Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
File: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft (raw, json)
Hash identifier: irIpiRY/aYBeeP6A1D6SWSlcTK3yflL3bomzByOC6Yw=
Subject key identifier: 8A:12:E1:D6:02:8B:89:F1:9F:C7:2F:70:B0:B4:BF:1C:76:2C:7F:CE
Authority key identifier: 1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
Certificate issuer: /CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Certificate serial: 0198D473F9CEECE4B0EAD8FE0BF172865996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 01:03:47 +0000
Manifest this update: Sat 23 Aug 2025 01:03:47 +0000
Manifest next update: Sun 24 Aug 2025 01:03:47 +0000
Files and hashes: 1: Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl (hash: jZUYW2XxF0xWFfy1cf/FGS8FAMVP1CYQ4otFv+LJkRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f9:ce:ec:e4:b0:ea:d8:fe:0b:f1:72:86:59:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a392dfc6ba2d3186d3269c7091b7019815345d3
Validity
Not Before: Aug 23 01:03:47 2025 GMT
Not After : Aug 24 01:03:47 2025 GMT
Subject: CN=8a12e1d6028b89f19fc72f70b0b4bf1c762c7fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:78:8e:dc:ac:af:0e:e1:fb:08:ca:25:f1:
89:a7:55:67:82:d8:5e:b4:da:17:31:c8:07:73:95:
15:ff:80:b2:57:a7:dc:9c:f2:2b:4c:37:13:ed:0e:
0a:3f:15:04:77:ba:18:0b:da:a1:1f:fa:8b:31:71:
83:76:b6:c0:6e:1a:0d:28:16:e7:dd:fd:68:09:95:
fd:be:fb:46:59:95:d0:11:c2:9b:6f:49:b3:1d:a6:
fb:6a:29:2d:84:31:0f:99:70:99:4f:8c:4f:60:f2:
4c:c4:84:5a:0e:7d:50:76:a7:07:fa:35:2b:33:8d:
fb:18:85:5e:47:f3:10:61:18:c9:d4:91:d2:db:0a:
52:4a:c4:a1:47:51:05:56:8d:5e:35:fc:7d:0f:48:
e3:0c:68:40:b8:e4:91:8d:7b:8b:6d:ce:29:e9:ed:
d3:b9:c6:78:37:f5:2f:4a:c2:75:ce:79:1d:44:51:
1a:9d:4e:84:5b:10:6e:5a:6b:e6:25:1a:95:cc:fc:
8e:dc:8e:bb:1c:63:9f:fb:6e:aa:e4:8d:70:46:f1:
07:2e:ba:45:fb:e3:a8:f2:f2:79:1b:d3:e9:6d:59:
76:eb:00:24:85:47:71:68:c7:40:8a:9a:f4:d7:05:
05:dd:8b:5b:0b:0c:e6:79:db:09:3f:72:14:d6:9b:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:E1:D6:02:8B:89:F1:9F:C7:2F:70:B0:B4:BF:1C:76:2C:7F:CE
X509v3 Authority Key Identifier:
keyid:1A:39:2D:FC:6B:A2:D3:18:6D:32:69:C7:09:1B:70:19:81:53:45:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/32d85d-a717-4d68-82a6-2f365f22a18c/1/Gjkt_Gui0xhtMmnHCRtwGYFTRdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:e4:c3:c2:89:b8:df:87:ea:79:06:dd:b8:cd:57:b0:80:
0c:39:33:66:8a:75:d5:ab:45:f2:72:18:a4:3f:2d:2c:7e:03:
77:fb:88:6f:4b:24:4d:26:4d:a3:0c:4f:02:9c:a9:bd:4d:6a:
dd:c2:fd:67:1b:c4:ee:36:42:0e:17:24:0f:d1:cf:b0:f9:4d:
37:78:43:90:29:d0:96:1d:21:d5:a0:c1:11:7d:91:1c:f5:c5:
7f:63:fd:4e:9e:fc:b3:23:9a:6c:98:48:b9:e6:54:b3:1a:c3:
38:85:ea:aa:53:41:e2:9f:b6:71:ce:d7:df:b0:2e:03:dc:89:
3e:c4:c4:ef:7a:c3:f3:79:93:33:9f:98:ae:10:56:e8:f1:6c:
3b:0b:ad:31:d5:9a:98:0b:f8:be:87:08:03:c5:66:f3:01:5f:
90:af:75:a6:7b:c0:ed:56:e5:1e:cb:3b:89:d6:fd:bf:cb:36:
33:7c:a0:9c:e0:52:b8:01:0b:a0:6d:e1:ea:d2:40:be:6d:26:
30:ce:23:2c:80:79:0f:c2:ba:c1:f2:b6:91:20:6d:90:db:29:
91:8a:12:55:36:44:13:9a:ab:05:4f:11:e1:89:5f:57:f7:16:
d6:43:0c:26:81:a4:14:39:f5:54:4e:4d:e4:05:85:32:0a:8e:
c9:21:1a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:55 2025 by rpki-client