Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: NW8arQP5eNiL2T1nilmAaT7G4ecrDgyAijVXGYz6hrs=
Subject key identifier: 07:BF:AB:90:B4:26:87:DE:28:5E:E8:28:AE:0C:5C:7C:0D:C7:E1:99
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 0198D4A7E0598A54C31F94AC1EEA7ECEC750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 07DD
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: qSEzeQAK1Pl4LAONOwLKxFeQXwDJdMFqm+0+ssqLQMs=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e0:59:8a:54:c3:1f:94:ac:1e:ea:7e:ce:c7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=07bfab90b42687de285ee828ae0c5c7c0dc7e199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:b7:3d:85:d9:89:0a:a6:73:9b:21:a2:3f:
cb:fe:e9:98:20:3c:a0:1e:d4:c6:ee:83:cc:81:f9:
1d:40:f5:55:2b:09:84:18:b8:c1:66:2f:a4:2b:5c:
73:6b:3c:df:67:b6:6f:4b:66:5c:36:b4:76:55:2f:
9d:48:f3:c2:4c:f3:5b:03:f9:27:79:99:f3:e0:bc:
c2:d9:8b:a0:d4:50:8d:03:4f:b6:60:e3:41:77:b1:
59:28:c8:06:29:3c:f5:20:f1:5c:37:fd:90:84:0d:
4e:00:c6:46:8d:9e:ab:d3:7d:25:de:de:52:6b:59:
c0:7b:80:1f:0c:3b:23:43:34:fe:8d:21:31:fc:1f:
e4:1a:39:95:65:de:84:ad:e6:88:6c:95:1a:6c:aa:
bf:23:4b:ff:20:b8:d5:7e:ac:86:3d:17:b6:fa:e7:
10:b5:2a:71:15:4d:da:f8:76:2e:e5:a9:40:82:f1:
4f:1b:ed:48:a6:63:c6:4d:72:54:de:e5:85:e4:17:
d0:16:af:af:95:f0:19:fd:c0:b8:05:39:10:2b:93:
64:68:8a:2d:4c:7d:f6:a2:a5:59:c2:93:ca:4f:b4:
f0:08:e3:9c:bc:61:24:8d:d2:4b:1b:c1:be:af:52:
cb:45:96:24:c1:7a:90:f0:0c:68:6f:1a:1b:a2:00:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:AB:90:B4:26:87:DE:28:5E:E8:28:AE:0C:5C:7C:0D:C7:E1:99
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:13:16:7a:e5:73:51:19:0f:8e:8c:00:ab:c6:32:68:0b:28:
3f:e0:ab:a4:f4:40:60:76:3d:c8:cf:ac:e5:eb:d9:ad:54:7f:
af:d4:7e:fd:f4:50:ef:90:c4:ea:a2:66:9b:03:ab:0a:e9:c7:
2b:34:14:d2:c9:55:33:0d:a6:e3:be:d4:33:1c:dc:9f:1a:ae:
7c:7f:5a:47:a8:18:06:94:45:3e:27:fb:d7:71:7f:68:d9:78:
95:33:fc:3f:e9:48:de:97:1e:a5:27:33:63:4d:98:d3:92:79:
54:2f:b3:d1:6c:36:d1:19:bd:d1:56:9f:35:87:ba:d2:b5:43:
1d:95:9c:d0:d5:5c:8d:00:1a:d9:af:37:d7:8e:0f:a3:b9:e9:
3d:93:58:e9:fe:f1:25:ac:bb:bf:0d:8a:24:ef:99:75:24:26:
6b:98:0a:2f:e0:cb:ef:22:18:81:73:56:f3:d6:47:a3:3c:e4:
47:e8:c7:8a:d8:22:7b:82:f3:f1:58:27:8c:84:13:f8:80:c3:
3c:36:77:9f:de:c0:95:17:ef:83:c3:7b:21:71:c1:24:25:ae:
1a:4e:0a:26:aa:aa:a2:e3:da:16:a7:77:5a:a6:87:8f:2f:e8:
07:17:2e:21:4e:5b:7d:bd:bb:95:0e:eb:e1:4f:02:50:78:ef:
c7:ad:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:37 2025 by rpki-client