Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: AuyvtuBYpTfpCqSHfwWcvOYHjQnL2sWjVx3tjwXTqe8=
Subject key identifier: DE:F4:58:AE:CD:BF:40:67:AB:04:7A:77:BB:95:C5:E2:15:42:06:D7
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 0198D5BC2EAB532C333B49F5035EE634EAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 12BC
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: wgrkC1whhV2+141axV5E95CR2REkdDcBP328ScK9auU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2e:ab:53:2c:33:3b:49:f5:03:5e:e6:34:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=def458aecdbf4067ab047a77bb95c5e2154206d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:f0:74:0e:bd:b2:1f:64:23:57:6a:8f:08:
b1:a2:c9:e5:8f:28:0b:40:3a:ca:ef:d2:ed:2d:48:
fb:fb:88:0b:9f:f1:d7:3a:24:a0:f7:f5:ba:45:cc:
4c:ba:74:76:b6:8a:ef:c5:9a:a6:1f:4d:4e:d1:df:
5f:de:d8:df:9a:9b:c3:3c:d0:f3:45:6d:1b:6c:cc:
25:15:a5:86:b7:d8:0f:38:de:23:26:aa:65:ac:bd:
58:61:2a:84:c4:1a:95:c7:19:cd:34:10:ee:50:c8:
01:48:9c:a3:53:2a:b4:2d:c5:ff:9d:54:e0:39:40:
c0:6e:98:e4:bd:e5:02:fd:c0:d3:29:34:34:2f:2e:
19:5a:da:c3:df:c1:05:df:e5:35:59:50:9f:fd:91:
85:55:73:d7:0a:8e:6a:e0:f9:f1:bf:91:fd:ce:1e:
cd:27:5b:a8:a7:18:ba:b4:25:9d:c7:1d:5b:f3:48:
db:84:51:e3:e0:cc:8f:4d:f2:d1:db:d5:85:43:d3:
47:1e:51:cf:b0:8a:dc:30:30:31:ce:2f:0e:77:09:
fb:44:fc:02:ac:92:ae:ac:fc:61:a0:0f:44:16:7a:
13:42:7d:94:eb:c0:01:08:c0:1a:06:53:65:c2:26:
a1:6b:7a:9d:b3:42:d6:59:d8:0e:9d:9a:b4:10:a5:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:58:AE:CD:BF:40:67:AB:04:7A:77:BB:95:C5:E2:15:42:06:D7
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:43:56:d8:ca:df:d5:bf:12:a7:59:55:e5:bf:04:91:e8:
83:2b:fd:65:e6:17:97:4b:66:ca:8f:57:0d:d1:05:f9:6d:2f:
87:f3:d0:f9:cd:df:d4:b4:a9:12:2b:04:34:c9:23:d8:4b:43:
de:98:86:c8:23:12:7c:eb:25:3d:ca:0d:ce:ba:50:74:06:5f:
ce:c9:a9:03:b3:19:9d:75:10:06:00:65:b0:d5:f5:ca:6b:57:
45:7f:d4:bb:c2:89:df:76:ed:7c:9a:59:57:a4:91:b3:65:65:
13:f3:f8:e9:25:47:d0:d4:68:e3:fc:69:db:ce:5e:c2:f7:70:
95:e2:88:47:e1:a2:4c:a2:56:c0:5d:63:bc:ab:b1:31:88:df:
b3:3a:a1:0a:72:b1:de:8c:a5:d2:55:3a:29:57:aa:5a:d6:f6:
ee:63:aa:d3:86:26:cc:1e:1b:dd:ce:8a:e8:b3:e9:0e:99:f6:
0f:ad:4c:95:8b:4f:ec:17:4a:6f:09:3e:5a:a2:64:b1:c2:76:
63:90:35:65:eb:1d:39:34:a4:39:18:5f:97:ca:d9:c3:2e:06:
ff:ab:80:79:bf:0e:0b:58:1c:70:17:9a:f2:a2:9d:15:c9:89:
53:e0:8c:8f:5b:3c:94:7e:b2:5b:ff:9a:c9:7c:f5:81:da:7b:
84:49:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:29 2025 by rpki-client