Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
File: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft (raw, json)
Hash identifier: 9uVfRWnWJ2dWBeASM2nJu7nLGgLvyQ/TWTFtONaxHOw=
Subject key identifier: 00:ED:EF:B5:E2:52:5E:E0:F5:D0:A1:D2:EC:70:01:4B:62:2D:D1:B8
Authority key identifier: 18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
Certificate issuer: /CN=1810633739243f71a29eed18dc13d00676c7ce3c
Certificate serial: 0198D6607647DF01E36583423C07C0EB5A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl (hash: UR1AR45ylQ3FenzO2Jz8WQ4JlbWsJ23H71XHa428AOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:76:47:df:01:e3:65:83:42:3c:07:c0:eb:5a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1810633739243f71a29eed18dc13d00676c7ce3c
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=00edefb5e2525ee0f5d0a1d2ec70014b622dd1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:a9:e1:34:17:b1:72:44:1f:9b:47:0e:fc:
a9:c4:c1:2f:e3:27:c8:c7:b4:ee:39:55:0b:04:35:
70:68:77:eb:41:c4:20:91:4f:7d:ae:83:6d:98:50:
53:a8:47:be:fe:ea:6c:74:3e:22:f0:c9:f3:cb:54:
d1:ee:09:ef:4f:da:a9:af:17:2a:10:17:e3:44:01:
ce:a0:7a:25:f2:fb:a7:73:c8:2c:01:14:c1:9f:e4:
90:35:95:0e:fe:8e:38:9b:f1:b6:ed:a6:00:dd:fc:
41:11:f4:d0:51:56:fd:f1:a0:bb:ba:80:02:45:44:
51:1d:01:88:e6:2e:03:43:3a:36:e2:b7:ac:94:20:
b2:93:b9:2d:86:fb:3e:b1:8c:4b:ad:9e:b4:0e:8c:
bb:8c:a0:bc:af:f5:e0:c2:2e:8d:75:bb:0b:62:cd:
54:fa:8b:cb:4a:c0:14:c0:f3:ab:f3:ef:ca:b0:d5:
9f:5f:7b:ce:be:fb:cc:42:e9:e9:6c:e8:39:58:20:
63:cc:c9:b8:6c:f6:3b:3e:0e:fd:51:f5:dd:b6:f0:
0e:52:04:a2:cd:a7:27:42:26:f6:46:05:cd:e7:df:
75:d3:85:68:74:d8:32:b8:86:87:9d:06:cd:6e:21:
5c:9e:27:ee:6a:f7:60:ca:65:28:02:2a:79:d2:cf:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:EF:B5:E2:52:5E:E0:F5:D0:A1:D2:EC:70:01:4B:62:2D:D1:B8
X509v3 Authority Key Identifier:
keyid:18:10:63:37:39:24:3F:71:A2:9E:ED:18:DC:13:D0:06:76:C7:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/da7cbb-2363-4d83-ad01-ed3f2f70cf14/1/GBBjNzkkP3Ginu0Y3BPQBnbHzjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1d:7f:f1:e5:9e:3e:d7:3e:e3:07:12:a6:bd:87:c2:00:bf:
82:77:ea:0e:f0:92:bf:a1:90:4f:6b:2f:90:4b:15:1b:1a:f7:
e4:79:b4:3b:42:ea:e8:9c:37:3a:e2:69:bc:02:c6:ad:6d:4d:
41:0e:8a:2d:da:31:c1:de:bf:ce:c3:df:9e:6d:17:10:f5:e5:
50:15:b6:95:96:39:7a:6e:62:3a:24:83:ba:2d:40:ea:c4:10:
9d:04:fd:5e:54:ee:f4:be:e5:dd:78:35:90:ce:52:d9:07:68:
83:b6:26:0c:c3:96:ee:63:c7:a8:fd:37:16:38:9a:d8:74:77:
d0:f0:70:8a:d7:a4:ed:d9:34:f5:d3:1a:ed:79:b9:9e:3f:88:
19:d9:6e:12:1b:48:a6:4d:e6:ab:2e:02:85:24:f0:97:8d:60:
fc:73:f3:50:df:04:fc:be:e3:7c:aa:5a:b3:d6:b2:c4:7e:11:
52:9e:a4:1c:a9:c6:37:d2:06:81:23:9f:60:89:7d:85:1f:76:
79:9a:eb:06:06:bd:84:5a:1b:60:36:fc:0d:17:b8:d3:39:14:
b1:09:9f:77:9c:7b:f0:3f:cf:dc:f3:da:3a:74:f3:77:8b:a8:
aa:11:c1:59:b9:e9:1a:f4:a2:0f:93:d0:d6:f8:5e:04:79:47:
97:02:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:11 2025 by rpki-client