Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: zpIVwrI7VPqPfRwmvDnDUZfGbTPLYXUN2yXc0m3xirQ=
Subject key identifier: 43:7A:40:26:90:FC:67:13:44:EC:A8:78:44:A0:A8:95:12:79:79:0A
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 019A4F627687592F4C340DCD1E7B02F76D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 07BB
Signing time: Tue 04 Nov 2025 15:00:44 +0000
Manifest this update: Tue 04 Nov 2025 15:00:44 +0000
Manifest next update: Wed 05 Nov 2025 15:00:44 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: rDSOACnF91qPZqd8G0hm3RYiDVfjGCYUpPZ+UuLjavQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:76:87:59:2f:4c:34:0d:cd:1e:7b:02:f7:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Nov 4 15:00:44 2025 GMT
Not After : Nov 5 15:00:44 2025 GMT
Subject: CN=437a402690fc671344eca87844a0a8951279790a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:35:b8:47:5e:41:48:b1:75:0e:89:25:aa:
fe:46:a5:4a:d8:5b:36:9e:34:4c:79:2f:04:75:a2:
55:d0:0e:55:32:cf:0d:f3:1c:7f:bd:da:8c:3b:1c:
8f:f5:b6:c5:5a:82:e6:26:b3:d2:d6:d4:31:30:18:
8b:d1:57:7e:a4:da:fe:ff:83:09:d2:3a:6b:b6:7e:
c2:3f:ea:d0:84:0a:29:9c:b2:68:b3:d8:fe:f9:6b:
c1:2e:fa:79:76:6f:d2:91:89:0a:1e:3e:89:10:75:
3b:01:f7:5c:69:fc:26:e1:58:ce:3f:3d:8b:db:ec:
bb:d0:1b:88:c9:4e:8d:5e:da:14:d7:71:76:3e:42:
96:b2:a8:c0:85:b1:e4:86:cd:57:e4:02:ed:2f:98:
4b:17:9c:d0:64:cc:c5:7a:95:09:36:84:fd:50:41:
74:8f:1c:a1:59:36:a3:95:25:39:d9:38:0a:dd:5e:
b7:aa:a4:df:cc:95:ec:54:c2:af:70:1b:ed:f8:6c:
df:6c:54:a3:3d:58:c9:6a:ba:1d:c2:69:64:88:7e:
44:57:26:87:ea:cf:3f:bf:49:92:c9:2f:09:30:55:
a3:fa:5d:ec:cd:40:8a:34:ef:30:9f:c8:f5:e7:cc:
36:b2:a3:da:72:ba:cb:45:ef:69:b2:31:e3:ee:35:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:40:26:90:FC:67:13:44:EC:A8:78:44:A0:A8:95:12:79:79:0A
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5a:b5:fd:2e:f5:66:2d:ea:c1:ca:e2:3f:db:cb:5b:c7:15:
de:76:92:3c:29:33:72:8f:5c:3f:2d:9e:97:8e:d7:27:55:d4:
46:60:12:78:34:ed:97:ca:a9:47:f8:46:7a:36:34:1f:b9:6d:
de:6c:55:ea:b8:64:42:cd:d4:41:11:19:15:9b:34:0f:bd:4f:
c1:66:98:80:76:8c:d5:3b:c5:c3:76:9d:5d:0d:b2:2e:fc:f1:
08:5f:58:4a:13:36:20:1c:53:52:b3:2d:44:4c:3e:a1:cb:a8:
86:c0:2d:21:65:af:63:36:21:65:89:e1:c2:21:0c:f0:36:c0:
fd:f4:20:da:ae:00:2b:c4:85:2d:5c:fd:a1:6a:96:75:a0:57:
28:65:ac:36:90:15:b5:30:79:9b:fd:b0:b3:7b:4c:17:d5:71:
5b:b6:dd:16:8d:04:77:77:11:10:b0:3f:96:0e:1c:48:f0:ca:
15:97:18:fb:ac:19:b5:b9:38:67:b6:1c:50:64:bf:42:90:76:
b4:c9:ee:56:62:3c:7e:28:a1:6b:d0:83:7b:d8:58:c7:13:d9:
a8:61:6c:ee:4a:db:8f:ee:29:df:0c:ad:15:6d:7d:ef:2d:a0:
b9:d9:3d:69:e4:3e:e8:d5:dc:61:4f:a3:41:cc:00:7a:65:b7:
c6:15:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:27 2025 by rpki-client