Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier: pe0pmDXlXvXiYIJ/RcW+vJr782EQHfXWEKwyG6j5Ylc=
Subject key identifier: 65:BE:10:D5:5F:C3:7E:9D:42:22:16:F9:A8:1F:4C:1B:34:47:27:1D
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer: /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial: 019A50075F2A2C309A6B73A8A8A18B377E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number: 055E
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: e2udhB8kQw8F1kN+C/ZjwlnH0yaw/mpwDDniEMeIx4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5f:2a:2c:30:9a:6b:73:a8:a8:a1:8b:37:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=65be10d55fc37e9d422216f9a81f4c1b3447271d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:36:02:0c:26:1d:21:5b:51:14:05:b4:e3:41:
b7:72:6b:65:f6:1f:ce:cf:29:7f:e6:1e:31:74:f2:
25:0f:4b:51:9f:0d:c8:23:aa:8f:82:d4:00:a9:e4:
06:33:18:76:f0:91:a4:3d:e8:7c:5f:a8:73:15:0a:
01:85:8e:c5:9f:d3:7f:33:f6:45:88:f3:68:9c:d2:
c5:44:cb:0d:d9:ff:b0:03:05:71:fe:9b:e3:51:d5:
71:93:e1:ec:4d:da:79:d5:31:b1:d2:79:25:22:4f:
9c:de:c4:0f:ec:31:98:6f:a5:d4:dc:06:91:ff:77:
ef:0c:59:5c:48:8d:a5:69:ce:a7:9a:5c:9e:46:35:
bf:8e:f2:cb:eb:ea:af:fd:7b:3f:b1:06:78:43:a6:
37:19:0d:0e:ac:4b:0b:7f:0e:09:2a:bb:19:29:d0:
5b:40:e0:64:37:3b:1e:8e:31:db:cf:12:86:35:2e:
37:94:20:0b:af:65:25:c4:f3:18:3e:29:61:6e:5a:
c9:99:40:65:61:6d:21:bf:a8:27:53:b3:e9:53:5f:
74:63:36:f1:7f:d0:14:97:6a:70:97:c6:9f:f5:51:
64:cd:22:b4:cf:5b:67:24:77:41:64:01:c3:4f:1f:
66:98:f1:e0:03:56:2d:98:a7:99:b0:78:df:c8:c7:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:10:D5:5F:C3:7E:9D:42:22:16:F9:A8:1F:4C:1B:34:47:27:1D
X509v3 Authority Key Identifier:
keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7b:98:0d:57:3d:c5:d2:d9:d6:17:f5:46:d1:09:6a:e5:0b:
d5:0f:ce:f6:75:32:db:d4:82:fc:55:ee:d6:31:d1:72:e7:c2:
4b:49:37:ea:82:e7:98:c0:38:9f:6d:17:12:5b:c3:ef:87:8f:
49:03:12:1b:62:b0:71:84:87:74:4f:01:2a:06:ca:c3:dd:a5:
59:0e:7f:f3:7f:af:5b:80:de:a8:f1:62:8b:9c:59:64:39:f4:
29:9b:d4:b1:71:79:ca:51:3e:16:13:6f:62:b4:e3:be:2a:95:
77:4a:29:3e:43:2a:e2:2c:45:3e:54:a5:33:dc:86:ff:b7:ff:
2f:ff:ad:35:c6:86:f9:c3:4d:d1:18:35:50:3f:23:ee:61:96:
5c:97:dc:4b:e9:08:20:5a:7b:28:ab:e5:90:72:ae:09:1c:c9:
a7:70:f7:c8:75:12:b6:3b:26:b9:db:dc:91:79:7a:76:c9:9c:
a6:08:8b:72:7d:f2:34:3a:ea:a4:42:a9:a7:9c:1a:13:a6:00:
60:2e:ae:69:7e:46:77:fa:d5:82:c9:75:79:b0:bc:d9:40:4f:
f5:bd:e5:7b:62:48:3d:32:fc:a9:60:42:ac:8b:82:78:b3:b3:
e0:de:c5:78:8b:c9:4b:14:83:e6:5a:a2:74:e3:91:0e:c6:e4:
42:a2:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client