Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
File: GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json)
Hash identifier: uWl8V7eNwvhOqrZmh63EDhh5CHfsjnChntVV32LvwVQ=
Subject key identifier: 94:31:3E:2E:27:19:AE:A1:2B:E8:9D:15:78:7D:A1:E8:86:F8:BA:FF
Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
Certificate issuer: /CN=18745466b4e146830b962b74906db1c6d081fc70
Certificate serial: 019A4D740AA3225FDDDE2067AEF44AA044BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
Manifest number: 16D2
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: ZKn/Fp+eCwFRpAMq5KAN9F2tSSQQ4oC7nTRCZef5Mn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0a:a3:22:5f:dd:de:20:67:ae:f4:4a:a0:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=94313e2e2719aea12be89d15787da1e886f8baff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:9c:da:ec:19:ae:b8:79:da:59:83:a8:df:
d4:c2:b0:c7:88:da:25:1a:7d:23:e0:31:be:9f:d1:
7b:b4:04:69:e2:2a:76:0c:b0:0e:e3:1e:bb:fe:27:
1c:13:a1:2b:24:64:dd:7d:ad:41:ea:29:c1:1f:d9:
e5:32:d9:4f:ef:e3:b6:5c:7f:6e:a6:41:fb:99:7f:
bf:09:ef:1a:af:21:5f:3e:c8:22:68:39:eb:82:0b:
6b:1d:89:26:f2:5f:b9:e8:86:f3:76:4f:10:d4:ec:
63:af:8a:d7:e6:84:b8:b6:91:55:e4:6f:54:1e:c0:
be:8c:7e:d3:70:ac:99:50:ae:01:ae:67:5b:45:3d:
d9:4f:32:2a:d3:3d:e9:08:36:67:20:9b:3d:7c:19:
11:16:c8:e7:d3:c6:e9:3d:49:b1:6d:82:5d:56:56:
89:ad:e5:f8:e0:96:d0:bf:4c:e4:f7:2c:83:cf:e1:
9d:30:b3:ab:d4:77:ba:42:aa:f7:63:20:95:47:6e:
f5:d1:c8:1a:a7:51:f9:7b:e1:3a:bd:13:2e:2a:1e:
9f:c2:86:1d:94:4c:ad:a0:ea:81:bf:66:ec:c1:c1:
be:52:ba:36:c8:32:d9:df:8d:96:ab:5f:25:66:36:
9d:3c:25:2a:4b:45:4c:a7:69:3d:8b:de:14:01:af:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:3E:2E:27:19:AE:A1:2B:E8:9D:15:78:7D:A1:E8:86:F8:BA:FF
X509v3 Authority Key Identifier:
keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:3e:f1:89:02:f3:37:2c:4e:2b:6a:4e:7a:d1:91:69:e2:
9a:9d:a6:59:58:3c:bd:23:4d:65:a8:e9:59:cd:6d:9f:30:2a:
7f:d9:26:e4:2d:06:8c:19:da:e0:dd:b6:dd:44:14:7d:bc:59:
fb:f9:f6:a4:1b:27:88:6b:23:45:1b:a6:78:6e:e9:0e:a5:b2:
6c:13:19:af:46:76:56:cf:61:9c:bf:2b:a2:97:6b:6c:ac:82:
ba:05:9e:e4:2e:e2:07:36:b9:22:3c:f2:75:c6:7f:9b:d5:75:
7f:81:52:b0:e2:f0:5a:1d:76:c7:59:8b:9a:c6:2c:a4:d9:ad:
bd:9f:8d:3f:04:ae:df:25:99:41:0f:46:ed:7b:1a:38:da:e3:
93:0d:7a:12:ef:e8:35:12:bd:87:57:0c:f8:bf:b5:2a:f6:01:
5f:10:eb:27:1d:d5:d9:d3:9a:db:2c:a5:d3:4d:fc:df:0e:35:
99:36:de:a2:4c:94:7c:79:fa:ed:02:99:1d:82:dc:ed:a8:89:
7a:38:7c:4e:65:1e:ff:a9:b8:60:f9:36:10:0e:3a:64:09:37:
ec:31:71:8a:c8:59:44:32:90:f0:69:c7:98:95:d0:39:ff:5d:
a8:b2:79:a4:c7:6f:2a:b9:bb:85:b1:ff:63:1b:6e:43:d3:59:
d2:3e:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:59 2025 by rpki-client