Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: ltoFTTR/su80ql+yW93Y3sj+gy3Sq3TS9Kg1QAP7ZKg=
Subject key identifier: 90:E9:05:8D:85:CF:62:70:EF:72:53:EE:8C:28:10:BA:4C:62:36:D8
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 0198D4E0BB7A38BAE0977CFD9B57853FE29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 02AF
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: 49hTBdqRptQsq2f34iEXZ32GefPCfZkeBsv/u9NpNoI=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bb:7a:38:ba:e0:97:7c:fd:9b:57:85:3f:e2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=90e9058d85cf6270ef7253ee8c2810ba4c6236d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:4b:5e:af:10:db:7f:1e:7b:76:3e:19:7f:
8f:83:a1:a5:df:79:e8:aa:98:9c:cb:5b:cd:6e:53:
96:e6:e4:e6:1e:0f:2e:6f:04:9e:fe:50:e7:01:11:
e2:77:20:48:00:e6:13:78:1d:17:e8:f9:37:85:db:
34:0a:e4:ff:9d:9d:19:e6:95:89:c9:3d:4d:9b:b2:
cf:9d:47:52:aa:c4:88:4e:8a:7c:bf:84:ac:ba:df:
cf:e8:27:06:cb:1b:21:bd:fe:b2:13:f6:17:28:d8:
02:db:b7:55:5a:78:7c:3f:2b:ac:ec:7b:87:20:98:
b6:be:05:07:09:70:05:5a:01:68:e5:e6:04:2c:1f:
b3:eb:b8:0e:0b:31:ad:03:f3:d6:9f:f4:61:bc:9f:
a4:72:53:93:73:91:da:e7:76:c1:90:d0:61:11:47:
fc:d5:27:45:f5:3e:35:8c:ec:aa:e0:7e:79:7c:cf:
cb:cf:d0:f3:45:07:3e:5f:87:bb:ec:d9:e9:29:38:
ab:9f:45:46:64:48:7a:b6:b7:3f:37:b3:ec:27:be:
7a:99:5d:b5:65:f5:d3:8c:57:7d:b2:3f:87:56:f2:
30:1f:bc:88:79:78:1b:cd:55:38:00:4d:14:6b:7d:
ff:2d:e0:f2:47:b2:57:a5:99:97:c2:00:5c:5c:82:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:05:8D:85:CF:62:70:EF:72:53:EE:8C:28:10:BA:4C:62:36:D8
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e1:a8:40:1b:6f:4d:0e:d1:dd:95:a3:e3:94:28:a2:fe:1f:
18:3d:43:be:a9:a0:69:be:cf:d4:2f:71:ca:7a:66:f3:c6:6c:
05:ee:bb:56:b0:32:90:e6:6c:0b:a5:ba:a8:7c:6d:81:44:63:
00:57:9a:af:d8:ac:1e:29:1f:b4:62:fc:c1:27:c3:23:fd:96:
da:3c:a9:c0:e0:c8:81:84:85:9f:a8:fc:c7:e3:45:0e:c1:cb:
4e:68:da:6d:76:a1:6c:db:fd:dd:17:36:74:5a:cb:34:e2:31:
63:d8:a8:c8:d9:40:47:70:c3:e3:64:3d:b1:13:a1:eb:2d:7b:
6a:5d:76:fa:f1:5c:ce:63:e5:28:61:86:de:20:7a:eb:1c:47:
9e:19:46:8e:d5:73:7c:88:8c:cb:71:0e:2d:93:cd:b7:6e:12:
82:5a:24:02:22:47:df:dd:36:b4:89:1e:ee:31:b8:01:53:2a:
3e:78:5e:b5:b9:de:bc:9e:34:9d:a1:9b:f5:d6:1a:ff:d3:4e:
d4:7f:76:b9:47:27:59:f7:bb:6a:cc:48:ce:b0:3d:7d:6b:d2:
af:a9:ee:29:6b:f2:70:cb:d1:aa:8a:c7:ca:3a:1d:f8:b0:6f:
e7:ec:d3:4b:a0:72:dc:be:b8:e3:be:4c:bf:da:92:e7:55:e2:
84:69:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:42 2025 by rpki-client