
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: x3xhgVA/YifDIchDeHfIuYWFPD3/goLA7D7k87ELhu4=
Subject key identifier: 14:85:1F:7F:4D:20:6E:C2:DE:B1:BC:ED:B8:91:0D:33:67:09:41:0F
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0198D66119C79777AE65AD90B7B45A8D6F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: 07QYqbdx5rWaGgMI0Osih/VfoDbP9Z0X7+gjUcQz1uI=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:19:c7:97:77:ae:65:ad:90:b7:b4:5a:8d:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=14851f7f4d206ec2deb1bcedb8910d336709410f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:4d:a9:c5:eb:bf:bb:fd:22:23:7b:0e:fc:
2b:83:cc:2a:82:f5:ef:6c:e1:ae:a4:9a:34:9e:81:
ab:0c:ed:bd:5e:65:f9:01:24:f0:ca:d9:c5:65:4c:
52:dc:bb:5e:a1:b9:8f:9d:e2:df:12:ce:6a:fc:bc:
b9:55:99:b3:50:d0:1e:a0:81:f6:14:90:81:56:06:
5e:a3:aa:77:25:a3:82:f5:b7:ed:58:57:5b:12:f0:
f7:97:1a:ee:94:dd:54:ab:bf:a4:15:41:d6:91:b2:
af:40:9b:79:21:af:2e:19:c5:1a:9d:05:65:2a:37:
37:cb:54:94:dc:20:93:10:dd:39:2e:e6:a1:83:17:
b5:02:fd:c6:79:ae:e8:e0:d5:01:49:58:02:f3:b2:
25:3d:26:37:61:15:ff:03:db:03:4b:f5:bc:ee:5d:
f0:22:1d:43:ec:c2:73:ca:65:5c:71:9a:03:7a:1b:
77:b7:dd:b9:16:18:3a:15:a9:5e:99:8d:5a:0c:b9:
22:62:0c:f6:91:9a:5e:d3:16:90:bf:cc:7f:2a:32:
50:97:73:91:22:71:55:9a:84:2e:0f:98:ea:e5:5c:
ee:97:5c:14:6e:82:4d:a7:5a:b9:93:d5:e9:83:71:
78:a2:b0:6e:84:a9:13:10:a3:57:6d:9a:34:6f:d0:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:1F:7F:4D:20:6E:C2:DE:B1:BC:ED:B8:91:0D:33:67:09:41:0F
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:3e:ad:c1:68:b4:41:ed:ff:f4:1d:86:93:10:95:63:19:
d2:f0:23:a4:7f:5e:8c:fd:48:15:71:d7:11:83:e6:71:32:1b:
bc:f1:5e:41:14:16:7d:cc:95:12:da:c1:a1:f3:22:99:d5:37:
34:72:b6:36:aa:00:50:2e:d4:b0:91:d1:71:a6:eb:5f:e1:2d:
20:db:b5:65:e5:30:5e:9c:a6:30:9e:2d:6e:65:a5:23:87:96:
18:95:88:e7:12:05:08:45:ef:c1:58:1e:7c:1c:9c:79:71:2f:
44:d6:b9:59:24:ad:bb:48:2b:46:b7:84:48:07:fe:6d:89:96:
45:ff:83:47:ed:9d:25:d3:a7:b7:cc:5d:a3:85:ff:5b:23:66:
c7:d4:3d:8d:1c:79:c7:fd:12:3e:e7:af:c7:bc:cb:e0:40:0b:
9c:2f:b3:ba:94:aa:5f:cf:26:69:d0:31:cc:e3:87:9f:29:df:
1d:13:12:ea:27:c4:0e:de:67:e9:68:41:a6:82:8f:53:62:fc:
a0:eb:49:19:27:5b:8d:49:98:d6:39:0b:e8:5b:fa:91:2e:8f:
1c:96:ea:16:e4:d6:05:ab:37:58:8d:29:3e:57:2d:1e:5a:6e:
82:dd:0e:da:9c:4f:11:98:a6:38:e8:db:27:a4:94:db:b3:c0:
08:8b:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:42 2025 by rpki-client