Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: ES8k4MLoolC0dhC9DNpqBg3Fot92+d3e+iULS7/KIe4=
Subject key identifier: 60:50:F1:00:75:76:0A:02:51:1B:9E:11:20:05:61:4F:88:1D:FA:B5
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 0198D6CD2305AB2C8F32BE70614E6606202E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
2: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: d/GV4s0q+XIUQzRfih3zgdlwZsozJKbmyXexsn+mOKY=)
3: o7DFQSNSbtxlgxW6FLch62D8QIA.roa (hash: OW5TPqzlu/5OlPd3vdKxLAlylVm0d636/VsxyEnIicU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:23:05:ab:2c:8f:32:be:70:61:4e:66:06:20:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=6050f10075760a02511b9e112005614f881dfab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:06:3e:38:e0:3c:98:eb:20:e8:9c:ba:e4:0e:
fe:45:70:1e:5a:02:45:65:b6:df:5b:f9:55:28:57:
74:a8:bd:46:82:53:d7:bf:e8:a4:7c:0b:f5:25:e1:
91:1f:06:c9:b8:c1:ff:c6:ec:59:38:20:0c:c0:33:
fd:75:64:77:4c:10:cb:61:93:bf:b4:fb:94:77:5a:
ec:d6:56:50:b9:bc:e5:2d:32:ea:d4:15:ed:95:c4:
9b:1f:92:d7:5c:e3:75:18:06:f5:2a:c2:16:d3:59:
ab:d8:f2:83:d4:8d:5c:13:ec:47:d8:c3:99:20:ac:
a3:73:47:24:3b:9c:0b:2e:1b:86:38:fd:91:4c:4b:
28:75:1d:46:93:f9:da:a4:49:57:4d:db:a5:5c:e6:
8a:b0:bd:6b:e9:b5:fd:04:13:2e:05:e0:d8:93:ca:
3d:1a:83:0b:a2:44:ab:d0:4a:d8:43:16:d7:fb:96:
75:c3:19:fb:a9:1d:86:04:08:54:e9:a6:c4:f8:89:
c5:9c:8e:49:c9:fa:de:2d:d5:f9:f2:64:4a:6f:a8:
29:12:39:c4:e7:bd:a7:08:2d:79:13:46:ff:7a:81:
28:98:f2:0b:79:40:bc:83:f4:c1:8d:c8:24:17:cb:
c9:ca:a8:4e:62:b4:9f:8d:03:cf:49:b1:9e:41:34:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:F1:00:75:76:0A:02:51:1B:9E:11:20:05:61:4F:88:1D:FA:B5
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:80:bb:0d:dd:6b:85:4a:e8:24:d2:59:23:18:0c:42:a9:
7d:27:a5:78:0e:49:3c:02:61:1d:39:9a:3d:ca:67:42:0b:15:
22:06:5a:d2:6f:91:80:a6:d7:01:c2:1c:c5:01:85:fa:d9:47:
95:fc:95:d0:61:cb:3e:52:9b:c6:5b:e6:4f:94:9e:a6:d5:5e:
16:62:50:a4:1a:8f:5c:90:b6:5a:92:5a:71:5b:9d:29:95:f6:
09:35:85:29:16:0a:03:82:a0:22:a9:a8:03:95:70:fa:33:7b:
94:6b:a4:cb:b8:6a:6d:08:7d:55:b7:15:a3:da:00:f0:ae:d4:
3c:ef:b9:b3:0c:21:c0:bf:8b:d5:9c:bd:d5:f1:8d:62:f2:32:
a7:55:05:10:02:de:ec:6b:ef:ff:5a:be:77:22:6c:bf:79:09:
0a:1a:b9:2b:02:ca:f4:13:cd:b4:83:9e:06:c2:34:39:fc:14:
f9:0e:0e:83:65:4c:ff:81:b4:eb:c3:b3:66:42:33:0e:21:2b:
15:3b:65:12:87:ce:db:1b:d5:cc:03:95:74:3c:1f:d7:b3:46:
52:0f:c9:8f:59:aa:6f:9f:ef:2d:43:22:ae:aa:84:30:fd:34:
79:99:f0:79:9d:bb:73:64:7d:81:b8:52:e4:e1:0e:08:33:b6:
e1:ba:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:19 2025 by rpki-client