Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: Of3ih+Y4KytPjdX90R2QN02fxD8jWmaVAKgPJt/xJss=
Subject key identifier: 7F:66:64:82:7A:64:41:A7:65:56:0F:30:CA:79:2E:30:49:85:B9:98
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 0198D472B76D5D8EADCF6DDAD41D16DDF743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: qZxiQYOjQqUEKIWYQblTUl1MtRTAGC/V/o2o3CsScDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b7:6d:5d:8e:ad:cf:6d:da:d4:1d:16:dd:f7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=7f6664827a6441a765560f30ca792e304985b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:8a:20:94:9f:92:e9:f6:fc:71:4e:8c:a7:
b4:1e:a5:8c:05:a8:10:f1:1e:26:d4:c2:2b:24:84:
7f:c1:00:43:2a:cc:f8:92:24:93:c5:5d:2a:49:ac:
e1:a8:11:71:8b:e8:4c:4d:0e:b4:65:3d:7c:51:6a:
1b:38:85:48:59:02:f9:de:23:fb:5c:6f:30:ea:84:
db:ed:9b:07:56:f5:ae:84:fd:d2:3f:7c:a9:6f:28:
fa:51:45:93:d7:d5:ce:d4:f7:72:d4:1f:1f:59:47:
2f:71:c4:86:88:d7:0b:74:ff:23:7a:4a:10:6d:c7:
52:92:5b:fd:5a:52:cb:e4:17:a4:11:e1:ef:2a:77:
7c:1c:d3:9b:a2:b8:6c:d3:6d:c9:50:6f:cf:e9:d6:
a6:c6:21:0f:79:55:cd:ef:c1:55:5d:a6:a7:b2:b2:
ba:6b:5a:8c:8b:75:96:63:5a:79:c9:cd:95:08:df:
05:a6:a9:78:40:97:99:9c:60:91:fa:9b:81:cf:fe:
8d:27:91:99:04:d9:f2:b4:aa:f6:df:78:71:ef:85:
cd:cb:66:7f:0c:8d:e9:90:3a:80:98:33:27:c4:02:
8f:05:56:5a:16:2e:34:ab:3d:ea:a4:42:b4:51:02:
24:1a:79:43:64:49:5b:fa:88:90:d5:eb:49:db:54:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:64:82:7A:64:41:A7:65:56:0F:30:CA:79:2E:30:49:85:B9:98
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:26:6a:08:b5:12:36:e0:8f:64:b5:38:fe:23:48:86:1b:ae:
03:86:8f:a2:77:a5:b2:4f:7d:22:35:06:79:75:41:df:c0:76:
3d:31:3e:69:82:95:cf:7a:9b:5e:8c:87:20:d8:60:bb:94:ca:
3a:a1:57:3e:ab:8b:df:b7:7b:3d:03:b9:66:ee:98:cc:1f:59:
94:67:7b:73:73:33:b7:87:2a:b9:65:a0:79:7e:34:5b:37:70:
bb:db:96:89:5d:e1:ed:f8:d7:c2:14:46:59:99:96:24:14:87:
25:76:e6:84:24:05:17:4d:57:3b:bc:38:0d:ca:6c:72:9a:21:
07:fc:39:71:c5:23:22:96:5d:55:aa:8e:c8:48:cb:90:a0:18:
cc:4f:f6:40:69:b8:67:77:06:cf:82:e7:5c:e2:ef:e0:ab:d9:
52:dd:4a:85:59:0f:10:08:7a:ea:90:26:ee:25:2b:5f:2f:01:
dd:5c:7a:15:7c:d2:41:cd:a4:d9:97:48:a0:22:6a:c6:80:89:
73:63:21:df:a7:6d:f2:27:f0:b5:e8:61:37:1a:1e:65:0e:2d:
53:1e:67:38:16:d6:e6:03:7f:a4:8d:d2:1c:1d:4a:4b:80:9f:
9b:33:26:03:02:bd:d3:b6:92:e9:a8:25:80:40:be:1e:1d:80:
0c:bd:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:52 2025 by rpki-client