Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: lBHU+RYS72eXb4R3fvIGp4QQIYdM8Dc7cI5G96xGsWQ=
Subject key identifier: 1D:F4:AA:1D:B1:28:D0:D2:E1:70:89:4D:9B:52:A2:49:89:9C:53:45
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 019A50E34AA63FD9C583B7D35F6C49A481EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1527
Signing time: Tue 04 Nov 2025 22:01:04 +0000
Manifest this update: Tue 04 Nov 2025 22:01:04 +0000
Manifest next update: Wed 05 Nov 2025 22:01:04 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: GsLPQuFXB0gW3GmuBzD2luq80Xg4mxgROmeLSZ8jjvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:4a:a6:3f:d9:c5:83:b7:d3:5f:6c:49:a4:81:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Nov 4 22:01:04 2025 GMT
Not After : Nov 5 22:01:04 2025 GMT
Subject: CN=1df4aa1db128d0d2e170894d9b52a249899c5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:f1:ca:ab:af:66:4e:86:9f:d6:d2:e9:e8:
0c:9c:b6:74:ff:36:a8:24:6e:55:05:4a:76:1c:b3:
22:8e:91:5d:3a:38:7f:7c:d4:09:a8:39:b7:b1:7a:
16:0b:18:ea:32:f3:fc:ce:c3:8f:8c:eb:22:ad:ba:
49:f5:19:7a:14:cc:6b:fa:f9:17:f0:0d:5f:b0:dd:
18:9b:ce:71:40:d2:0b:53:a2:22:ce:58:c7:c2:29:
3f:61:ab:fd:db:2b:1a:c9:b0:19:4f:62:3e:6c:03:
c9:66:73:8f:ca:e6:e5:40:9b:4f:4d:42:d4:bd:c1:
b2:d7:20:11:dd:9d:c4:c0:26:e1:42:79:e0:5c:b8:
ac:38:21:48:51:27:8c:70:7b:c8:03:7e:e9:01:6a:
32:d0:86:20:56:b2:65:4f:8b:2e:d4:6b:40:59:c2:
8c:0f:88:d5:8a:eb:03:38:4d:c1:cf:f0:7a:99:d3:
3c:46:fc:f1:2d:a3:27:b0:5b:54:65:4c:45:b6:64:
d2:46:6d:ef:87:13:8b:ae:a0:44:67:36:74:60:d8:
42:3c:5b:f3:4b:44:19:7c:b7:7f:99:d3:6b:7e:36:
e2:ea:0d:89:98:e2:4d:20:cf:76:61:e4:63:fb:0a:
8c:37:a2:ae:35:ad:f5:49:5b:df:32:7c:b8:72:0e:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:AA:1D:B1:28:D0:D2:E1:70:89:4D:9B:52:A2:49:89:9C:53:45
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:95:27:68:eb:90:b6:d8:b0:13:55:02:ed:f8:b2:80:37:
9d:33:e8:9f:92:3d:2c:ed:2d:2b:26:bf:1b:a0:ed:70:83:ee:
3d:aa:c8:e8:58:a9:ff:b5:5e:bb:2a:b2:97:2f:64:83:52:a0:
13:59:44:2e:ed:47:0b:fe:ed:89:39:7e:65:5b:7f:98:7a:22:
64:6b:12:f2:49:42:48:e9:29:03:ef:ff:4b:c8:36:3a:6a:89:
d7:5d:79:8c:a0:d4:61:29:51:09:c5:04:dd:19:b9:05:88:2c:
47:79:2e:a5:ba:d5:42:fc:0c:79:95:ec:ea:e0:55:11:b0:59:
0d:84:14:fc:49:fe:56:a6:d5:ff:5a:fc:c6:f1:9b:9d:ee:2e:
60:a2:e0:fb:d6:dc:22:e9:b8:d5:33:4b:23:ca:85:89:21:89:
3c:8f:e9:9a:66:d8:ea:1f:b5:bc:d7:78:32:8c:ac:8b:65:59:
31:a3:d5:a6:38:9b:1a:05:80:2b:6c:df:0c:df:6a:ed:ea:1f:
51:a4:8b:ee:f1:4a:79:93:47:9a:19:ca:0e:a4:b2:82:72:a6:
27:64:f2:8a:bf:fd:cd:30:8c:de:78:5d:0c:29:90:12:57:aa:
36:f5:7d:40:44:92:00:d4:4c:45:b6:f5:7a:f8:af:96:67:96:
73:fe:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:59 2025 by rpki-client