Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: tWlvxwQSknQHk60b2ip3x4caHFCsp/kqd0eT/mF7NwY=
Subject key identifier: 42:F9:52:1E:D8:A1:6A:F9:3A:2D:80:6F:6B:1C:05:86:66:76:9E:45
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 0198D4E0A04F3A2068EACF90F4AF0954872B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 132A
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: lBceq7eqJnLqc+Hxunc3wu6IjNyf9oLeE9MLyQzpfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a0:4f:3a:20:68:ea:cf:90:f4:af:09:54:87:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=42f9521ed8a16af93a2d806f6b1c058666769e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:81:c6:b0:9c:cb:32:8a:23:4e:ef:d3:bc:
7f:3e:c0:2a:a7:dd:73:0e:27:e2:6b:b7:c7:d3:7b:
39:b8:bc:8b:cc:03:fd:50:71:43:70:f6:ae:12:ee:
85:f4:64:84:7c:c2:a2:9d:1e:8f:ed:a8:f9:5c:0d:
73:00:16:ff:b9:ca:1c:11:e1:89:b7:f3:d7:39:13:
f7:1b:04:f5:48:5f:4b:e1:df:c5:8e:0b:60:83:f3:
98:da:72:8c:6e:ec:24:6b:ab:b0:f9:88:09:ed:0f:
5d:54:b0:19:d5:32:83:5e:58:ca:7d:5f:b3:e6:8a:
b1:9b:88:70:fd:52:48:5c:b4:5c:79:67:cf:10:ca:
cf:d1:cc:65:3e:4e:de:a5:be:d7:45:34:4c:b0:7f:
25:26:e8:6e:60:f4:8c:6b:8f:5b:9b:a7:6d:7a:67:
7f:fa:4a:4f:24:f0:10:c3:2c:a8:8f:23:e5:ac:0e:
39:60:09:ab:d6:45:08:b2:d7:97:fb:ce:5a:6c:2e:
f6:65:cf:d2:a8:27:69:ec:a6:27:f3:74:82:46:4c:
85:7d:e4:56:5a:c9:58:b0:5e:92:d2:cd:32:28:21:
b2:57:7e:e4:b4:a4:de:ce:bb:01:10:0d:f5:50:6e:
64:f4:dd:a1:c9:00:6c:48:82:aa:f9:fc:83:3a:9d:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:52:1E:D8:A1:6A:F9:3A:2D:80:6F:6B:1C:05:86:66:76:9E:45
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4a:76:ab:d0:7f:93:7b:2e:ac:86:94:31:e2:80:90:88:f1:
1f:bc:09:1d:ff:2e:c0:d5:15:d9:5f:94:04:54:2c:60:7f:9d:
11:1f:ec:ac:e8:5f:7f:11:12:c3:03:07:71:9c:32:6b:85:ad:
15:43:8f:cb:ed:3d:01:dc:a0:b2:67:12:ac:21:7f:94:f8:dc:
5a:19:65:33:80:6f:80:d0:3a:86:08:77:9c:30:eb:7e:a0:4e:
d7:1b:59:0a:92:fb:7b:28:28:80:92:fe:b2:9b:33:e1:e2:04:
35:76:97:8d:0c:62:19:e7:08:bd:ed:a2:bb:59:45:ae:20:2d:
eb:98:05:5c:c9:a5:29:92:e6:4b:8b:87:13:92:40:62:2b:f1:
cb:f4:87:e0:85:6d:74:47:99:1e:88:21:71:80:63:f9:59:ac:
f3:2e:28:49:f3:7c:01:41:9c:ac:0e:24:44:ec:cd:d5:a4:2a:
99:0c:d6:44:5c:59:10:72:1a:60:9f:52:fc:29:ca:57:56:48:
08:c2:d3:50:d7:fc:ec:5f:24:57:35:aa:86:35:18:f5:cb:9f:
55:5b:b4:d5:8a:36:7a:e1:7c:65:5e:49:d8:98:7c:d1:13:f2:
d7:ee:53:cb:5b:32:23:68:d6:b9:3c:65:f2:a0:15:85:c9:b2:
9a:0d:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:53 2025 by rpki-client