Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: Lpp7HZRYGe2CihBCgEsLNCZISf+ex2V0uID2HibJZ5E=
Subject key identifier: 47:EA:F7:04:F9:0F:5B:30:28:3C:27:56:73:DF:F9:FC:AE:D6:92:AF
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 019A4DE1E563DEE7C439490E874352DB98DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 0543
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: kag1KsHNKL0k3YhQ+7+D/GJ32vhoZDVb4G8D4kbtqYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e5:63:de:e7:c4:39:49:0e:87:43:52:db:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=47eaf704f90f5b30283c275673dff9fcaed692af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:70:9b:73:80:08:92:33:29:aa:66:55:41:
e5:ca:08:c4:72:7b:99:ca:76:28:03:a6:49:dd:6e:
23:93:06:e2:ea:bf:c1:02:81:1e:43:46:90:d6:74:
80:45:a5:5d:fd:13:6a:84:ff:63:5b:84:c4:b0:80:
a9:a0:af:ac:72:f0:e4:e0:ee:27:a9:26:18:3f:54:
0e:13:2f:b3:84:4f:67:dd:ee:e2:2c:88:ba:82:d2:
d6:ae:6f:11:6a:62:96:83:b3:c5:95:68:a1:8d:02:
d6:bb:f1:52:14:22:8c:09:31:da:84:dd:cc:f4:c3:
35:b1:e5:c6:78:28:a6:3f:9d:9d:f6:7d:a2:c1:24:
6a:3d:a3:8e:8e:ef:12:5f:56:29:62:a1:78:17:67:
81:a4:8d:89:2f:87:66:00:66:d5:9b:9c:55:93:f1:
70:df:93:6e:df:aa:3f:cb:fe:9b:b5:b5:ef:0d:85:
67:b3:99:a3:ce:48:4c:2e:8e:59:89:0c:70:21:42:
03:8b:0c:3c:6b:3e:e7:b3:ca:5e:2b:f1:4b:0d:c9:
50:9d:b2:a8:01:fe:cd:8c:cc:37:33:70:18:85:39:
5f:03:e4:82:e9:c5:04:ce:27:12:54:f7:9d:a4:2c:
d6:e4:36:4c:96:c5:65:bf:32:ff:5a:f6:df:38:00:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:F7:04:F9:0F:5B:30:28:3C:27:56:73:DF:F9:FC:AE:D6:92:AF
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:1e:2f:b4:09:53:62:85:1f:52:e4:c0:bf:9c:a9:8c:c4:
0d:06:ba:1f:c1:d2:7b:a0:74:36:cd:7b:c0:95:54:af:ed:de:
40:92:47:b3:bc:c6:6f:94:f8:89:8c:5d:a0:c3:e0:9c:d3:ab:
57:ac:b1:b1:d3:5e:41:8a:7a:7d:7c:09:6f:e5:e6:ac:c5:e2:
cb:73:bb:f1:9a:72:f1:2c:0b:4f:a9:86:1c:d0:56:19:89:c5:
63:e9:a0:3e:ac:3f:b2:b9:e4:42:3c:11:d7:ce:77:70:37:ed:
db:9a:d3:80:01:a7:b5:3f:9e:95:35:76:4c:1b:06:24:22:8e:
f0:fa:8a:42:00:a9:74:24:d4:ee:64:a7:38:06:00:04:d4:ed:
0d:74:a1:af:b1:0f:8e:90:b0:f7:11:f3:70:c7:df:22:99:be:
7c:99:76:d3:82:d5:91:59:1f:30:96:88:4d:91:67:a5:ef:5e:
8e:3a:89:b0:86:e3:de:b9:2b:57:4e:d4:f3:af:c1:e1:6b:6c:
10:b1:01:87:95:2b:c6:b3:64:7f:ad:28:6c:69:dc:1e:a8:24:
38:cb:b0:94:2c:78:9c:30:e7:b9:4e:0f:d4:bb:0a:c0:21:60:
10:9a:0d:b5:88:00:09:46:b8:f5:33:1a:23:d3:c3:7d:c1:a4:
a8:0e:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:18 2025 by rpki-client