Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: ibaoyfjo18dyCpJxNu4TOIJV9jxiWaRBIfoDdAtzCq4=
Subject key identifier: F3:C1:2C:48:C1:4B:58:F8:B5:A8:2E:9C:88:67:48:BE:41:87:19:53
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 0198D474443533DC37C20357F25363CAD71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0CC5
Signing time: Sat 23 Aug 2025 01:04:05 +0000
Manifest this update: Sat 23 Aug 2025 01:04:05 +0000
Manifest next update: Sun 24 Aug 2025 01:04:05 +0000
Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: j7oOfkhyemYFEKsHOGWRn4tyq4AfOoOBJF3tz8zy+5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:44:35:33:dc:37:c2:03:57:f2:53:63:ca:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Aug 23 01:04:05 2025 GMT
Not After : Aug 24 01:04:05 2025 GMT
Subject: CN=f3c12c48c14b58f8b5a82e9c886748be41871953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:7b:99:17:95:d6:b9:fd:ec:ce:09:d9:99:
e3:24:4f:05:93:8c:d7:96:f6:44:22:8e:af:38:7e:
ca:6e:a9:53:6b:66:f0:85:26:a6:e0:23:59:a7:16:
c9:31:fc:72:f9:86:d4:63:67:c0:73:bb:0f:7b:c4:
a8:48:92:ca:2a:35:54:a1:a6:23:e6:c6:57:9e:4a:
84:27:3b:6c:f3:31:e6:95:ac:1e:68:71:67:01:d1:
b8:df:cc:3b:cb:b8:bc:83:b1:39:3e:07:60:6c:58:
50:ad:3c:7e:16:aa:c5:77:26:30:9e:cc:14:05:53:
08:05:75:7a:36:8e:bc:5e:c9:cb:5c:95:10:49:80:
d4:b3:e2:85:67:80:f4:45:8f:48:2c:3e:0d:2f:e4:
36:c2:d6:52:f9:b8:39:60:80:23:45:63:d3:07:a8:
a0:fd:ee:8b:ff:c1:a7:21:ab:27:16:50:12:98:35:
69:43:57:ce:fb:5d:31:e1:de:a0:53:22:ae:45:69:
b8:40:1f:7b:e2:55:fc:1b:fc:f2:55:c0:d0:3e:c9:
d1:f4:0a:fc:98:8b:44:53:e8:9e:27:da:aa:96:e4:
1c:4c:80:28:1a:aa:6f:1d:78:64:26:66:66:d0:0e:
5a:77:09:bd:9a:8e:c3:cf:23:9a:6c:ca:6b:38:61:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:2C:48:C1:4B:58:F8:B5:A8:2E:9C:88:67:48:BE:41:87:19:53
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:62:f0:f6:1f:0c:12:3b:4f:be:75:b9:27:25:0d:11:3d:
43:df:b6:84:d1:89:cf:cb:10:03:f1:b0:49:9c:f0:33:4d:c9:
f9:69:3d:eb:91:9e:9b:74:b1:71:6b:45:f8:03:35:d9:89:36:
ef:b7:0c:69:90:fe:c6:7a:24:66:69:14:6e:33:2e:b6:0c:2c:
55:bf:72:90:49:55:e1:a8:a0:cb:75:85:e1:da:10:86:7b:e7:
c2:d9:db:9b:15:59:65:a0:4a:26:8e:dd:e6:00:62:0b:92:d8:
df:70:a9:e4:56:24:c2:7e:65:06:54:e1:b7:c8:bd:27:3e:0b:
9a:f9:9d:df:ae:09:94:6a:08:02:29:e6:2b:9d:c3:ce:c8:a6:
28:e1:82:f3:6e:25:60:59:fa:15:5c:0b:43:e7:04:cc:24:7c:
90:a1:81:54:12:b9:45:9a:cc:aa:e8:da:8e:a2:d7:b9:a4:91:
ab:ef:47:5b:20:1f:00:bb:6b:a3:d2:78:e4:bf:c1:57:b8:83:
29:94:1c:dd:79:b9:6d:55:4b:f1:da:1b:b2:a1:09:2f:cb:03:
b5:87:16:c2:2e:ef:1f:6b:4c:08:12:bc:8d:21:66:4d:07:b0:
c3:01:08:79:db:c4:27:60:09:a1:42:e5:cc:32:57:c6:76:0a:
50:23:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:50 2025 by rpki-client