Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
File: GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft (raw, json)
Hash identifier: 6hy7qVT3ScVagC8kAJKCk+XtDqEWHiEa+qDhHd2HJ+Q=
Subject key identifier: 03:85:6B:28:1A:54:8A:6F:5E:68:71:A2:A3:7D:FB:C5:F3:96:00:C0
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Certificate issuer: /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial: 0198D92B12435735D848E72F6897C0612155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
Manifest number: 0F4E
Signing time: Sat 23 Aug 2025 23:02:15 +0000
Manifest this update: Sat 23 Aug 2025 23:02:15 +0000
Manifest next update: Sun 24 Aug 2025 23:02:15 +0000
Files and hashes: 1: GMiGJIQPkTJHbljDh9-Qbgs-ofQ.roa (hash: gehqPfu1dznuITregHu34HVG8SqD/GP87okupLZENG8=)
2: GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl (hash: r6X/+EHWIrdHC94I0tM7m0NAgdH9AFYkl/KAFk+HC1Q=)
3: v9KM8OQ-DWpjdph76UHaqdPxykY.roa (hash: ZEWsWvyNwHDggCDXVB+qSLAsmH44pX9075p3IA13cVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:12:43:57:35:d8:48:e7:2f:68:97:c0:61:21:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
Validity
Not Before: Aug 23 23:02:15 2025 GMT
Not After : Aug 24 23:02:15 2025 GMT
Subject: CN=03856b281a548a6f5e6871a2a37dfbc5f39600c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:59:2c:eb:b2:0c:d7:b4:d7:e5:a8:92:65:
3f:64:9e:ad:88:c7:e0:a6:a2:b0:a8:35:73:98:fa:
65:60:6f:d9:9d:9c:3c:48:15:e3:49:db:43:a6:33:
56:ca:c6:77:d5:ad:95:0c:3c:b2:16:84:4c:49:1d:
c5:d2:e6:4e:f9:29:5d:a7:87:c1:dc:c0:c2:f9:5d:
70:a7:88:62:24:52:f7:08:f6:02:f2:d0:b6:81:69:
35:75:6d:b0:21:fe:d4:15:a3:e4:27:73:4a:06:3d:
ab:5b:40:8e:a4:42:4d:bf:41:22:ed:3e:0c:4a:04:
ad:9f:b4:d7:0c:07:c5:39:73:76:b8:32:26:b5:20:
3e:b4:58:59:90:77:25:7d:07:89:de:d8:12:21:e2:
78:8f:8c:03:1b:9b:1c:41:2f:13:13:7d:e9:f5:cc:
c6:4b:ad:65:39:5f:b8:2c:19:d1:0a:5e:87:73:2a:
1e:1a:ba:73:93:99:f3:55:fe:00:42:e2:97:36:16:
f7:60:bb:fb:46:9a:83:1c:92:1d:2b:17:d7:3a:bf:
4b:a4:aa:63:be:73:1b:31:2a:48:05:5c:38:d9:c6:
91:05:5b:fe:2b:7a:99:b7:ae:4f:21:6d:d0:65:67:
ba:1b:e0:6c:4c:26:dc:40:7b:11:92:4a:59:db:6a:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:6B:28:1A:54:8A:6F:5E:68:71:A2:A3:7D:FB:C5:F3:96:00:C0
X509v3 Authority Key Identifier:
keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0c:a1:39:ca:f1:bd:37:b8:43:f1:c7:37:5c:e7:4b:cb:2e:
af:b0:06:76:e3:e6:51:91:04:bf:fa:c4:9d:84:00:fa:9c:c0:
04:86:1a:95:c5:ee:6b:fe:4a:ac:94:ff:3e:13:2f:bc:7a:a7:
4b:37:61:f1:5c:d3:d8:c8:cd:cf:e6:52:1e:c7:47:c5:e7:fd:
30:3d:ee:ec:47:8a:8c:e1:3f:6e:c2:3e:b7:1e:c2:3a:80:7a:
3f:cc:12:7a:02:e1:d8:30:93:af:14:84:80:d4:24:d7:08:89:
88:19:86:9a:4d:5a:a2:7b:f8:a4:34:f9:0c:a5:63:e5:25:cb:
b5:68:0c:cd:a6:d4:90:5a:25:ec:a7:40:f0:9a:f6:06:a6:ca:
0f:e4:ae:ac:4f:47:77:f1:b5:b8:ea:c8:89:a7:0b:a2:75:85:
6a:06:94:a7:8c:45:ff:e1:40:5c:ca:29:41:9e:13:c8:59:f8:
b7:9a:b6:35:bc:18:b4:c7:a4:34:89:ac:48:88:72:1e:5c:1a:
f9:54:9c:ab:f3:53:ee:b6:50:55:21:7a:cc:13:76:87:93:fb:
62:90:32:cb:91:39:b6:80:e7:cb:ad:05:e0:74:ed:80:0f:34:
a8:f8:e7:8e:4b:da:d5:c5:a6:e8:d2:19:52:68:64:08:ba:2e:
dd:98:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:06 2025 by rpki-client