Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier: h/V1ZgWb3Y3eaYu8MN54Msd/Sll7dmw0maH6cCdPKCU=
Subject key identifier: 0B:AD:3C:6C:2A:75:C0:13:85:E3:71:85:F3:CD:26:4D:23:41:91:BF
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 0198D5837DDDE1C5CEB2401B407A683FE4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number: 0D0D
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: FqRtDHWecfcjjYO34OQ7NiBFtzk60lEMj4jaDtg89kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7d:dd:e1:c5:ce:b2:40:1b:40:7a:68:3f:e4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=0bad3c6c2a75c01385e37185f3cd264d234191bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:3d:1b:bd:9c:9e:f1:c2:3f:36:4d:9e:22:
be:71:cd:34:17:27:28:ef:ca:a4:f5:6a:78:84:11:
9e:99:ca:f5:c7:37:b0:be:99:d1:b8:c1:b3:7f:73:
dc:00:18:39:ed:b2:86:71:fb:92:47:a0:2f:46:7a:
15:87:83:d5:6b:a1:ef:f9:e1:29:1f:01:04:5e:ea:
b2:18:9f:bd:9f:ae:73:c1:5e:37:66:37:da:9a:c1:
20:2f:05:3f:33:3b:78:a4:43:5c:16:0b:9a:7a:66:
c4:01:fa:5f:54:a6:ce:3d:e8:9b:f7:42:bf:17:94:
47:3c:3d:7d:d8:b9:ab:d9:08:6e:48:17:9c:f5:01:
eb:84:9d:4c:b0:c4:2f:ca:4f:d2:f1:fc:7d:73:8e:
fd:f0:e0:2a:df:e9:ce:e2:da:1d:61:0c:b3:ec:da:
7a:c6:46:87:e3:9b:76:aa:fc:65:94:d3:1a:21:44:
ff:92:d8:1a:d9:ae:6b:41:24:0e:77:37:a8:de:e6:
76:33:1d:7a:13:fb:a6:a9:4f:46:55:85:50:f5:0c:
2d:89:0a:c5:c6:3a:e9:a9:1b:8f:8e:99:72:a3:0f:
fb:e3:3f:f2:a4:5b:6d:29:c0:ca:d7:a8:9e:61:2a:
78:9d:3c:a4:e2:d3:90:a4:e9:7c:e0:fe:55:fa:be:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:3C:6C:2A:75:C0:13:85:E3:71:85:F3:CD:26:4D:23:41:91:BF
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1f:d7:34:c8:91:25:ba:7e:0b:ea:67:3a:39:41:26:c3:b2:
36:f0:b3:d4:1c:85:fc:5d:aa:86:f1:3d:cb:65:2f:4c:1e:ab:
39:20:1a:4b:0d:0d:9a:fd:aa:5a:16:43:8c:d7:fb:c3:65:c4:
da:e6:4d:ea:6e:26:95:f3:28:60:83:59:19:d1:e9:8e:54:80:
87:66:c5:a1:6c:6b:06:0d:bf:54:4f:98:33:dd:d8:c1:5a:de:
f8:d0:3d:6a:e5:8a:2e:ad:e8:86:42:df:88:74:89:00:ae:2a:
d4:f6:8d:13:53:6d:a3:b1:d8:27:61:cc:e0:57:3e:6b:81:f6:
5c:a0:4f:06:f1:dd:6b:ba:40:bb:18:a0:a4:17:22:ed:01:25:
a9:dd:f9:22:6b:46:6d:7d:d1:1c:b1:9b:51:3a:95:0f:7b:00:
77:46:06:b8:5d:a6:0e:94:89:f6:ce:e1:d5:28:fd:27:17:ad:
3f:4b:53:ee:72:40:29:ee:ed:fb:c9:b4:00:37:3a:ff:82:57:
0e:d1:b6:6e:df:e6:95:e6:5f:08:3d:80:7b:2a:59:44:72:78:
b8:e3:bc:fd:9c:f2:28:f1:49:70:8f:b9:7a:c0:9e:35:db:13:
57:c6:da:6a:1d:84:83:79:d1:f7:8e:03:5e:c3:ce:60:8e:d5:
db:a4:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:20 2025 by rpki-client