Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: iDFK7zDlvn1lzGp8Jo+PYnzitgxOpJdyqkE14J/h+T4=
Subject key identifier: 46:94:DF:10:0F:E7:C1:AA:89:34:99:D4:B9:80:30:06:6B:2F:98:B4
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 0198D6610DAFA090BA629FEE7229D2370B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 1279
Signing time: Sat 23 Aug 2025 10:02:21 +0000
Manifest this update: Sat 23 Aug 2025 10:02:21 +0000
Manifest next update: Sun 24 Aug 2025 10:02:21 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: FJ9EhwSvclXdZgWUP0j8/3HCL7LooJ6IFVGOjCywQUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:0d:af:a0:90:ba:62:9f:ee:72:29:d2:37:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Aug 23 10:02:21 2025 GMT
Not After : Aug 24 10:02:21 2025 GMT
Subject: CN=4694df100fe7c1aa893499d4b98030066b2f98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:93:c1:5e:2e:7c:1b:3f:a8:a8:a2:1b:c1:
af:3c:23:60:c7:d5:90:fb:58:e2:d9:36:1a:5e:bd:
39:de:77:97:31:11:82:56:bc:e0:7f:38:2a:46:cc:
31:7f:64:0c:ac:c2:06:0f:53:b0:eb:65:71:49:c5:
bd:e7:5c:e9:ca:41:0c:cf:82:00:9d:35:71:d7:d0:
94:1d:0c:0f:e5:b2:30:1a:6e:26:0d:82:6e:96:e6:
b0:59:85:7b:62:93:ad:06:8f:92:d5:47:eb:7b:4d:
6d:48:0c:59:f1:5d:96:f4:80:84:af:7f:1c:95:53:
bf:01:4b:d3:f5:3d:90:9f:d9:98:44:dd:f3:65:f0:
23:da:1d:98:8e:3d:d1:6d:36:33:4e:98:85:74:fe:
bf:e9:b4:25:06:75:34:e3:54:02:42:53:af:e5:47:
14:76:91:71:80:be:a8:07:1c:a4:b3:53:6e:77:41:
09:8f:08:7d:26:25:52:64:5f:af:8a:02:c0:44:b4:
bf:ca:77:8b:20:01:cd:6b:e9:7f:83:19:a8:72:a9:
d6:71:dc:23:25:14:2c:cb:2d:d2:5f:5c:3f:10:28:
2d:c5:2b:39:79:a6:4c:7b:53:68:27:eb:e6:10:10:
04:48:2f:de:e7:dd:2f:53:cc:f6:20:37:93:d6:2a:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:DF:10:0F:E7:C1:AA:89:34:99:D4:B9:80:30:06:6B:2F:98:B4
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:13:31:17:b1:97:3b:51:24:9d:08:69:15:8b:57:24:15:
be:49:56:4a:fd:5b:76:ca:21:5e:6e:55:40:e7:48:bb:c6:df:
75:5a:20:b4:4c:b0:36:4f:af:16:83:06:c0:2b:ad:2b:c2:88:
2f:8f:19:31:68:69:b2:e5:24:22:0d:a6:09:33:6a:0e:c7:19:
cc:32:39:03:d1:49:3d:e6:1d:3a:50:31:b5:8d:f3:46:dc:ce:
f9:79:f7:3a:3f:f6:e8:20:c7:9c:a1:88:1b:d3:6e:c2:3f:69:
01:6a:05:2b:7e:bf:0a:f6:96:95:52:28:52:ca:b1:39:94:ae:
9d:96:00:0e:0b:9c:1b:18:df:c9:4e:b0:75:18:03:ae:91:7c:
d7:27:40:2e:6e:23:c6:18:33:f4:fc:df:3e:66:03:4f:f5:f6:
5e:e4:7c:ac:d0:8e:20:3b:80:87:68:da:56:c3:e1:9e:f7:d8:
1f:42:d7:cd:1f:11:a7:01:da:60:7d:47:21:8a:d7:0d:79:be:
b1:2d:e2:f9:27:5d:66:de:42:9b:27:81:9b:7b:60:81:eb:ab:
1c:ab:27:55:47:5e:f3:90:a1:4b:4d:3d:11:e5:dd:6e:31:3b:
88:ee:6c:1b:4b:fe:e9:db:ba:1c:8e:d5:44:03:8b:67:93:ed:
67:61:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:35 2025 by rpki-client