Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: h8UpzFnc9vH6xsWD72VUPXaOr3BgIkkhbhFtY1giR/s=
Subject key identifier: 8D:95:DC:8F:07:D9:87:D3:1C:56:D9:A0:45:01:8E:15:09:7C:05:E5
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 0198D705C0D9241EC4E59DAAC505697475EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 13:02:15 +0000
Manifest this update: Sat 23 Aug 2025 13:02:15 +0000
Manifest next update: Sun 24 Aug 2025 13:02:15 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: /y9ZSROA9vnUD5nRTX+9+6CzFbc+5nVfiwlt/je3hhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c0:d9:24:1e:c4:e5:9d:aa:c5:05:69:74:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Aug 24 13:02:15 2025 GMT
Subject: CN=8d95dc8f07d987d31c56d9a045018e15097c05e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:f9:c0:3a:c0:70:b1:7c:57:0f:11:40:f8:
51:9f:36:8d:0e:6a:8b:24:88:ba:b5:74:71:2c:aa:
64:5d:a4:fb:12:31:0e:27:2f:41:be:e5:f3:5c:35:
dd:d1:50:d6:f6:51:03:ff:3c:24:a2:fe:36:b0:76:
59:e4:a7:27:eb:d4:ec:53:9d:4b:d5:47:73:e8:a3:
7a:3d:da:6f:37:14:53:06:8e:ad:75:20:75:ce:3c:
bb:db:3c:5e:6d:43:e0:3f:89:d3:1b:e7:b3:59:df:
02:e3:66:f8:d4:8b:8f:15:6c:79:76:4f:c0:53:3a:
e8:b4:9e:bc:48:c7:5a:c4:a0:40:6f:dd:74:1a:3a:
45:a5:de:61:0d:cc:a3:b8:12:f4:d8:94:42:2a:f5:
82:d5:23:b9:70:98:c1:1e:39:c4:7b:72:2d:58:64:
59:5b:75:ad:e7:b5:17:13:a8:12:b0:ed:9b:05:86:
38:0f:09:5d:73:34:2b:af:e9:1d:ba:a1:0b:2a:c2:
e9:62:34:fc:7e:66:2d:d5:31:a6:7e:03:4c:b1:9e:
e0:3e:cf:76:72:de:8c:9f:8c:57:79:e6:eb:ce:53:
64:76:21:05:6c:74:2e:07:94:8f:a1:65:ae:e5:7d:
79:5d:07:f2:14:5e:32:91:89:c7:09:24:d7:32:e2:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:DC:8F:07:D9:87:D3:1C:56:D9:A0:45:01:8E:15:09:7C:05:E5
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9a:e7:3b:a9:77:f2:ef:60:a7:d4:6e:1b:54:2f:95:89:25:
bc:03:08:61:01:25:82:28:1c:fe:af:3d:18:88:4e:03:7d:ba:
fd:07:0c:18:c9:43:d3:09:17:53:7d:b7:60:55:34:b5:be:13:
bf:27:7b:d0:d5:a4:22:b2:ff:44:16:a2:d7:d2:a0:ca:8c:5a:
f1:14:6f:cf:cb:28:53:2e:87:c1:53:b3:6a:18:18:47:97:94:
1e:56:a6:7a:51:74:4e:1d:38:df:18:e2:30:c9:56:87:b6:53:
96:bf:c4:1d:15:16:02:4f:f6:e6:bd:f2:07:48:0a:28:9c:dd:
b4:47:49:68:58:1b:de:fe:79:1f:58:8d:49:3d:30:ca:2d:75:
f8:c6:dc:92:f5:5f:f3:5f:df:81:69:a6:47:06:3a:d2:49:58:
07:5f:76:a0:1b:09:99:69:a6:f6:47:60:a4:2f:5c:53:00:1b:
54:d5:ed:7e:92:43:6b:4a:ec:df:cd:70:3f:82:2a:00:9e:e3:
72:87:ba:c0:46:85:a3:54:54:22:05:fe:49:10:dd:f5:ea:bf:
37:b4:9f:7f:ac:a8:95:32:82:31:12:86:55:98:11:b5:2a:45:
01:78:d8:fb:e3:61:4e:6b:da:a7:16:e1:23:6a:c6:1c:6a:fb:
11:04:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:28 2025 by rpki-client