Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: Cej363+IRg7oEQvAUGEY4Sq3fGN0MDGtoUTDjg/UpLc=
Subject key identifier: 1D:93:AE:BF:A9:9F:32:CD:47:04:2B:1A:EB:72:B1:17:9A:A5:A9:EA
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0198D698791E4063C70359B5AA6B9E52B06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 07BA
Signing time: Sat 23 Aug 2025 11:02:53 +0000
Manifest this update: Sat 23 Aug 2025 11:02:53 +0000
Manifest next update: Sun 24 Aug 2025 11:02:53 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: xgf5zLBUe0AWRG4ftNM5FTTo2qPp0kZfaw08VPpTKvo=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:79:1e:40:63:c7:03:59:b5:aa:6b:9e:52:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Aug 23 11:02:53 2025 GMT
Not After : Aug 24 11:02:53 2025 GMT
Subject: CN=1d93aebfa99f32cd47042b1aeb72b1179aa5a9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:a4:14:0d:ef:dd:bd:52:b4:1d:08:7d:85:
d2:ee:9c:ee:89:90:a6:c3:93:11:48:4b:60:98:15:
82:57:1f:45:2c:54:3e:f2:d0:16:e2:81:19:76:f9:
bc:9c:2b:35:10:68:36:2d:f8:84:8a:5f:f8:c5:88:
79:14:d1:23:ac:81:90:2d:7a:cc:1a:8f:6a:43:28:
46:c8:e2:52:6b:81:bf:16:d2:ea:7a:7f:93:01:f5:
a5:4b:5d:61:e9:3c:b6:60:93:b8:14:c5:b8:b3:0a:
be:3b:f6:10:b4:3d:63:66:d5:92:35:43:99:6d:1d:
3b:7b:f3:4c:b2:26:23:ce:51:92:63:1c:5a:b0:c8:
b7:98:3f:f0:46:df:cc:3a:a4:73:a2:57:73:da:7c:
e5:18:70:79:d2:63:8d:68:07:b3:6a:a9:94:35:24:
11:0b:4f:60:2c:f0:0a:15:5c:84:47:5c:9e:e3:95:
89:32:7d:18:ef:37:98:c7:f6:b9:60:eb:a5:43:7e:
a2:44:66:fa:4a:ba:1e:9a:f2:dd:f7:20:eb:6f:d5:
ed:70:b6:91:3a:0b:9c:b9:f1:ab:aa:34:05:a2:99:
99:9b:ed:b6:c6:94:27:71:67:8d:25:bc:4b:e2:3d:
e4:2f:d5:fd:c7:60:ae:45:48:81:a4:f3:0d:f6:fa:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:AE:BF:A9:9F:32:CD:47:04:2B:1A:EB:72:B1:17:9A:A5:A9:EA
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e2:5c:78:d7:8c:60:7c:3d:73:f6:94:7a:63:b0:08:ca:3b:
1d:3f:b8:7d:d7:3e:79:1c:a1:7c:86:d6:4f:c2:27:e6:42:76:
87:43:fe:f7:55:77:d1:4a:a7:b9:ec:1c:61:37:4b:73:fe:c5:
f6:52:43:5e:fd:ee:40:56:21:21:f9:eb:ae:3c:74:27:a3:f9:
da:1c:b6:c1:e4:6c:fc:2d:fa:54:36:aa:5a:09:f1:be:f0:dc:
2b:9c:41:3c:cb:b9:17:5d:7b:a6:bb:a2:26:85:16:fa:b3:28:
f4:37:50:b0:6c:20:61:44:9f:ee:2a:b0:a1:39:6e:0b:bc:3b:
3c:ef:25:bb:81:80:23:c2:db:39:b4:2f:80:f2:02:b6:89:d3:
f0:83:fd:35:3c:1c:c4:b5:d3:db:75:58:cd:0b:ce:ab:ee:2c:
a8:3f:31:69:53:0e:bd:c3:da:0a:ac:5d:87:9f:1d:89:f4:2f:
a9:06:6d:b7:c4:b7:69:7d:82:d9:dd:1e:e7:0e:bc:33:78:e5:
10:b3:a0:03:95:90:d6:03:75:3b:73:9c:7d:8b:08:f4:0f:0f:
a1:2d:f8:4f:5e:6a:8c:c9:13:2f:30:f6:2b:f9:80:da:7d:d8:
8e:28:fd:f5:ea:9e:8f:80:45:33:ba:a0:de:5e:f7:52:65:9c:
78:a4:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:46 2025 by rpki-client