Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: 70oFdQTent8sWGFA84AXjfeenhvVxbd2f0YgrUphzSQ=
Subject key identifier: 47:B9:CC:BC:A0:AE:44:33:B1:DD:52:22:2A:FB:A1:DF:58:FF:DF:04
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019A4F99108CDB429E597FF7F837DC2441B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: KiP9Rn/orAhTyND5jzNgzcNsRdQscbwYPrqxEKlTkP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:10:8c:db:42:9e:59:7f:f7:f8:37:dc:24:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=47b9ccbca0ae4433b1dd52222afba1df58ffdf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:74:19:cb:2c:a2:1e:c1:16:eb:d1:7a:76:
a7:e1:f8:d4:2e:49:ca:86:50:4e:24:a9:7e:08:0c:
e3:fd:f4:0c:d4:2f:17:dd:71:e8:99:41:aa:8c:24:
2f:49:c4:45:42:0a:a1:3f:4b:08:84:be:be:1e:3b:
9d:e9:72:2a:a3:3a:1c:5c:eb:e0:8d:36:77:ed:ab:
32:72:25:d3:13:af:d9:3d:a8:12:7c:cb:da:b1:19:
d4:db:c9:c7:fe:d0:4f:da:43:10:be:0d:f6:a1:24:
b7:27:c4:30:42:8f:2d:3d:a8:0c:fc:79:12:bc:cc:
9e:9e:3b:04:3f:94:5a:d7:7f:7b:d7:f2:9d:5b:13:
29:78:6c:d9:75:01:16:2e:8f:41:c5:82:3a:15:47:
69:d4:75:9c:43:5d:3f:73:04:ff:d5:6a:57:08:ec:
8c:97:2a:a3:22:a9:14:93:40:e4:64:63:41:b9:8d:
87:d9:e4:6d:43:00:89:36:7a:ee:5a:41:76:60:53:
3f:88:9a:48:36:b0:22:42:8b:21:3d:42:33:bf:1b:
d2:bc:79:ff:a5:00:91:c2:08:ee:08:00:41:af:10:
f0:55:74:20:2b:92:aa:63:18:56:1e:8d:9c:de:31:
6a:82:f4:36:85:b4:d1:9e:26:d6:08:f2:5a:6c:17:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:CC:BC:A0:AE:44:33:B1:DD:52:22:2A:FB:A1:DF:58:FF:DF:04
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:dc:b0:55:b8:35:a0:c5:40:fe:8d:fd:5c:fe:9f:5b:7e:
c6:30:15:b1:ca:95:04:21:b7:87:b1:fe:81:1a:b2:14:70:19:
ad:76:c2:c9:17:6e:a1:35:88:ad:f1:2b:bd:45:c9:b6:e5:dd:
92:71:9b:6f:e8:5d:9d:18:9d:d9:8c:ce:c0:de:0f:8f:0b:99:
be:d9:ef:af:a0:46:c8:a8:d1:77:30:98:58:89:cf:3a:c6:ec:
fd:13:3b:8a:cb:4d:aa:1b:3d:59:c0:d5:ec:b4:b5:7f:6f:c1:
c1:cd:ae:f6:28:52:ef:2b:dd:06:0c:65:76:60:85:cd:a7:74:
ca:5a:49:38:35:c3:bd:3b:a2:4b:ba:39:4d:59:55:c4:5d:7d:
43:10:fe:69:fa:03:69:6e:f6:d3:8a:d7:9d:15:d7:82:dd:68:
d6:6e:ca:1e:87:a3:19:9e:8e:d4:ce:cf:ac:8e:8f:63:83:78:
c1:23:50:d3:85:ef:e1:55:84:3f:d3:81:70:29:77:69:b8:79:
8c:df:0e:37:8d:9d:fa:4c:ae:ed:fd:43:cb:83:61:9a:c4:83:
2a:e8:66:af:34:c9:30:d4:ca:99:5a:e4:98:ca:a1:b0:20:ef:
49:7d:9c:fb:3a:31:e6:89:fd:3c:75:5b:67:b6:e4:b2:96:76:
ab:94:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:21 2025 by rpki-client