Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: 9rYY2SBZRgv2WWNPrRVSjCl+5Dhccn+6TU5yqQuzKNo=
Subject key identifier: C9:8E:1D:D6:6F:40:F2:29:89:1E:40:A3:B5:85:5D:23:A8:CC:D4:7F
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 0198D5157522FA8CA23ADD7EC92BF0491255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: 9pCK+/MDVTR2Xw9ypNoGSTKa4N7OdeweLBKSHaBXB60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:75:22:fa:8c:a2:3a:dd:7e:c9:2b:f0:49:12:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=c98e1dd66f40f229891e40a3b5855d23a8ccd47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:70:ec:2b:85:d5:87:9d:b6:7e:f7:c6:2f:
f4:7c:03:78:ec:da:a1:1e:d2:95:cf:8c:d3:0c:fa:
36:09:11:0c:1f:40:f8:3b:a1:87:a1:6a:1d:16:93:
f5:a0:eb:f5:76:be:81:90:92:5a:38:2a:61:7e:43:
64:55:d4:5d:24:d4:e4:48:aa:3b:6e:18:4c:ec:0e:
ce:2b:e1:05:18:2f:86:67:08:a9:ca:d6:db:3e:0c:
58:90:99:3c:d7:0f:67:76:9c:8b:73:94:43:8f:6e:
22:d3:0f:c0:2c:68:aa:d8:b6:6f:69:d5:3b:ce:3b:
d9:73:d5:3c:08:27:fb:0f:59:60:9e:6e:0f:d8:5a:
80:34:2e:1b:93:57:92:f0:85:d2:47:64:fa:02:44:
1a:ea:41:aa:86:13:5b:a2:4e:2a:3b:5e:1e:fb:e0:
04:8e:c2:5f:d5:9c:87:e2:36:a2:4f:72:b2:ce:40:
7e:16:6e:0e:98:77:37:f3:44:41:d8:91:37:70:1f:
25:0c:ed:6d:90:f3:de:1a:8f:38:ef:48:54:bf:be:
3b:0b:c1:c6:9d:13:13:50:ac:e3:b9:bf:4e:68:67:
a4:23:3d:7c:3a:4f:31:0d:a2:9c:9f:a4:54:39:1d:
60:30:db:de:e3:7e:39:ed:20:b8:f4:5b:d0:11:95:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8E:1D:D6:6F:40:F2:29:89:1E:40:A3:B5:85:5D:23:A8:CC:D4:7F
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8e:10:d4:b2:bb:79:a6:44:92:63:74:b5:12:c5:64:22:e9:
bd:b2:04:b5:7a:c0:22:20:76:db:68:46:4d:ff:29:ae:d1:95:
d0:a7:6d:b9:da:a7:06:26:2f:05:be:3c:16:4a:b6:7f:ce:44:
a9:a1:02:0b:89:3e:4a:58:94:9d:f1:0b:1f:00:db:09:4d:ec:
42:b1:43:2d:f4:ee:50:fa:eb:2a:82:16:f8:5a:eb:62:9e:33:
bc:69:74:75:cd:40:6c:6b:82:49:4a:6e:cc:5e:ad:b1:ba:1d:
43:aa:37:6e:37:dd:8f:0f:bb:b4:36:32:1a:38:c0:01:4a:71:
1a:ed:d3:b3:a1:a4:84:35:b7:b3:89:e9:5f:b5:cb:f0:a5:85:
dd:2d:e8:1a:53:fa:07:4c:e3:39:4f:71:79:5a:d9:68:23:43:
f7:6a:0a:be:d3:9e:01:cd:69:0b:41:a5:5f:d7:46:ad:db:25:
1c:6a:d3:8c:16:c2:92:e3:b2:60:16:06:ca:83:11:c3:47:1a:
97:00:a3:9f:90:93:3c:cc:a3:25:df:06:df:80:f0:43:29:0d:
04:0c:ef:fc:f3:f2:64:20:08:71:a1:2f:63:f7:b3:60:26:f8:
3b:fc:e4:a7:69:5d:93:cf:6d:7a:49:71:70:34:16:a6:90:9d:
05:38:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:37 2025 by rpki-client