Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: Js9umAoLCI9jYHo4ZVwiwfRJi9xqp/oM+BbHzuHKHpw=
Subject key identifier: 8B:E4:FB:72:63:57:B6:F3:37:F5:21:44:FE:0D:1E:C7:D4:D2:83:12
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 019A4D072C602CABC1BACFEBE4A1586C5ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 04:01:46 +0000
Manifest this update: Tue 04 Nov 2025 04:01:46 +0000
Manifest next update: Wed 05 Nov 2025 04:01:46 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: LVhh6geD8oEU8rMjhBaDB0NBC986VCNyLhx3OKsqvnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:2c:60:2c:ab:c1:ba:cf:eb:e4:a1:58:6c:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Nov 4 04:01:46 2025 GMT
Not After : Nov 5 04:01:46 2025 GMT
Subject: CN=8be4fb726357b6f337f52144fe0d1ec7d4d28312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:96:de:e7:65:9a:df:fc:b1:18:15:8d:b4:
f9:a6:44:2e:03:fe:47:0b:4a:75:08:4f:6d:ca:6d:
da:38:25:8b:a6:88:c1:08:ac:85:25:84:81:ec:ce:
39:9a:4b:77:a0:b1:1d:05:38:98:19:50:2d:3c:cc:
98:57:23:0e:b9:93:70:4e:00:c3:a8:02:23:c0:b2:
6f:f0:0b:7b:f0:9a:69:f4:b7:b6:6c:f8:39:b5:d9:
d5:b6:3e:51:2a:17:e2:77:12:7e:b2:d7:4e:4b:da:
c1:c9:12:81:3b:f7:37:f0:ae:fb:65:69:cc:9a:33:
bc:80:79:bc:58:c7:a9:2d:f0:eb:ae:f0:59:f5:73:
c9:3c:3e:2d:cc:fe:08:fa:ce:56:49:8a:f0:c7:7c:
c9:4e:99:16:29:56:92:4f:8b:53:d5:d7:7b:a7:1f:
f4:8d:98:44:13:f7:f4:ba:8b:bf:11:9f:65:84:01:
89:eb:a2:07:c8:56:71:04:73:73:e5:00:f2:3d:68:
af:20:f1:44:24:64:4b:f5:55:a4:c6:1b:46:88:e7:
22:3e:6c:25:db:1f:36:b1:a9:08:14:24:68:b0:11:
65:28:92:93:25:a5:71:21:10:3f:24:27:8b:4f:b1:
67:67:a7:58:f6:6f:b2:c4:6f:83:05:a2:51:d1:cd:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E4:FB:72:63:57:B6:F3:37:F5:21:44:FE:0D:1E:C7:D4:D2:83:12
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6a:12:eb:30:1a:f4:43:92:8f:72:fe:c5:0b:a0:84:56:eb:
4c:81:d3:42:b1:5a:8f:14:29:05:cc:c1:95:ea:b5:d3:20:c6:
94:6d:db:bc:0e:ec:f0:65:79:2b:ae:db:46:00:3c:54:88:e2:
7d:f9:f4:7e:8c:0d:ee:34:1b:2a:05:ba:68:64:f9:f3:d9:04:
15:c3:33:1b:32:7b:ce:bf:de:18:75:60:0a:de:df:a2:e3:f1:
a1:ca:67:3b:2e:ef:17:2f:39:54:77:f1:be:0a:8d:be:ea:53:
d3:0e:33:37:80:98:a9:79:f0:89:59:2d:8e:5a:62:7a:0f:b1:
d3:75:f3:a8:39:6b:4e:71:db:b0:86:f8:77:66:44:da:e7:1f:
b5:84:08:7f:80:9c:c4:2a:95:26:90:3d:86:0c:4f:54:69:45:
f4:46:9b:83:f3:49:7b:10:07:ee:67:35:8e:1e:68:93:06:fc:
20:cc:f0:4a:84:13:3a:3c:d1:bf:99:68:2e:bc:a1:c1:48:c1:
65:f8:39:84:d5:f1:45:c7:c4:3a:14:bd:09:b6:b3:69:e8:91:
02:fe:f5:4b:2e:74:05:0c:c7:9c:c7:1a:8d:18:de:ad:3e:87:
4e:2c:3c:6b:2d:b7:08:7e:38:8f:f7:31:cd:81:51:c4:60:2a:
ee:cf:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:54 2025 by rpki-client