Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: 48T2Y+43s/NCTN2XIqhHWk8S8ahFL8IBxF/M0IQQwFc=
Subject key identifier: 5F:63:DD:06:6E:E4:55:F7:C2:ED:A5:32:F9:94:0D:BA:71:8D:4A:AC
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0198D5835969A3B5C63471653ED7B238AFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 094F
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: 0PpXz8LpFwg33pAsrXmdKVq+iPerrl7LA77P2cQ4NSs=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:59:69:a3:b5:c6:34:71:65:3e:d7:b2:38:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=5f63dd066ee455f7c2eda532f9940dba718d4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:cf:f3:f6:b3:18:5a:71:d8:de:31:12:5c:
00:07:51:b3:45:bc:90:1f:55:d5:ca:c5:f7:f2:b3:
86:fc:46:82:15:e2:09:9c:e3:d3:d6:be:9c:c6:3f:
0f:18:6d:3b:d3:a1:06:db:47:9e:74:65:27:53:5f:
03:a0:98:71:84:31:28:b5:c5:6a:fd:28:5a:1e:80:
f0:7e:3d:1f:71:5d:70:f3:b7:89:7d:74:81:5b:fc:
1f:07:0c:ed:32:ad:d1:1b:ff:b4:2a:30:a7:96:72:
7e:0c:3e:f6:19:92:b8:9f:36:08:fd:cd:d8:72:35:
cf:27:54:de:91:7c:69:4f:da:d5:ff:5a:d1:6e:ed:
7a:1d:ca:52:ec:13:a3:24:08:34:80:90:49:cc:56:
a4:38:12:d8:b2:18:71:0d:e8:f6:58:99:50:3f:29:
cf:34:3e:11:b0:ee:d1:46:03:64:e2:e2:44:68:d2:
2a:c1:7f:a7:f6:65:8f:46:ab:02:19:8c:35:c7:43:
ab:2c:7e:67:5b:64:e2:1b:7e:dc:80:2c:11:57:d8:
99:d3:7e:10:b1:31:42:10:e7:dd:26:7a:f6:7c:de:
ee:0c:1e:68:67:a5:0d:90:b6:14:c5:27:3a:78:08:
02:72:4c:32:c1:34:9f:02:ad:67:bf:58:8e:cd:b8:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:DD:06:6E:E4:55:F7:C2:ED:A5:32:F9:94:0D:BA:71:8D:4A:AC
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:59:44:68:e5:9b:23:b7:6a:ca:e5:c8:ea:92:bc:b1:3b:
04:be:28:4e:1d:bf:92:9e:36:2d:cc:d2:f1:f9:d0:ed:b9:57:
1e:86:ad:f5:db:9c:e6:76:90:7d:37:a4:e9:1b:bb:15:93:6e:
51:4b:da:f9:b0:4f:b4:57:05:bc:58:0c:df:71:54:fe:04:91:
ba:93:9f:0b:fb:67:55:b9:11:17:c7:c5:b0:c8:04:b8:0b:85:
a6:b7:11:4c:a6:5f:c8:f1:5f:ba:59:89:64:97:8d:01:99:9d:
72:32:dd:79:ae:e8:e9:40:0c:a2:12:b4:08:e1:51:33:55:13:
da:02:2e:6f:bd:32:80:5c:7e:7b:37:60:e1:4d:1f:52:5b:fe:
43:c6:c6:78:f9:9a:6b:6c:50:47:12:11:69:7b:c2:2d:6f:22:
99:02:8c:89:67:37:16:b8:11:f6:5f:73:f3:01:dc:ec:d7:4f:
51:19:6c:ad:b0:dc:36:6d:d7:6b:e3:5b:8c:6f:e3:5e:d7:96:
69:9b:fd:20:84:bc:15:70:64:c4:7d:41:c2:17:45:a6:2e:1a:
e2:fb:d8:dd:94:18:d1:b7:f9:58:f6:ee:1b:30:31:6d:e8:d0:
24:aa:07:4e:2f:11:7e:03:6a:96:3e:b6:1c:90:3c:ea:93:ef:
d3:7c:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:43 2025 by rpki-client