Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: Y3Jhwaqd60L1hNXKiN7LrLkbWsfbkeBqmCZTnP8Nxls=
Subject key identifier: 16:51:CA:8A:60:16:4C:21:7C:AC:FC:BF:08:17:0E:9C:EE:1F:A3:C5
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 0198D6CD10C330B4CBE14FC2101252DF5E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 45
Signing time: Sat 23 Aug 2025 12:00:19 +0000
Manifest this update: Sat 23 Aug 2025 12:00:19 +0000
Manifest next update: Sun 24 Aug 2025 12:00:19 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: CUNRk5/IU7fhdpkQ6CL9tTApKxLhnY9VZpCQBJOycNY=)
2: XD5kSDYeMfY8LIHhbfnJvruSBPc.roa (hash: 7oUWV+LyugwjeCoSmfoHPMTejsb+0njHiDkg9kgwwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:10:c3:30:b4:cb:e1:4f:c2:10:12:52:df:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Aug 23 12:00:19 2025 GMT
Not After : Aug 24 12:00:19 2025 GMT
Subject: CN=1651ca8a60164c217cacfcbf08170e9cee1fa3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:5d:42:b8:6c:64:d5:bf:43:a7:67:db:a6:
86:5d:63:12:b8:53:d1:4c:3f:f9:d9:43:2d:28:e3:
23:4c:81:e0:e9:88:bb:38:8b:80:01:de:b5:79:94:
a7:6e:92:a2:59:43:5f:c9:4a:d5:f3:5f:9d:fe:d3:
5d:5a:1c:61:4c:fd:67:b0:5d:4b:02:de:93:d4:fb:
5e:9f:a9:de:38:fd:c4:4c:ab:fd:10:56:39:08:24:
d9:10:d6:cb:00:78:4c:3e:a8:8a:52:d1:52:32:ae:
ac:69:e7:66:07:72:eb:3c:ca:62:bc:b4:f9:7a:74:
65:8d:7c:aa:1a:fe:68:f1:52:40:d5:c0:81:f8:f5:
bc:bd:99:cd:1d:cf:1e:c6:36:75:58:c5:72:62:80:
4a:59:f2:e3:d2:4f:d9:8f:2f:06:5e:4b:a6:5a:58:
9c:7f:6a:e5:54:57:46:8b:42:73:1b:bc:d2:dd:21:
eb:72:76:cf:42:6b:ce:d0:82:4a:86:81:93:e1:47:
25:ab:cd:8b:aa:a6:36:53:0a:dc:6f:9d:e0:49:0a:
f6:8f:b8:c4:2a:62:8c:31:e9:11:23:58:b1:ce:96:
b4:41:6a:5d:86:1e:cc:97:9d:47:7f:1d:98:ba:31:
91:5a:a0:49:94:74:93:31:62:b4:82:74:86:56:be:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:51:CA:8A:60:16:4C:21:7C:AC:FC:BF:08:17:0E:9C:EE:1F:A3:C5
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4f:00:7b:84:17:9f:05:d8:e8:3e:7e:59:87:b0:47:c6:0f:
db:c6:ab:6e:ec:f3:f3:0a:7a:d5:1f:25:1f:d5:be:f5:8d:61:
1c:3e:05:8f:43:70:bb:d6:a0:6c:72:79:c0:a3:3c:df:f6:07:
62:86:64:57:79:18:22:20:42:f6:e5:59:d1:9d:0c:41:72:fc:
b5:88:2f:03:60:26:95:0b:38:bb:43:07:ad:01:9e:64:93:b7:
32:10:2d:26:53:1c:ac:93:68:7f:6c:60:d0:ec:29:17:8d:15:
6e:c6:67:d9:11:a2:61:9c:d0:b7:ee:6f:38:72:ca:82:1f:17:
79:b2:ce:2f:0e:af:c6:7a:61:8c:b3:da:16:c8:7b:75:ca:d5:
44:e4:0d:06:b9:ca:68:3d:9a:d9:af:b7:da:0e:57:15:f6:93:
81:00:36:8b:6a:61:f7:db:ae:a0:5e:d4:98:1e:10:69:ff:02:
65:0e:c2:08:af:2d:ac:78:4a:13:92:2e:f3:a7:34:39:3f:11:
63:c2:2d:2c:7a:a2:48:e2:f3:5f:36:74:49:be:ba:01:c8:a0:
58:4e:dc:f9:ff:16:01:23:db:2c:b2:ff:86:6c:8f:2c:fb:37:
f9:7c:03:d7:2a:f0:67:59:43:58:69:d0:ab:05:cf:7f:e1:d2:
9d:cc:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:03 2025 by rpki-client