Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: ZQPAoOY7ozj/KVW1cB4q8XgEzie1l3GMgX1oL03cDaY=
Subject key identifier: 17:13:A4:4F:47:70:BB:E2:F7:61:DD:81:AB:D0:CC:C8:F3:7A:FA:D4
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 0198D65FA5134274BCF7CB50079A6F81487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0B70
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: qLILjeDTnBFs59rsQRN9+tYU73ufux1LeED9pBI7bp8=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a5:13:42:74:bc:f7:cb:50:07:9a:6f:81:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=1713a44f4770bbe2f761dd81abd0ccc8f37afad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:7e:0a:af:6c:83:c8:52:c6:0a:f1:5d:d1:
db:cf:db:ce:54:92:4d:99:81:a6:af:e3:60:9d:b5:
a0:44:da:df:00:d3:0f:8a:fe:b9:85:bb:68:d2:c2:
00:ae:f1:7d:74:c1:25:b4:14:1e:29:20:08:14:34:
52:4b:96:23:61:c9:be:5f:ab:28:07:bf:b6:64:7e:
b5:a4:7f:eb:54:88:2d:5f:33:74:81:d9:9c:7d:bb:
42:e6:de:a0:44:db:cd:57:2f:5d:44:a5:7d:bd:5b:
71:47:27:93:36:fc:a9:53:84:22:25:96:6a:a7:65:
b0:59:13:8a:41:c5:e4:0e:31:85:33:f5:19:e5:b3:
02:f9:03:0f:f1:3e:ac:ed:c4:b9:79:d6:41:36:2a:
54:be:3c:43:21:fd:54:1b:0b:69:2b:fb:b8:78:1c:
c4:77:f0:2c:71:9a:54:fc:95:f6:6e:73:7a:3a:5d:
50:d9:17:81:b2:bb:24:9d:7d:d6:da:59:f9:c3:aa:
43:55:de:9b:d7:a6:d9:ca:f9:8f:90:1b:67:38:04:
44:08:cf:51:4c:41:73:5c:d6:88:1c:7e:30:85:34:
94:a0:ef:e1:c0:e6:37:b5:88:07:b0:ce:f4:ff:9d:
bc:ba:93:93:81:f1:1b:75:b5:4b:e5:64:96:ae:73:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:13:A4:4F:47:70:BB:E2:F7:61:DD:81:AB:D0:CC:C8:F3:7A:FA:D4
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c7:b9:97:d4:46:64:ed:b4:5d:71:be:60:45:eb:52:39:a1:
25:26:1c:58:d2:21:4b:ec:85:01:83:22:53:f4:cf:02:2a:9e:
39:e4:d5:2a:63:3c:c0:8c:3a:e0:35:cc:62:5c:f4:33:fa:f3:
8f:48:2c:e3:c3:82:f2:fa:e2:7e:13:30:6c:20:54:c3:35:f4:
4d:9a:44:4a:8a:1f:8a:97:b5:29:a0:1b:2c:5a:62:46:58:12:
32:80:92:1f:d0:3c:58:17:7e:c4:2a:cd:88:24:b8:bd:eb:8a:
53:71:68:f9:97:e5:9b:19:a8:b4:b2:36:83:3f:bd:38:59:fc:
0c:27:b3:80:1a:82:2f:49:1b:cb:a4:30:6e:f8:c4:46:40:ad:
fb:57:e9:b8:32:6d:e8:80:34:03:ef:d1:3a:1c:8e:8a:56:13:
74:7c:81:64:d4:c7:25:6d:58:cc:c5:c8:b3:02:95:1a:cf:36:
41:a8:76:ac:ee:d1:f7:ac:92:07:d8:1b:37:b4:81:90:4a:50:
d9:6d:63:c7:fe:45:fa:d6:42:0b:9b:c3:78:00:f6:e6:44:98:
ac:a8:76:3b:21:e7:de:41:03:7e:a1:d2:83:6c:e0:20:0b:9f:
97:b8:b0:79:ef:9f:ec:22:07:77:97:d1:26:74:07:49:4f:22:
6a:98:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:14 2025 by rpki-client