Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: HpZw0cBrqQjQeHKGPDK1sokiLVvmkCp2DFcwy3TWbkI=
Subject key identifier: 82:38:94:68:51:13:BF:8F:C4:6A:9D:CB:96:F5:70:3C:5F:30:7C:37
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 0198D4E0A906F41C2EA8A0AFB69EE3E89F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 1346
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: MTGNtNL446j8Cgee3TJ9vFtFhTT1yzBckVrIPgXhIVQ=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a9:06:f4:1c:2e:a8:a0:af:b6:9e:e3:e8:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=823894685113bf8fc46a9dcb96f5703c5f307c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:94:f7:2b:f2:b5:63:61:e0:1e:3f:9d:96:
90:5f:3e:67:1d:7e:15:dc:19:6c:5b:54:d6:29:2f:
b2:82:d8:f3:f6:82:d7:ec:13:82:25:91:08:64:d9:
ee:e4:c8:3b:1e:78:bb:71:d1:d2:1f:a1:ee:10:83:
f2:6f:07:14:03:b3:4e:0b:c8:52:07:bc:b6:24:7c:
e3:d3:f7:20:6d:79:04:6e:45:27:8a:70:7e:1e:2d:
f6:67:97:01:1c:b6:b4:63:79:ee:58:31:5b:2a:37:
0b:1b:2b:54:d3:49:93:07:ff:b2:fa:79:eb:08:87:
26:11:5c:c5:50:6e:7d:a6:66:dc:43:9f:80:70:d4:
5d:9f:f2:72:04:00:4c:a4:5a:18:ed:27:c6:97:66:
1a:4e:fa:43:71:3a:18:46:f5:bc:b2:56:80:9e:63:
35:91:ae:24:22:4e:fa:7d:f1:87:a7:a7:34:ee:8c:
04:b1:ad:e6:11:1d:fb:5c:6f:69:fd:ad:a0:85:5b:
7d:fe:fd:f7:23:ad:67:18:68:20:45:cd:74:48:0e:
b0:13:6c:9a:42:44:28:0c:62:70:23:d5:95:6d:62:
c3:0f:cd:25:f6:b7:2b:27:b6:dd:e7:31:c0:5d:57:
ca:42:ae:35:89:93:ba:68:7d:9d:c8:6f:bd:db:11:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:94:68:51:13:BF:8F:C4:6A:9D:CB:96:F5:70:3C:5F:30:7C:37
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:ab:64:1e:e4:9e:0d:eb:4a:1c:6b:15:31:f0:38:18:94:
9d:1b:0c:de:ce:91:2c:68:00:27:e5:73:e6:39:15:85:e4:97:
a0:49:e4:4e:7c:87:94:aa:70:eb:8f:73:1e:20:f5:5e:ab:fb:
a2:42:21:e1:13:d0:63:20:e3:48:0d:6f:10:a9:c8:b2:11:0a:
f0:00:53:6f:46:a4:11:b6:09:40:61:de:94:8c:26:d5:44:3f:
55:94:53:67:cf:6a:c4:05:36:e8:32:6e:9b:49:53:d1:06:6c:
3e:ad:22:3a:01:4a:40:06:cd:9c:af:95:b9:04:1b:b1:23:0c:
10:9d:3e:bd:c7:f3:1b:21:a2:37:2e:d7:7a:14:b4:a6:9a:6a:
1e:61:bd:7f:97:fc:60:f8:69:67:c0:9b:19:da:8c:67:49:99:
0e:d9:13:eb:a6:c2:af:44:6d:bb:20:f3:d5:cc:b5:c4:fc:80:
33:66:a8:bb:9b:a7:cc:ed:42:d1:6f:e1:75:d9:ab:d4:19:3c:
df:0c:2a:c9:55:b7:97:52:f1:4e:ed:74:c7:f9:58:53:b9:83:
46:cf:82:cf:ec:c9:2b:3d:41:d8:0c:98:da:8b:fc:9d:91:6c:
80:10:45:c1:c4:f1:9b:ed:bb:a9:13:75:27:35:4d:8d:af:a8:
41:53:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:17 2025 by rpki-client