Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: Iftz4lwSk9e6vDi2i90UsgBxACqNdXnPLpMENiDUzLk=
Subject key identifier: E7:FD:E3:2D:7B:AB:C8:05:E7:79:80:C4:DE:DA:B1:44:4F:81:F4:37
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0198D66128B9894410130BC594A20F5ABA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0372
Signing time: Sat 23 Aug 2025 10:02:28 +0000
Manifest this update: Sat 23 Aug 2025 10:02:28 +0000
Manifest next update: Sun 24 Aug 2025 10:02:28 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: IE4DvAD87mYghoKUoS+v/4iUVP39qs1zvGXR2ng3l10=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:28:b9:89:44:10:13:0b:c5:94:a2:0f:5a:ba:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Aug 23 10:02:28 2025 GMT
Not After : Aug 24 10:02:28 2025 GMT
Subject: CN=e7fde32d7babc805e77980c4dedab1444f81f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:83:80:ff:3f:c8:4f:d3:c5:81:52:d1:d8:
6d:e9:93:34:70:66:ee:b6:f4:97:3b:4d:85:81:18:
99:bf:41:e9:c3:4a:13:70:84:cb:56:5b:26:7e:4b:
c0:37:e2:f1:b7:a2:a6:b6:29:ae:56:d9:78:fd:cd:
f7:ec:05:7d:39:8a:49:d3:04:f7:e7:33:56:50:a8:
05:28:9a:97:62:26:21:9c:78:c5:9d:5b:5f:13:4c:
de:89:34:72:65:ed:db:08:a5:00:eb:a4:cf:97:4a:
2c:c8:39:b9:ff:2f:82:b1:00:da:9c:cb:7c:b1:f0:
61:a5:c8:ec:97:04:1b:73:f5:90:80:c8:34:6f:3a:
09:43:b5:d2:c1:9f:cd:a3:cb:5d:c7:e5:b1:28:e7:
7f:56:1a:e0:cb:c6:4b:78:98:c4:f8:2b:6f:df:d1:
5a:8a:e5:cb:8e:9e:9e:e4:df:18:a2:26:83:fa:87:
6d:4c:fc:b8:22:46:ef:00:8c:08:63:54:b9:63:a2:
7e:bd:bb:96:f5:10:bf:19:47:2c:b6:0b:0e:12:69:
c6:e4:58:a0:97:4f:e6:1e:34:a5:46:c8:d3:e0:a8:
a8:03:07:15:e1:88:9f:ae:67:6e:2d:91:ce:22:d3:
c2:8a:bd:98:89:3e:c3:4b:9c:8b:35:9e:72:1b:ad:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:E3:2D:7B:AB:C8:05:E7:79:80:C4:DE:DA:B1:44:4F:81:F4:37
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7b:94:39:dd:cc:52:f8:11:1f:9e:07:09:97:50:6d:be:e1:
55:3c:57:f4:bf:14:2d:c5:bd:24:c5:b8:bb:fc:2f:53:ec:2f:
b3:67:b5:1c:08:11:7f:63:de:b4:e4:c6:6a:02:38:33:9c:af:
d6:43:d9:4f:15:5e:cd:a2:40:e1:49:5b:24:8e:45:a4:da:6e:
ab:99:fd:1d:ea:05:70:d1:37:f4:a3:5e:c8:79:53:0d:95:db:
49:f0:88:d0:90:96:59:7c:4c:13:d5:f0:6e:e7:e8:c1:ca:36:
f6:8f:b7:ae:c3:ec:00:75:3d:62:92:3c:3c:c1:84:13:0b:48:
c2:6c:7f:c7:c1:9f:0a:e2:af:f1:00:f4:9f:75:89:fb:51:0d:
c6:5a:05:37:8b:be:97:d8:9d:3f:81:27:59:78:c9:13:4a:93:
2c:a1:4a:ef:29:62:1a:87:d0:42:3e:83:b6:dc:42:6c:16:f8:
b5:6c:59:00:6d:49:18:5f:96:a2:95:1f:5f:d5:83:d7:1d:46:
a8:b8:8f:c5:66:4e:ae:9f:62:dd:e2:b1:d3:16:3b:af:12:f8:
d2:56:17:fc:d1:0e:4c:14:c6:76:04:b6:f0:6e:fc:52:21:a8:
d6:2e:93:f0:95:12:e5:77:87:ef:4e:d6:93:09:34:d3:81:bb:
e3:a7:4f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:29 2025 by rpki-client