4F:5A:A7:E3:A9:AD:B3:23
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial: 019A4C611D8A62C5FE3C4A7F25624399EA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 01:00:24 +0000
Manifest this update: Tue 04 Nov 2025 01:00:24 +0000
Manifest next update: Wed 05 Nov 2025 01:00:24 +0000
Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: wUiV+dlplgi4K+Qvml0JSZjAJKVepWp2T05yWziDI1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:1d:8a:62:c5:fe:3c:4a:7f:25:62:43:99:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Validity
Not Before: Nov 4 01:00:24 2025 GMT
Not After : Nov 5 01:00:24 2025 GMT
Subject: CN=a644731f524814ce1c84e3cf4f5aa7e3a9adb323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:32:0f:f6:67:b4:fa:cf:a6:ab:26:e8:c0:
60:29:4f:bc:e2:fa:d2:97:f8:c7:f2:9b:80:f9:9b:
44:d6:30:6f:2d:4b:df:0d:26:c7:94:c1:73:34:3c:
04:f8:1e:00:46:75:99:a6:e5:b4:89:ba:fa:6f:5a:
7a:a6:38:ef:45:01:24:10:a9:08:b4:38:08:c8:10:
9f:08:61:e7:9e:c2:d2:4f:ca:7d:fb:2b:84:18:4c:
41:b1:e8:71:f1:8e:b6:69:8b:7d:7f:aa:7d:b2:fd:
46:94:f3:3a:3c:70:16:df:55:fe:e3:56:a0:54:2a:
a3:98:ba:b2:a9:77:f1:40:cd:7f:59:bb:7c:08:78:
c6:6a:e8:61:3f:39:0f:85:c1:60:74:45:38:35:90:
bf:e7:a6:6e:e8:61:aa:17:84:5e:05:72:8c:1a:db:
98:e5:99:91:fb:52:b7:be:fb:ca:13:77:48:31:b2:
6c:5e:95:cd:a4:0a:c7:56:50:ff:fd:17:f9:61:e1:
ee:12:62:15:56:2b:ed:0e:be:00:f5:bc:8e:86:d2:
4f:5a:1e:19:37:be:6c:74:66:54:3b:87:87:0d:8c:
e9:85:37:b8:bb:d4:f5:cf:b5:c9:5a:69:3a:d8:0f:
e5:fe:9b:b4:69:3c:31:5f:7e:f1:b0:33:c4:a9:5a:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:73:1F:52:48:14:CE:1C:84:E3:CF:4F:5A:A7:E3:A9:AD:B3:23
X509v3 Authority Key Identifier:
keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d8:6d:f4:48:d1:b5:b1:a7:97:76:93:8b:f3:83:55:76:b2:
c8:d8:4f:2d:be:0b:e8:87:3d:78:43:63:3a:91:41:ef:da:41:
d8:a4:71:7e:8e:04:4d:ae:78:4b:51:2b:0c:67:36:03:5b:24:
23:b8:bd:64:67:90:f4:15:c5:03:22:0a:cf:5c:66:ee:e6:14:
3b:77:a5:0f:da:57:5a:5f:9a:04:e7:23:c5:80:a5:b0:d7:46:
59:9a:99:9d:f9:8f:5c:07:28:5a:05:6e:1f:81:0e:eb:fc:0f:
fc:bc:dd:bd:b7:de:40:75:e3:d8:7f:b6:ce:7d:45:9f:b4:67:
42:2f:2a:95:ef:67:08:45:3e:48:59:c7:1e:cc:a9:5a:f1:60:
f2:d1:80:19:09:ea:0d:0e:48:2e:7a:6f:14:94:03:67:b9:ab:
46:2a:74:f7:17:52:81:4b:1c:68:8d:0a:d4:2d:51:65:86:a2:
90:76:65:7a:e6:45:b9:58:43:4e:6b:86:bc:ce:4e:3e:3b:de:
bb:e7:83:98:c4:6d:b5:df:26:f1:2d:42:82:ac:74:5f:1f:62:
40:a1:3a:af:a3:e9:a4:d5:fe:20:c1:2d:1c:83:cc:c8:ec:91:
ae:93:70:a4:fb:e3:d2:2a:71:aa:de:c1:f9:9a:59:dd:26:43:
a4:ef:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:57 2025 by rpki-client