Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: jlpWex90prBbKuSJ/+L+SOErSxKhd2vxS/dpszRetY0=
Subject key identifier: BD:16:09:9B:7C:00:EE:1D:76:28:E8:05:40:4F:1C:39:80:33:EC:1F
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 0198D6CDBE6E75DFE2C077F4BF76D7A8D57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 0931
Signing time: Sat 23 Aug 2025 12:01:04 +0000
Manifest this update: Sat 23 Aug 2025 12:01:04 +0000
Manifest next update: Sun 24 Aug 2025 12:01:04 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: DGaeBnasb2GJIdToV03bj6LBdwO6X0FKCmzUbNqbbS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:be:6e:75:df:e2:c0:77:f4:bf:76:d7:a8:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Aug 23 12:01:04 2025 GMT
Not After : Aug 24 12:01:04 2025 GMT
Subject: CN=bd16099b7c00ee1d7628e805404f1c398033ec1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:62:28:cc:2f:69:12:fe:95:fb:44:79:f8:
a7:6a:74:2c:bc:ee:9d:72:70:3c:27:ba:43:a0:d1:
98:5a:70:96:5e:e7:de:c8:9a:aa:8c:df:37:81:fb:
49:80:a4:f9:da:6f:83:e5:10:de:2d:cf:55:b3:26:
fb:c6:43:68:96:be:bf:3d:81:b8:74:e6:55:00:7b:
b1:ba:61:07:85:27:2e:5d:cc:53:20:e9:1b:10:9e:
a8:4b:88:c0:e2:44:4b:be:6b:1e:05:83:fe:fe:a4:
01:9b:09:bc:ac:92:75:a1:44:c9:40:93:3f:81:8c:
de:99:24:01:e7:5e:ac:6e:51:1d:fa:9c:be:dd:e8:
20:2c:bf:c0:bc:33:4b:cc:64:33:d3:f0:62:c2:70:
45:dd:ed:cd:97:a6:ab:80:6b:c5:51:bf:17:17:d9:
ce:38:b0:67:8a:71:f4:cf:db:bc:e5:f1:ea:72:44:
28:f4:2d:a6:74:f9:8e:43:a2:6c:cb:4f:17:3a:7c:
bb:eb:1b:47:c3:6d:dc:cb:11:71:f1:47:86:4f:a4:
a4:ec:3f:4d:54:82:e1:4a:aa:11:60:01:a9:e4:0c:
de:71:d7:53:56:ed:ee:37:25:2d:fa:89:f0:6e:4b:
8e:e7:5a:df:03:4e:56:e4:8c:1f:e5:d4:6e:ea:07:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:09:9B:7C:00:EE:1D:76:28:E8:05:40:4F:1C:39:80:33:EC:1F
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b7:68:69:dd:bd:6f:38:48:35:4c:ed:08:79:bd:ed:92:64:
e7:40:a8:35:92:4e:73:74:5b:a2:19:6e:10:a6:97:db:57:22:
4b:46:ce:56:15:d9:2f:aa:13:d0:33:ba:51:b3:84:fc:64:9c:
25:ac:ae:ce:a9:96:4a:81:d6:93:a1:8a:1c:19:b8:b5:e1:4b:
77:06:a9:76:f8:4d:f6:5a:9b:b6:6a:de:15:4e:8c:11:21:88:
08:dd:77:c2:c7:45:93:22:30:40:46:14:67:cf:f5:b4:a3:0c:
1b:06:62:16:da:f3:ff:53:db:e4:52:1f:57:14:6f:c4:73:f8:
7f:56:58:b3:9f:54:86:a7:c1:b0:4f:50:8c:e8:11:94:3e:33:
5b:aa:68:ac:d9:89:19:8f:a8:ad:20:23:19:8f:ae:52:c5:44:
9b:c5:9e:df:69:8a:2f:04:f3:f1:15:cf:0c:b0:f4:b3:c7:a9:
e2:78:7b:b2:9d:a4:fd:92:ce:27:26:f0:6d:1a:73:88:ce:54:
25:ed:8c:c2:bf:73:11:05:f0:0a:62:89:64:df:74:b4:83:f9:
65:a5:68:f9:31:38:14:cd:1c:de:d8:8f:c4:66:e8:bc:2e:09:
79:8a:73:c0:43:f8:89:3a:c5:5d:55:56:4b:08:28:f3:42:c8:
06:51:9d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:29 2025 by rpki-client