Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: 2hGPFZqmN1pid4EATsy0yTe7uOYZ671honD5h52DQ2E=
Subject key identifier: DE:AB:5E:E3:DB:33:AB:D3:67:88:62:03:6A:A6:EA:B3:71:60:E8:A0
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 019A50E2BD208291CC05B9D95A298A7C37AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 133D
Signing time: Tue 04 Nov 2025 22:00:27 +0000
Manifest this update: Tue 04 Nov 2025 22:00:27 +0000
Manifest next update: Wed 05 Nov 2025 22:00:27 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: uqMnOz5iNQMzq+bTWJekpKg+14IsInPsLRlDVI7EYiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:bd:20:82:91:cc:05:b9:d9:5a:29:8a:7c:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Nov 4 22:00:27 2025 GMT
Not After : Nov 5 22:00:27 2025 GMT
Subject: CN=deab5ee3db33abd3678862036aa6eab37160e8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:97:7c:82:27:9d:de:26:4f:ce:6c:54:0d:cd:
76:28:86:0f:95:8d:11:71:41:a6:ae:5b:b9:2a:b2:
6c:ec:8f:9d:65:e4:06:ad:89:34:ae:03:40:65:bc:
03:54:69:0f:05:23:9d:b9:fd:88:81:16:5a:82:fa:
e2:9a:61:32:df:89:f2:fe:2d:d1:d4:37:91:17:5c:
75:8e:8a:61:3d:c9:5e:d5:8e:45:9b:bb:6c:e2:f4:
7c:cb:a3:5f:1a:3d:c4:aa:ed:62:1d:0c:5f:ba:f9:
03:68:37:97:bb:8c:72:49:55:b0:eb:73:73:49:7e:
5a:2f:4a:eb:07:dc:6b:45:b2:64:da:a7:20:e6:fa:
7c:e1:58:8e:77:54:8b:6a:c6:2f:54:20:3d:e9:99:
f5:5f:14:7c:ef:8a:40:4d:4b:8d:6e:0f:e3:70:2d:
99:2e:23:5b:31:94:fc:77:68:41:c4:12:b9:7f:26:
70:62:d3:2b:79:a0:f1:01:9b:fd:9e:15:62:2b:05:
de:02:23:3a:18:6c:aa:0e:bd:2a:14:b9:21:78:0f:
6d:79:9d:3a:44:b1:46:73:fe:fb:fa:e4:65:49:55:
80:7c:e5:17:6a:8b:ca:e3:b9:e2:bc:c7:5e:0a:fe:
24:f5:7d:8e:0e:be:56:f4:2e:99:cd:63:ca:d5:60:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AB:5E:E3:DB:33:AB:D3:67:88:62:03:6A:A6:EA:B3:71:60:E8:A0
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:3f:5f:c3:57:97:86:82:64:b7:21:4e:90:d1:df:8e:e5:
9f:f2:0e:d5:c3:47:b4:d2:78:bd:02:15:a9:9c:cc:0f:96:5f:
58:bc:ec:55:3c:98:3f:ba:c3:2e:f4:61:0f:b6:8c:3e:34:66:
32:ea:81:20:f3:30:46:40:d4:72:b3:9a:67:dc:1e:41:1b:02:
f1:e2:a9:99:5f:e4:00:86:82:46:33:ba:a4:63:9c:ff:10:d4:
a9:87:1a:bb:01:17:bf:74:35:e8:dd:73:14:ea:83:43:68:bd:
50:d7:6a:78:3b:38:28:e5:a2:0b:ee:2b:c5:cc:0e:fe:1b:12:
eb:d5:40:74:0f:fd:7f:94:35:57:13:36:e4:85:51:9b:11:ce:
b4:a5:0f:31:52:a7:48:b9:df:a0:2c:88:17:f6:6d:be:0b:57:
4c:b6:fe:16:e7:8e:8d:e4:b0:87:e1:ae:4b:6f:60:81:eb:1c:
50:0a:46:ac:5d:0f:cb:92:9c:d6:66:c3:66:d2:c1:1c:68:d9:
84:b4:14:48:0c:23:e1:ac:b6:01:63:7e:d7:68:20:37:04:4e:
68:45:98:75:c6:d7:99:12:23:44:b9:7f:a6:fa:6e:12:62:48:
ed:a2:3d:b6:d2:60:22:81:d4:b0:d2:08:48:49:be:c7:72:49:
90:73:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:57 2025 by rpki-client