Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: RMa24wxCjP25jSeNZ5msrbpZoxPilM8lLytv/9lgc2Y=
Subject key identifier: 5D:80:CD:A0:9A:26:EE:AF:60:5C:E0:EE:00:B8:92:3D:31:67:F9:69
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 0198D5BB7991BFBADA504037240B59737AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0B2C
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: xXHqaLjxVECuKGF7QwIvOvhjS40yAdH9/Z1jVK2t75o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:79:91:bf:ba:da:50:40:37:24:0b:59:73:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=5d80cda09a26eeaf605ce0ee00b8923d3167f969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:f1:d3:f5:38:84:81:75:e9:52:0b:95:6d:
b2:e2:b4:99:ad:e8:eb:02:da:2f:2b:66:73:d8:1f:
7c:85:25:04:75:15:7b:34:f8:40:8c:37:c9:8e:a9:
bd:e3:e2:c4:da:cb:39:56:a3:63:54:97:14:44:d4:
44:82:05:6d:b8:82:17:d7:b2:38:56:39:49:7f:e7:
d5:f8:24:ef:84:9a:34:36:ac:62:2d:06:3a:6b:3c:
ab:e1:0a:14:06:ba:ef:1a:98:28:6a:36:a8:51:87:
27:2e:c1:c1:c1:64:35:5f:49:04:1e:f8:07:b1:9b:
09:04:a8:a1:c2:01:a6:98:92:b3:ce:16:27:06:a2:
80:0f:df:ac:c4:4b:c5:8c:7f:6c:00:97:b9:d9:57:
31:5f:1e:09:6d:b4:4e:95:fb:4d:45:a1:83:bb:25:
09:51:27:13:fe:bb:b0:9b:fa:43:b6:3b:ec:b7:e9:
aa:59:9f:95:ad:37:69:06:7a:a7:d4:02:e6:93:45:
c7:26:e3:b9:84:ca:09:53:68:30:cc:03:85:13:67:
50:4c:4a:95:91:f3:4a:6a:dc:33:39:7f:8f:22:79:
60:fe:f2:48:9e:d3:0a:85:a4:3a:89:a2:31:5d:0b:
71:5b:34:96:ed:45:09:7a:10:9b:40:5b:65:72:a6:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:CD:A0:9A:26:EE:AF:60:5C:E0:EE:00:B8:92:3D:31:67:F9:69
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1c:0d:28:a3:2b:71:29:59:60:f8:12:e2:3e:3d:47:fc:d8:
01:27:6a:46:28:cf:e0:4b:b0:d7:b9:dd:59:35:e9:25:44:3f:
f5:8d:13:aa:6f:c2:4d:98:cd:ab:42:23:fe:78:fe:27:87:f3:
98:34:f6:c8:d2:5b:11:8c:63:19:ea:3c:ff:34:20:67:13:ad:
b8:05:17:24:bf:34:d0:ee:c4:fa:62:b0:fd:c0:06:8b:ac:a6:
a1:33:fe:57:2e:93:73:a7:39:49:13:2a:39:b0:cb:81:ab:51:
7b:66:48:a4:8e:ea:42:2e:fa:91:54:fd:57:f3:53:02:9f:d0:
c4:d8:76:ea:3f:cd:0e:dd:ab:ce:aa:26:91:92:dd:06:e8:5a:
db:29:99:5a:0f:cf:cc:fe:a4:65:67:83:78:22:22:68:b5:f4:
71:cb:76:d3:bc:fc:fe:90:8a:64:d3:fa:d8:bd:1c:c9:05:5e:
d4:05:44:1b:28:be:3b:f8:a7:3f:22:c2:39:86:63:f5:1f:2a:
d4:4c:47:cd:64:32:91:63:17:14:bb:64:f9:dd:38:c7:81:ac:
54:7f:22:ce:91:4c:b1:28:ee:25:23:08:4d:4b:51:9d:11:f9:
75:4a:48:82:87:be:77:52:5a:21:96:25:c3:61:dc:8e:08:5d:
3d:ea:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:42 2025 by rpki-client