Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: fodqvlwEDkrp7nQN9GgCAnmOKWBEb9bcpO6LZ2xDmbw=
Subject key identifier: 7C:64:26:F4:26:2C:80:28:01:8D:CA:00:8F:38:41:EB:93:44:41:AB
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 0198D697F3D5DC79D3036A69AED2EBF1D2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0CA0
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: Rcm/nvJeB8ipzPFZEM9LEslWLnKcHV4yJY1xlqzrkks=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f3:d5:dc:79:d3:03:6a:69:ae:d2:eb:f1:d2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=7c6426f4262c8028018dca008f3841eb934441ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:54:28:fe:d5:80:c0:5c:cc:58:f5:3c:77:
54:ef:12:50:1d:ba:8c:20:e4:0d:29:ff:ae:a3:5c:
de:3b:1a:24:ab:c6:ac:60:64:80:7a:39:f0:b6:cf:
cd:9a:dd:43:de:60:5f:e3:4f:08:9a:09:df:c1:6b:
32:15:b7:5a:a0:ce:e9:69:34:c5:e0:ae:a6:d4:2c:
d2:3e:f3:12:3f:23:57:1d:63:d4:48:2a:95:7b:ce:
51:08:cb:b2:0c:84:6e:d5:6d:a1:70:e8:08:ed:bb:
64:b3:b6:c6:3f:36:c8:3f:22:cc:1a:bd:8a:9d:c8:
db:ce:95:38:7b:b9:4b:6b:14:7d:19:08:e0:4c:1f:
d1:6b:56:5a:39:cd:57:dd:13:fa:54:f6:66:d2:5d:
f9:ab:ba:be:28:1d:15:e4:b7:72:60:ff:67:f3:4d:
be:f4:b4:e6:b0:8e:f0:30:5b:3b:03:87:9c:e8:82:
84:21:9e:3a:ca:61:32:14:1e:31:20:76:c7:7c:b7:
5b:97:ec:a1:6d:ee:c3:aa:7c:52:0b:17:91:17:02:
b2:02:cf:b8:b5:dc:83:d4:98:e9:c5:29:12:63:92:
20:f2:ea:fe:7e:3a:25:32:e5:e4:c2:16:7c:20:6b:
4c:5a:85:e1:7b:f9:a4:22:11:ff:c4:aa:8c:f7:9e:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:26:F4:26:2C:80:28:01:8D:CA:00:8F:38:41:EB:93:44:41:AB
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3b:44:94:f0:e5:73:51:3e:e6:e7:da:7d:45:e7:f8:80:ad:
5d:bd:22:32:73:c0:3b:28:cf:44:5e:ac:e9:2d:4f:68:0a:da:
b6:8f:8d:1d:67:69:50:fc:b0:b1:c1:d7:9f:f6:1c:11:e3:5b:
1f:a8:d4:87:7a:de:dc:9f:9e:9f:06:77:50:06:2c:df:b7:b7:
11:16:69:a1:9d:d5:88:1f:c6:22:fb:57:fa:05:0e:7d:c3:16:
9c:dc:cb:0e:dc:a6:85:a9:7c:81:dd:80:9f:05:56:30:39:6e:
6f:95:3c:b8:c5:31:c4:0d:15:61:5c:4c:b1:28:13:2d:45:81:
3d:c0:23:19:08:c1:35:c8:8e:a3:aa:b9:57:c7:0c:a6:f4:5d:
58:f2:eb:91:94:8d:96:52:56:0a:15:17:96:3a:19:cb:d5:8a:
fa:e9:c9:0c:8c:a5:98:5f:a8:a7:cf:c3:d7:f7:29:2d:19:8e:
15:1f:8e:69:23:b3:f9:39:f3:66:c4:23:42:3f:37:40:c8:2e:
59:b7:19:97:5f:c3:90:ea:23:cc:87:3b:aa:ac:af:8e:32:cc:
68:cb:fc:24:6b:d0:0a:72:2d:9c:84:cd:7d:56:ca:74:0b:da:
4b:3d:8d:0f:09:d9:53:bb:32:b7:5d:3e:67:1e:80:7c:7d:19:
06:91:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:28:19 2025 by rpki-client