Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: nYI+7sgco4/cGoOXS1tZkYlh6rQC/1hzlvsTxYylL2Y=
Subject key identifier: B8:4C:7D:21:5E:C8:13:5C:24:3C:C6:5C:E4:EA:10:08:5A:23:0B:AA
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 019A4EF49980862B17E4F975A8F302D9F58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 03D7
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: RUaZNwU20fgu27OGWHNiwFZ9fQASpqexGK7q97OLJ68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:99:80:86:2b:17:e4:f9:75:a8:f3:02:d9:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=b84c7d215ec8135c243cc65ce4ea10085a230baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:6a:33:93:22:66:20:84:78:ee:a3:95:49:
c7:54:37:3b:3b:7b:80:dd:ec:81:6c:79:22:dc:80:
3f:23:19:a7:2b:5c:ae:18:13:9f:8b:99:fb:9c:c3:
14:f2:db:89:f0:e9:91:8e:86:6e:84:78:a7:6e:fe:
52:28:45:8d:da:f3:0a:71:e1:24:0f:37:86:0c:56:
a4:ea:d3:e4:70:b7:a1:f6:6a:a0:cc:81:af:a7:59:
ff:5c:9e:a9:e8:43:76:81:2d:d4:b2:7b:c2:9c:7f:
ec:b1:55:5d:a1:6e:82:a0:b1:67:da:47:8a:7d:cb:
a7:a8:a1:cb:5c:c7:7e:3a:ed:ee:36:7c:b4:eb:b5:
ae:d8:cf:75:63:8f:86:70:bd:f4:7a:52:53:e8:38:
d3:1b:ed:fe:3f:f7:4d:c6:7a:d4:8d:42:45:78:8d:
1b:40:95:0d:d1:c2:6a:56:79:29:85:02:6d:5e:5b:
da:bc:1b:6c:8a:8e:70:3b:8d:a6:75:4d:9a:eb:2a:
4e:35:1a:5f:69:33:4f:55:81:b0:87:f8:1a:cb:2e:
fd:ea:a2:f5:ce:1d:b8:74:7f:fe:9c:3a:5a:24:0f:
ee:2f:c8:f7:a3:a9:b4:83:27:b5:24:16:58:8f:9b:
9f:48:17:1b:42:86:9f:fa:61:87:8d:d2:66:bd:0c:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:7D:21:5E:C8:13:5C:24:3C:C6:5C:E4:EA:10:08:5A:23:0B:AA
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:72:78:2c:eb:f5:46:1f:65:d1:c7:07:7e:37:8f:e5:83:11:
5b:20:75:c3:a9:e6:d6:a4:06:9a:87:b1:53:3f:73:ef:76:0f:
29:39:67:59:23:10:6f:d0:78:2f:ee:8c:64:cd:ee:b3:5d:5a:
5f:2e:a7:f2:eb:06:0a:0d:b7:97:51:9b:9b:51:8d:b6:f9:8d:
75:02:10:13:e3:d0:9d:12:57:80:5e:0c:80:b9:12:08:b2:6b:
90:6d:90:88:0f:c7:4f:a6:15:3e:47:1a:09:aa:47:60:83:1f:
a8:58:10:a7:9c:80:7a:4c:11:79:a0:3b:38:22:5b:94:6e:e9:
22:a2:d8:2e:a5:8e:68:ff:61:e6:5d:5b:26:6c:d5:57:28:0b:
49:0b:a3:84:1f:45:db:4a:e2:77:de:23:98:be:71:41:e1:18:
97:6f:58:61:d3:ed:85:22:e8:96:64:ea:bd:0e:ec:59:ed:38:
73:ae:22:f8:d0:fe:b7:9a:8e:cd:7a:57:71:dd:a0:7c:85:46:
d1:d3:b5:8e:30:15:6e:f1:46:22:24:b5:31:b3:27:96:78:23:
73:ff:6e:dc:a9:bd:c7:ad:2a:8e:cc:99:45:39:5f:56:31:6c:
ac:39:ad:f0:0a:4b:bd:a3:49:5b:6c:0b:db:53:fc:1b:1c:21:
1a:52:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:22 2025 by rpki-client