Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
File: gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft (raw, json)
Hash identifier: fhe7KP9MzuPervtMfpA9Hn4HGPbsmgY3M/X6QWob6lU=
Subject key identifier: B5:43:54:81:78:12:87:9D:36:25:5B:3A:79:F7:95:53:B8:45:A2:F2
Authority key identifier: 82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
Certificate issuer: /CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Certificate serial: 019A4D73F1B5A98231EE51B0B3F744240EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
Manifest number: 0679
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl (hash: fr8B5S0cLRzjW1fpUSf5j5XE8Sj/Dbtgy3c+Zjb8w2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f1:b5:a9:82:31:ee:51:b0:b3:f7:44:24:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8270fc0883f1c72f81c6468a18832dadcfe94959
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=b54354817812879d36255b3a79f79553b845a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:4f:00:cb:9e:15:d8:c8:e4:f7:d1:59:8b:
b4:64:e6:69:55:d0:29:1b:d1:d1:1d:3e:a1:45:d3:
96:de:59:76:2a:5f:e7:65:68:62:41:08:9d:34:2b:
de:5f:cf:84:c2:ac:e9:58:a6:e2:48:87:38:b2:63:
39:04:ea:2c:14:84:5a:5e:11:36:ef:8a:72:bb:44:
84:3a:cb:db:57:83:25:3d:be:8d:46:c4:a4:87:50:
ad:8b:9e:cd:ba:54:f8:94:14:19:d4:82:3c:28:fd:
4f:a4:ce:bc:85:43:b0:12:3a:5d:a2:99:ef:70:d3:
2e:e5:f6:66:ec:80:8f:a5:be:b5:40:51:a0:1a:e7:
b9:bb:b5:69:75:30:39:c2:67:2a:53:52:eb:43:44:
2c:be:27:ab:48:8b:96:e7:5e:db:9c:62:bb:ed:45:
08:53:e4:7f:4f:26:7b:ed:c5:66:c2:5c:f3:ee:b4:
d8:3f:25:0a:b1:12:f9:4f:2c:93:3d:dc:49:4b:3a:
f4:91:91:49:4b:59:8c:6b:9b:0a:35:8c:c8:b7:64:
d5:89:c0:6a:89:3d:e3:d4:3f:88:bc:09:b7:08:b4:
7a:ac:b4:e0:a6:22:9d:87:18:59:aa:c6:c8:7e:dd:
17:86:fd:60:c9:d5:a0:65:92:bc:36:7f:c2:24:85:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:54:81:78:12:87:9D:36:25:5B:3A:79:F7:95:53:B8:45:A2:F2
X509v3 Authority Key Identifier:
keyid:82:70:FC:08:83:F1:C7:2F:81:C6:46:8A:18:83:2D:AD:CF:E9:49:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnD8CIPxxy-BxkaKGIMtrc_pSVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e0c01c-e4a8-48d0-aadb-d653cb8ad0b3/1/gnD8CIPxxy-BxkaKGIMtrc_pSVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:35:0d:96:fd:b9:70:a8:33:fe:69:8c:5e:39:c5:21:e1:
6d:1e:85:b5:40:59:0e:58:ae:47:75:ae:97:67:36:99:1a:7b:
2c:f3:16:7f:55:90:f2:16:1f:02:46:c4:97:21:62:7c:69:73:
2f:48:5a:1c:ec:6f:ca:a8:d1:0d:e0:22:7b:fd:1f:8f:43:70:
14:ff:34:9c:04:9d:7f:4d:96:2c:2b:da:4b:24:47:cf:8f:a8:
26:e7:33:09:f8:43:fe:4e:c7:4b:7c:6c:2b:45:a1:a7:f6:16:
35:ae:34:23:da:e9:45:74:aa:03:0d:69:af:a8:52:08:06:37:
98:6f:0a:3a:a2:25:71:39:2a:d5:ca:eb:0c:d8:ea:ca:1c:12:
f7:42:7e:ba:58:d4:99:a9:55:37:73:d2:58:53:25:46:42:99:
c8:85:0f:b0:22:0e:92:9a:be:98:c2:bc:b1:13:29:5f:fb:a3:
dc:d7:c6:b4:33:e5:cb:a7:f7:6f:d0:66:6e:34:7c:f8:d9:ef:
61:cf:62:6c:fc:91:4d:5f:9f:02:55:1b:0d:08:39:d0:39:a7:
47:68:94:b3:49:c2:01:8a:63:c5:88:41:b3:ea:eb:0f:22:b5:
aa:75:4e:d7:2d:9d:1f:50:ad:30:f2:1c:12:86:6d:65:b4:11:
bd:22:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:53 2025 by rpki-client