Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File: gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier: 4YFpvWFIqZbiF5gDX+6JzeoitdokgqojqJJLnNHncjA=
Subject key identifier: DB:F7:7A:A4:04:25:4A:9C:96:47:C7:7F:1A:7C:82:3D:6C:27:81:84
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer: /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial: 019A4DE18E91E3AC96880AD10980E8AA4966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: n8arAXsKbW2n1nVtN780vDp7k+JrcRHwAHuJ40/pSTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8e:91:e3:ac:96:88:0a:d1:09:80:e8:aa:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=dbf77aa404254a9c9647c77f1a7c823d6c278184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:47:e4:12:a8:70:18:58:d0:9c:75:3b:95:
81:f0:ba:10:b8:e0:0b:dd:aa:a1:52:9e:86:6d:c3:
5b:51:4c:c4:44:3b:84:63:d0:0d:1c:06:95:bd:b1:
b1:e2:4b:0d:11:db:01:80:df:af:68:46:ed:78:34:
53:5c:b1:f0:1d:c9:e9:66:e6:64:61:41:6b:d0:64:
d8:02:74:32:72:a9:f4:9b:13:6f:c7:0a:94:36:d8:
ac:70:7a:80:62:bb:4d:da:05:6f:2b:40:ea:40:4f:
6a:9e:f3:d6:8b:c5:f2:f4:58:1f:f4:fd:aa:51:cd:
02:f8:36:71:97:c7:1d:29:20:7f:67:b7:07:c5:3b:
d0:9e:5d:33:20:ea:ee:06:d0:61:cc:f1:e1:da:94:
de:be:2e:a3:00:ad:64:15:9a:9d:07:3d:df:05:53:
e4:f2:24:de:c2:8b:8a:6d:15:21:15:f7:0c:98:58:
f6:4e:65:4b:6f:26:e3:1e:fc:75:90:63:ba:3b:56:
2c:f7:83:ef:9d:ad:50:dd:2c:b4:8f:4e:06:0b:86:
69:61:93:33:40:96:49:d3:1f:cf:10:1e:5b:25:09:
85:e2:48:d7:e5:8d:28:49:e1:3a:7d:67:da:80:b4:
8a:11:0f:be:4b:9c:d6:32:e6:1c:44:e8:37:bd:3c:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F7:7A:A4:04:25:4A:9C:96:47:C7:7F:1A:7C:82:3D:6C:27:81:84
X509v3 Authority Key Identifier:
keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6d:39:60:ba:9f:3f:b6:02:0f:70:27:2b:a6:a3:b1:4b:f4:
4a:1e:32:95:00:67:d8:88:35:1c:54:0c:26:f0:de:7e:04:ff:
ac:05:55:54:00:3f:1a:2f:e9:2b:0d:62:09:99:83:2b:27:a6:
d3:13:04:41:44:6e:fc:f8:b3:46:4a:28:a1:d6:f7:e2:fd:33:
1e:a2:7b:d6:39:1d:98:1b:bd:5e:7a:8d:73:a7:0e:29:a8:3c:
15:1e:63:53:60:e9:51:2c:c3:7b:0e:d1:b9:83:75:51:ce:f7:
c7:0c:89:ec:5a:f3:c1:8b:e3:59:d3:94:58:5e:26:36:85:2a:
8f:72:c2:0a:7d:86:76:9f:d3:80:c7:56:d0:fd:54:09:d9:5a:
e2:40:77:b6:cf:c2:52:59:e8:f1:68:8e:14:98:34:9e:48:b8:
a6:d2:91:ba:de:08:28:99:12:3c:28:38:7d:f5:40:0a:0b:62:
60:4f:4b:cc:49:3c:15:56:a4:4c:fd:80:d2:42:7e:03:0f:0d:
ad:2b:63:be:a8:6e:53:45:57:88:6e:19:fe:76:5f:44:2b:f3:
a3:47:84:8c:ac:44:ee:9f:d0:ec:76:e0:b4:d3:70:c8:de:b2:
98:ac:dd:7f:2d:75:50:85:94:91:42:a6:8d:a5:8d:fc:66:85:
6a:04:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:51 2025 by rpki-client