
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier: nxekjxu2WQfzCI8M4fjqYWoW/yfl5xySeJzHI14YGmI=
Subject key identifier: A1:81:4C:3F:CF:10:58:30:00:DE:B5:9D:D5:BB:A3:EE:D6:00:34:A0
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer: /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial: 0198D4E06EF4A6BEA7A01465D0CFDD03669F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: E0Hp79fN739kI17YSBJjnjRdoWx5JsjVAekcYKI5wpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:f4:a6:be:a7:a0:14:65:d0:cf:dd:03:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=a1814c3fcf10583000deb59dd5bba3eed60034a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:43:3e:4f:85:cb:4c:13:17:73:42:f6:29:
a1:ac:49:94:01:97:bc:58:8d:a2:79:39:0d:10:3d:
2f:5b:b8:86:33:f5:19:99:f8:dc:00:1b:a0:78:d7:
8b:da:73:1e:1f:c7:80:8e:15:2b:63:8e:61:2c:20:
2f:79:0e:1d:37:3f:2b:6e:99:c8:e2:b8:31:a7:a7:
fd:2e:3b:88:33:a4:4e:8b:e8:89:c4:83:bd:8b:f1:
f0:a6:25:0e:4e:02:76:d3:c6:d2:04:5a:b1:0e:3e:
29:79:d8:5d:d2:7d:94:be:27:7f:b9:61:58:08:8b:
66:46:db:e9:87:a2:2a:de:d3:fe:19:d3:3a:89:f6:
1d:4e:67:9d:00:a9:42:30:71:51:72:fe:dd:dc:45:
95:12:1d:7b:2d:70:40:80:65:45:5a:3e:57:8c:78:
44:42:06:26:8c:80:88:21:2d:48:2c:8d:c1:65:51:
1d:4d:52:04:5d:fe:cb:35:d4:c5:74:20:51:28:53:
d3:5f:7b:f7:ed:d4:c2:5f:8e:db:02:fe:83:63:b9:
64:2c:8a:ba:58:ca:5d:92:2c:91:b2:47:d4:1d:b8:
4b:ef:d3:3f:ac:c9:fc:71:d8:0b:c1:f1:70:05:ea:
aa:7b:15:de:cb:4c:74:f7:d4:24:ae:e5:83:e8:37:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:4C:3F:CF:10:58:30:00:DE:B5:9D:D5:BB:A3:EE:D6:00:34:A0
X509v3 Authority Key Identifier:
keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e6:01:22:27:56:1b:e3:0b:60:7f:d8:23:7d:a3:62:12:58:
c5:db:fa:7f:e7:f0:cf:b3:64:0a:61:a7:dd:7b:cd:1c:02:e1:
c0:fa:e9:11:54:3b:7d:1e:0d:42:d6:aa:c5:8a:25:e2:20:42:
33:76:8a:9f:29:00:d5:5b:cc:16:95:3e:bb:71:69:1f:2c:bf:
97:98:1a:7a:75:0f:59:55:16:b3:ff:c6:31:37:be:6a:cc:e8:
63:0f:64:b3:6a:7b:d7:19:45:7e:49:3f:83:47:2e:0f:b9:d9:
fe:a7:5e:bd:4f:4b:41:a8:67:18:f7:82:88:e7:18:fd:ae:36:
8a:3a:a7:66:11:d6:7b:82:ff:bc:48:ac:2f:7e:b1:2b:5d:dd:
14:be:06:a6:68:50:e1:cb:cf:11:49:0c:13:87:d1:61:c7:7d:
ff:be:08:6b:64:cb:d8:7c:1f:20:6e:08:a4:fb:d6:7c:66:2d:
b2:e4:7c:d9:0b:3d:6e:f9:bd:2e:a5:ff:7a:a8:2e:8a:7c:9a:
52:93:32:da:92:1b:a9:ee:2a:96:d1:d3:5f:ea:5d:24:88:41:
94:54:9b:d3:c7:c9:68:e1:0f:d1:ee:ab:d8:eb:c2:e3:e1:ce:
ca:d3:db:e2:c2:b1:b7:ae:df:6e:62:21:eb:fc:a0:f5:02:64:
c5:f1:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:53 2025 by rpki-client