Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: TPgMB0JGwtieL5agZIS5BKbWpDy9LVrAQ8uT6wtWNfo=
Subject key identifier: 10:0C:81:94:15:4C:94:87:45:B4:58:52:93:F7:BC:ED:0A:0F:38:01
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 0198D660CE31733D882000F37CED615EADDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0EDF
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: FsNtTGlB21LUu/qjl2hgzMD0ObKFAg8TsiagaTN7loQ=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ce:31:73:3d:88:20:00:f3:7c:ed:61:5e:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=100c8194154c948745b4585293f7bced0a0f3801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:9c:7a:a3:52:66:0a:9f:31:9f:a3:7e:ab:
41:e5:62:b7:a7:c2:e4:b0:1a:b7:e1:4a:5f:f6:64:
c8:a6:d0:e4:8a:23:86:28:66:78:ef:bb:82:f3:82:
1a:5b:23:69:e9:85:8e:a7:42:c1:6b:b2:87:87:e1:
d0:eb:03:fb:d9:48:2a:f8:3e:aa:38:6e:b4:72:60:
03:5b:dd:b9:93:02:56:84:0c:9f:76:a3:3b:b9:31:
f5:a5:02:1b:5b:58:c2:3c:c9:d2:93:a6:26:76:70:
1b:48:d7:c4:32:7e:7a:20:99:80:bf:57:e1:d2:a2:
cd:cd:af:75:29:01:80:f8:b4:b8:3d:bd:95:ef:4a:
09:f1:ea:18:22:a7:02:ee:a3:b8:76:34:35:e9:5a:
b2:a4:01:72:6a:34:50:e7:23:66:b6:1a:5b:1b:19:
a0:5d:2c:ed:e8:73:3e:49:e3:50:8e:e0:f0:cc:6b:
e2:d5:cd:97:75:8f:ec:0e:b6:c4:9d:f3:85:8b:e2:
15:d6:cc:84:04:51:3f:8e:df:22:b9:6c:0e:e9:46:
fa:4c:ba:43:70:03:f6:8c:c5:e0:22:6a:1f:2a:b4:
c8:eb:0f:a5:5e:93:b2:dd:91:c0:32:3b:27:36:9f:
68:48:eb:fb:52:b9:c1:2e:fd:6d:a0:87:0c:05:96:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:81:94:15:4C:94:87:45:B4:58:52:93:F7:BC:ED:0A:0F:38:01
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:51:c8:df:4e:98:0f:ac:b1:9d:cd:ed:11:bf:ef:fd:e7:63:
e3:08:dd:1c:1c:8f:e8:43:88:be:d9:8a:ea:46:6b:57:f3:3d:
dd:e0:39:0f:f8:61:29:43:05:f5:61:8d:de:cb:00:4e:aa:79:
63:8c:aa:8c:24:57:44:0a:6d:ab:89:0b:ee:27:e6:0e:aa:04:
e2:d2:be:fe:74:a8:81:54:9e:f7:13:ed:2c:4e:2d:60:5e:24:
02:69:97:4b:36:73:48:7d:7a:a3:6f:bb:ae:09:4c:9f:e5:e1:
d3:ab:00:ed:18:ab:be:3b:70:82:c9:15:c9:eb:d0:02:d2:cc:
8a:23:10:89:71:67:09:55:b9:be:a6:99:a9:4f:33:73:8c:c8:
57:89:18:da:12:08:61:55:e3:f6:4c:fd:59:7f:a1:a0:21:f7:
53:86:37:2c:8b:26:f1:09:10:68:a0:6a:61:20:8b:d9:1a:6c:
54:45:88:4e:90:5d:7c:bb:96:e7:d5:f4:58:54:80:f6:48:98:
a1:0e:22:16:0c:cf:a5:df:bd:2c:48:d8:68:60:ce:36:cb:b7:
65:11:c0:c2:ac:f7:92:11:0f:de:35:35:0f:93:54:37:5c:88:
3b:44:80:83:ba:91:8d:21:b5:a5:2f:71:69:15:4a:d6:d2:2e:
9e:2b:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:35 2025 by rpki-client