Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: zX47lORAYKU6Ax8NWOtk7IqOWYWC2agXDaPo8of+uzc=
Subject key identifier: BD:E1:3F:26:9C:96:06:E4:9F:76:86:46:71:A9:CB:AA:16:CB:45:B7
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 0198D404743BA41C200DB58468EF90491220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: FD
Signing time: Fri 22 Aug 2025 23:01:58 +0000
Manifest this update: Fri 22 Aug 2025 23:01:58 +0000
Manifest next update: Sat 23 Aug 2025 23:01:58 +0000
Files and hashes: 1: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: PIgI9rIXCuJIqtjNIEjLF84OZNU56tLQzcr5l1d2uIM=)
2: rrr9lD-1fMY09SJ_d8OflA80hiM.roa (hash: dlPtuTm7KAs7BBecLGSQ0tXT2j/4sVnjNpjS2hSNO9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:74:3b:a4:1c:20:0d:b5:84:68:ef:90:49:12:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Aug 22 23:01:58 2025 GMT
Not After : Aug 23 23:01:58 2025 GMT
Subject: CN=bde13f269c9606e49f76864671a9cbaa16cb45b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:ee:99:af:f0:e5:b1:89:10:04:2d:5b:a6:
f9:43:16:96:ca:df:26:f6:29:e8:da:99:b2:1c:f3:
7c:7f:97:0d:4c:e3:bb:93:97:4d:55:f8:92:5a:1f:
8c:48:c4:c5:1b:22:c8:a6:7d:5f:14:73:8e:33:32:
23:27:0b:b8:2f:cb:30:7d:1f:8d:30:28:ac:9c:ed:
07:cd:44:e1:f5:33:a7:18:a9:e2:53:ea:0e:bf:58:
fd:e2:d4:1e:d2:f4:e5:30:0c:7d:4f:d7:70:94:a3:
4f:fd:cb:4d:be:ca:28:34:46:73:90:08:5d:e0:d6:
45:fc:dd:b4:a5:74:b8:68:56:e9:72:3a:bd:e4:37:
36:ce:87:ff:bb:6a:df:c5:a1:ef:10:a0:0f:34:8d:
79:db:a7:1e:bd:84:0a:e8:28:71:c7:60:78:bc:12:
df:f4:ec:bb:b5:82:2c:dd:b4:23:9c:fa:48:ef:c1:
b5:88:2f:d0:0e:00:a7:8e:be:7f:ce:a0:fb:7a:3f:
d7:59:da:db:cf:88:4a:74:6f:70:04:4b:31:ba:90:
38:c9:02:4f:d0:31:8b:e2:03:33:84:f6:f9:b5:40:
8b:37:23:c4:2b:1b:e4:e2:00:ed:19:e7:e9:9c:b1:
bf:da:0a:e1:8b:8f:84:73:b5:98:9f:8c:6c:f6:61:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E1:3F:26:9C:96:06:E4:9F:76:86:46:71:A9:CB:AA:16:CB:45:B7
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:07:09:c3:e3:6f:59:88:d4:a7:a1:6f:d9:d4:5c:6b:dd:69:
80:6e:5a:ef:12:9d:30:76:e3:74:e0:60:10:7b:8a:f2:0b:e5:
0f:e0:87:75:0e:4b:e4:01:2d:f5:c6:1f:f2:83:90:f9:44:79:
f1:2c:17:00:db:57:09:c2:a4:b0:bf:b3:10:d8:ab:2e:70:6e:
39:69:f4:db:ac:68:71:25:6b:7d:eb:ae:3b:48:e7:78:f7:d6:
a9:4c:0a:d6:e0:6a:5e:64:64:d4:ff:78:f5:74:3e:4f:ad:30:
e5:4f:76:62:aa:62:3c:26:fc:96:16:ad:80:56:e6:0b:75:2d:
cd:95:a7:a5:2c:31:6d:d0:47:9d:a9:56:ad:27:31:c2:c5:28:
de:86:28:31:cf:fc:da:97:e0:f3:e0:b6:87:30:ab:74:d9:1b:
a6:be:97:30:a8:a1:f0:b4:ea:f1:f7:67:30:29:bb:14:e6:1d:
00:3c:f3:dc:f1:fd:cb:c5:fd:f0:b9:8d:66:1f:f0:5e:9e:8f:
1d:4e:59:6b:9b:15:b6:e5:06:ed:59:7c:8a:3d:79:65:5b:8e:
90:a6:15:a7:2f:34:73:66:19:61:ff:c4:81:11:56:25:cd:93:
e7:fa:c5:f6:89:1c:c2:f1:b4:b9:da:f8:91:b5:c7:7f:08:5f:
fd:10:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:39 2025 by rpki-client