Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: bK0SQYOWAuXN4JJovZ7xaoKf8TgfqAzopOJpODn3M8U=
Subject key identifier: EB:C2:2E:61:4F:5E:B2:68:95:5A:D6:47:D8:2C:64:3C:A8:EF:66:73
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 019A4EF41B67C846B25A3C8BE497A3438776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 08F3
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: M9R17uCosHv2Er+xqHnfCdX2Ayf+Mmu+YyDHJIgnDYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1b:67:c8:46:b2:5a:3c:8b:e4:97:a3:43:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=ebc22e614f5eb268955ad647d82c643ca8ef6673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f4:6a:0e:64:3e:20:a9:6e:1b:be:e3:4c:72:
b9:ca:34:5d:4f:49:8e:68:d0:3a:f8:b7:6d:d9:9d:
14:2c:77:8b:b4:3c:a5:57:58:f1:23:a6:f5:da:f5:
ee:d6:f0:d1:ce:83:9a:1c:a0:3e:ce:55:35:c6:db:
a3:c9:69:00:9f:ef:43:b1:97:e3:19:5b:7c:59:de:
a7:75:1c:02:81:3b:92:ac:c2:41:fc:ca:ce:48:29:
7f:3c:c3:08:0b:f9:73:f4:1e:e4:fe:41:94:80:3d:
ef:4c:98:15:67:36:df:d3:4c:41:67:09:8a:fe:79:
31:a7:bd:d0:14:d6:74:f2:1c:56:0a:c9:56:5a:b6:
bf:7d:9c:bd:29:6c:37:6d:46:62:d3:4f:d3:20:81:
6e:8c:3c:3c:de:ba:ab:01:02:5a:1a:5d:07:ad:6f:
c6:d3:4a:a6:41:da:cb:d4:65:a8:05:d8:5d:ee:f0:
ad:bc:21:b5:0f:73:e3:e0:13:4b:db:1d:31:9e:df:
9f:d0:90:c6:4e:97:84:70:1b:8d:a2:69:61:ba:84:
7c:a2:96:48:5e:ec:2b:40:82:e7:48:2a:5b:ff:e1:
70:76:7b:ea:ec:27:07:74:de:3c:48:67:fd:ec:48:
ab:ce:74:ac:ed:8a:f1:f6:79:77:84:20:6c:9f:2c:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C2:2E:61:4F:5E:B2:68:95:5A:D6:47:D8:2C:64:3C:A8:EF:66:73
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:48:89:5a:81:4d:d3:ba:d6:6d:e6:f3:fe:1e:5a:2e:74:5e:
f8:e3:e7:d7:68:a7:3a:69:4a:3f:8a:77:9f:8d:c0:90:1b:35:
e6:6b:50:21:28:d0:91:e8:ad:e5:09:d4:65:ac:2b:4e:1a:59:
30:bc:14:c2:44:c3:a3:ec:bc:f1:07:c2:14:32:b2:f0:f5:f3:
6a:a1:30:7f:a2:08:70:31:4c:c2:c5:ff:e2:8a:f8:e3:ec:62:
51:1f:7f:ab:f7:6d:8e:99:0d:87:9e:be:34:ef:fe:9d:3f:05:
c0:d5:29:2e:6e:79:36:4a:35:a5:53:b2:f2:5f:6e:74:93:0e:
69:52:c6:22:97:f6:d9:a7:79:09:7d:0e:c2:ec:c3:f5:cb:7e:
bd:eb:15:56:d9:0c:93:48:a0:9f:04:88:07:91:75:42:b0:30:
f2:31:9b:ec:8b:e9:cf:22:65:4c:7e:9e:5b:4d:66:a5:5f:03:
50:a2:0d:c1:67:0a:92:d9:46:e1:19:05:35:7f:7a:17:90:c0:
ee:24:1a:64:5f:65:bc:cd:f3:bb:a3:d5:72:65:b2:44:71:b9:
77:91:ac:19:ec:5c:cd:ad:3c:6b:22:ff:5f:33:c9:cc:6b:63:
cd:56:00:19:6c:25:81:81:9b:34:f5:8c:b2:b7:cd:7c:37:44:
3e:6f:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:43 2025 by rpki-client