Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
File: gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft (raw, json)
Hash identifier: gN0u6C0ivOET1etprxrQ9ty1o6KUv4fG/T1x4NYUmTw=
Subject key identifier: 4F:95:1C:5C:E0:EB:30:94:AD:D8:F8:48:0C:4B:C5:8E:0B:5A:D8:01
Authority key identifier: 80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
Certificate issuer: /CN=80792bdcb621cbf21c0456333b843ca32c131afc
Certificate serial: 019A4DAACF066CC2DD6C7E195AD49B1C25F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
Manifest number: 1182
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl (hash: CDJRcqfOOrP9BSDI+R8FgguZXK1mm1w6GqKVTqQEiP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cf:06:6c:c2:dd:6c:7e:19:5a:d4:9b:1c:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80792bdcb621cbf21c0456333b843ca32c131afc
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=4f951c5ce0eb3094add8f8480c4bc58e0b5ad801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:29:9a:4e:69:e0:96:9b:7e:9c:47:0c:9a:
2a:75:60:23:88:62:1a:f7:5c:25:b6:ac:55:af:97:
74:91:30:4e:87:e5:37:8e:ba:91:db:83:49:e0:bd:
34:76:3e:a2:09:0e:cc:c4:68:e3:7e:fb:cb:db:3e:
b4:ab:0c:ae:02:14:b1:77:ba:35:13:0f:dc:86:02:
3e:87:58:2b:9c:00:61:98:2c:9f:f6:d6:7b:ab:eb:
a6:4f:f3:44:9b:31:fb:f8:df:ad:f6:4b:bb:8d:9d:
36:2f:54:53:91:10:91:e7:08:e0:a0:c6:f6:6d:13:
05:bb:c1:d8:8b:7a:61:1c:c5:e9:e5:7a:dd:73:3f:
f6:12:81:23:fa:f1:77:33:81:ee:01:bd:ef:ee:f4:
ef:5c:30:fb:af:58:90:f1:af:cf:c2:bc:17:f6:6d:
83:96:7e:3f:29:fb:c1:bf:54:03:07:d4:ec:f7:b7:
ee:3a:2a:ba:bc:96:67:54:78:a0:c4:31:41:e1:07:
89:21:55:cd:ef:47:84:d8:2a:6b:9d:68:cc:10:a4:
ba:1a:5b:19:e7:a1:3c:d2:5c:89:c3:db:6f:5d:e8:
3c:b9:cf:ff:cc:8b:1b:0f:84:da:ec:bc:39:f9:2e:
c1:be:e9:a8:3a:2f:a2:d8:6b:16:f1:35:9f:89:7b:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:95:1C:5C:E0:EB:30:94:AD:D8:F8:48:0C:4B:C5:8E:0B:5A:D8:01
X509v3 Authority Key Identifier:
keyid:80:79:2B:DC:B6:21:CB:F2:1C:04:56:33:3B:84:3C:A3:2C:13:1A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHkr3LYhy_IcBFYzO4Q8oywTGvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c48e02-4982-44a5-a121-7da9e88d65b9/1/gHkr3LYhy_IcBFYzO4Q8oywTGvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d1:1e:3a:32:15:c0:17:5d:92:5e:5c:b0:bb:fa:f6:f5:42:
fa:86:4b:50:73:b9:21:7d:70:97:f6:67:c3:16:a6:b7:a3:28:
f2:e0:4f:69:d4:3b:4f:fc:70:5e:ac:9f:ad:23:61:08:ab:bf:
08:5f:5f:d2:04:73:62:83:61:6f:10:f4:34:0b:17:a1:dc:93:
56:1a:d7:c0:a2:f7:ea:07:03:79:42:3e:64:87:20:70:d0:62:
5a:c6:db:3b:93:59:3b:8d:df:d0:1e:a3:de:cd:58:d2:e2:11:
ac:44:33:3e:f0:13:2b:c1:cc:81:78:6c:e3:ce:6d:99:a9:b1:
52:c7:8b:2e:e3:29:fb:8c:b1:0e:bc:6d:66:3f:48:ac:bf:1a:
88:d8:1b:b2:8f:80:ff:48:f7:5b:a4:93:5c:e7:b1:2e:49:c9:
cf:5c:7d:f2:d2:d0:b9:e3:53:9a:30:4a:96:bc:8e:ba:db:a6:
ae:ce:80:79:30:ad:d8:ac:30:1c:fc:5c:3c:0e:66:ac:18:0a:
1c:c9:ca:36:04:c9:29:22:28:a2:8f:5f:e8:21:d9:0c:97:97:
40:5e:a6:3b:9d:5e:24:67:27:0d:f5:5c:8c:c0:8a:60:f3:de:
7c:e9:ff:5f:91:32:2d:be:07:bf:76:93:12:ca:e3:71:87:c0:
31:e3:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:08 2025 by rpki-client