Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier: J4/eM5x2IBI0e0H9XtkJcvQDHGWfQeM8eSFKQ/4up+E=
Subject key identifier: 86:27:13:21:00:7C:CB:2E:ED:21:CB:8C:0B:CD:36:DB:C4:F3:76:EE
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer: /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial: 0198D5BC5784AB9C9B837A4BAF50BBD739A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number: 01DD
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: /yfQuCDE3iX+2gJBfJw1tEKer8C+m9LPh3iNRCB60vE=)
2: HbzqPjxV2gzVXrBA-nWLmjfTDxo.roa (hash: cWFkMXXdUpsLxuuBafoKiMAojPQ1C+2JXUGxa/p9/qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:57:84:ab:9c:9b:83:7a:4b:af:50:bb:d7:39:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=86271321007ccb2eed21cb8c0bcd36dbc4f376ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:26:41:8e:d6:ce:ef:da:94:25:db:4d:f5:
f8:15:f0:e9:e9:f8:a8:34:f9:08:70:e2:ea:d8:ea:
99:a7:3d:14:7a:5e:7a:e3:fd:b1:89:01:40:40:4d:
a9:88:cd:8d:15:08:00:6e:c3:76:00:e5:04:0b:5c:
5b:a9:f9:23:b6:1b:9d:0b:b6:53:73:57:25:5b:f3:
5c:85:f9:40:51:c2:eb:9b:4c:a4:05:03:28:e1:f3:
74:eb:ab:88:c2:11:cf:ae:5d:42:0e:33:ab:8c:f7:
96:e7:e2:2b:96:1f:f0:27:a5:f6:5b:2c:3a:59:6c:
bb:ea:8b:98:35:c8:89:4d:3e:c2:1a:1d:33:2b:38:
bb:67:84:ae:93:d6:a1:36:26:45:29:c6:5d:b8:97:
5d:c7:88:a7:d1:55:42:23:b6:39:fb:e6:a5:f0:09:
99:f2:5e:36:68:27:c4:76:d8:8f:52:d3:97:57:5e:
a1:73:c6:91:b0:39:2a:46:3f:db:d3:de:5c:48:d7:
06:8d:25:c2:f5:61:b7:5d:ec:83:cf:58:0a:dc:51:
aa:3b:77:01:c2:df:77:1a:f0:c5:20:4a:6d:cf:33:
18:f5:ce:0c:58:a3:96:80:6e:59:be:08:e5:59:df:
67:28:fc:11:75:78:3e:91:99:25:9e:69:86:66:56:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:27:13:21:00:7C:CB:2E:ED:21:CB:8C:0B:CD:36:DB:C4:F3:76:EE
X509v3 Authority Key Identifier:
keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:a9:db:29:39:13:80:bf:60:df:2c:90:7d:7e:fc:ca:63:
dc:5b:0c:3a:f8:2a:8a:20:b8:f3:54:ee:b2:1c:ae:90:4a:f0:
82:fa:0f:11:99:fb:2e:fa:a7:2f:19:d8:1f:e3:d3:70:a5:c0:
6d:eb:52:8e:e7:cc:52:28:60:5a:c4:ef:78:a0:8e:f6:20:45:
73:09:84:a3:ee:3c:da:d5:95:fc:b4:c0:8d:ff:09:4d:ef:e9:
4b:3e:48:57:72:31:af:47:6b:d1:a7:17:7e:63:20:e6:b7:05:
ed:44:63:2d:2c:1f:a9:f7:ea:34:24:3b:54:74:b8:16:dd:4f:
d5:27:1c:c9:71:5a:17:f8:ba:7f:96:46:57:0a:9c:47:08:10:
01:f7:56:d4:33:e6:d7:7d:c7:40:32:e7:9e:d7:30:c5:8a:d1:
ad:b4:eb:ac:df:c0:1f:fd:f3:2d:7d:e3:b3:e9:11:8d:88:48:
7a:19:38:fe:b7:b5:46:66:85:64:34:b9:9a:57:0a:00:a0:b1:
38:b0:5a:70:ff:fc:73:72:f8:13:bc:2c:60:bc:98:fc:06:a7:
27:37:ff:32:ba:a0:f9:f7:f8:f3:cc:a1:e1:2d:50:fc:d1:ad:
6d:98:24:8f:e5:9d:4f:88:99:42:b8:ce:2a:a9:36:8c:a3:63:
e7:8f:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:10 2025 by rpki-client