Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: HIQYzkaHOR33d8nxujR40nHVg5vi5LqbzsdW2o/UtF4=
Subject key identifier: E9:B7:00:E2:CA:45:42:82:C3:A5:85:AF:02:71:72:17:82:E6:3A:BF
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 0198D65FA147D0990CB23DE60D71B16F697E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: MA8JYc0KEDUmAooKVwxTchqF2ewBdrGyv0anEDLQNMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a1:47:d0:99:0c:b2:3d:e6:0d:71:b1:6f:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=e9b700e2ca454282c3a585af0271721782e63abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:47:29:d7:1f:62:fc:09:cc:1d:41:c3:f4:
fb:b2:0c:2a:5f:f1:c8:f0:f6:1c:6f:39:bc:e0:3b:
e4:4e:77:00:4e:c7:3f:5f:bd:25:89:61:ac:3f:3d:
74:4b:22:d1:aa:d8:16:2e:b1:d2:13:3c:55:1c:ca:
9b:c4:aa:f9:96:9b:d9:2a:4d:2b:a5:4a:d6:61:70:
39:1a:39:01:91:dc:d6:a4:df:6f:d7:2d:9d:b3:22:
af:4b:b4:02:db:e7:6a:bf:f2:07:69:11:b3:36:63:
35:d2:a1:dc:82:4c:6f:f0:47:bb:26:97:c7:4e:02:
35:ee:3a:96:1f:5c:78:fb:5f:3a:c2:e6:69:e6:e0:
9d:75:31:ad:36:e5:a6:86:c5:2a:c6:af:1e:b6:ed:
6c:a2:9e:34:f2:39:19:52:10:16:a2:db:2d:cf:c4:
b8:1a:9d:3b:8f:e9:83:a6:b7:d1:67:c2:39:49:4c:
cc:f8:56:b6:9f:d9:86:ce:96:5d:cd:5c:ed:60:91:
29:de:39:91:33:b7:60:26:73:ed:6d:09:ad:c8:8d:
b5:17:6e:12:16:3b:e9:99:fb:cd:80:5b:54:76:fa:
87:ec:26:dd:7c:cd:7b:85:ba:82:59:56:b6:3a:0f:
29:0c:52:8d:45:12:75:17:6c:9c:69:75:7b:2b:86:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:00:E2:CA:45:42:82:C3:A5:85:AF:02:71:72:17:82:E6:3A:BF
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:21:e4:75:70:ad:bc:9f:39:a7:1d:69:fa:c6:b5:34:b7:
70:f1:d4:be:d6:d0:ea:9b:dd:d6:95:e0:8d:c4:ca:6d:7c:69:
60:81:20:b7:d5:9c:d3:d3:91:9b:4c:46:83:81:a8:92:a0:e2:
b3:85:0f:19:0b:20:ad:71:a3:49:62:b1:0f:31:00:9c:84:d7:
d5:46:b2:d6:c0:10:f1:98:22:c7:56:46:fa:40:6a:52:35:e9:
25:d3:f7:78:d5:26:c2:e5:bd:8c:4b:52:2d:92:cc:e5:fd:5d:
06:4e:3a:00:b4:80:07:89:86:07:c5:83:6c:9d:13:8d:61:9f:
15:75:46:d0:a9:19:a0:21:21:e0:62:f0:aa:4f:4c:a7:33:c2:
f4:b2:33:cd:01:71:18:87:00:ce:d3:1a:85:5c:0b:b7:0a:32:
f9:98:87:c4:cc:5d:d6:d2:84:ac:a8:c4:fd:7f:74:38:d9:0e:
f4:a0:ac:a1:a0:11:76:ab:9a:c8:79:05:89:ce:0f:14:b1:c8:
83:94:0a:83:4b:09:06:91:7e:b1:19:a4:b6:8e:5f:9c:99:96:
fc:e5:99:9b:90:f6:5a:77:10:42:36:5b:8a:f3:f2:5d:3e:26:
48:7b:60:66:0d:29:f9:05:94:0b:f2:ce:55:17:2f:70:03:9d:
db:18:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:42 2025 by rpki-client