Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: gdagYc2KZyeYacAkPsjKQAVZbcxYsGzyQIXwFoZC2Gc=
Subject key identifier: 3A:93:52:99:82:F7:11:31:5F:AC:F1:91:47:90:2C:CA:6F:4B:7A:E6
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 0198D5157A5297F61F44660AC183F62D18F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: 8SoatP7+eES/uAnKmaO1ndWvbL2dS3tnJngQuXlneBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7a:52:97:f6:1f:44:66:0a:c1:83:f6:2d:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=3a93529982f711315facf19147902cca6f4b7ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:80:ea:52:75:68:a8:4d:6b:fc:a6:22:31:
b2:01:75:55:ff:7f:d6:3e:f9:05:19:60:95:04:55:
3e:a9:ee:63:c7:cf:0f:90:71:01:12:35:dd:81:a6:
b8:c9:c4:12:cd:b5:aa:35:60:b8:93:b8:66:0d:17:
30:7f:1e:9f:31:08:58:ab:ff:7c:eb:e9:f9:08:09:
57:d6:d1:b1:8e:08:02:78:6c:32:ec:70:5d:d0:3f:
d9:bd:08:8e:69:4c:37:04:91:1b:d2:93:b4:3c:22:
0b:d0:69:36:41:da:33:71:8b:2a:22:57:d2:ca:2e:
bd:a3:a5:78:c6:fa:a7:ea:e6:c6:a8:cd:68:4c:d2:
12:98:49:d8:1c:2c:a7:c3:f3:2b:d7:c6:3f:1d:44:
fe:2f:3e:22:2c:e7:34:04:fa:4d:96:75:5e:ce:97:
e6:94:ba:b0:7d:ff:be:eb:9a:12:61:39:2d:bf:c8:
35:7a:36:c4:96:b3:24:d9:a8:2c:be:8f:b8:51:d6:
1a:36:5f:a7:3b:21:7e:74:6f:90:2d:17:9e:22:a1:
89:0b:6e:04:0f:35:f1:02:1f:dd:4f:0c:53:08:1b:
73:a2:ca:04:c6:b5:b2:c6:27:79:32:aa:92:84:49:
a5:3e:30:2c:93:d2:21:27:d5:a9:de:dd:e6:d4:fe:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:52:99:82:F7:11:31:5F:AC:F1:91:47:90:2C:CA:6F:4B:7A:E6
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:40:9e:58:e2:1d:d5:1e:6a:2a:e1:97:3f:48:03:d8:b5:0f:
1a:13:14:a1:56:b2:a8:52:1d:b0:f5:d8:34:68:33:85:74:9a:
1f:d2:e6:ad:a2:99:dc:6c:f3:27:e5:cf:71:17:69:fa:2c:86:
95:7b:ea:80:62:77:7b:d4:c6:f2:f8:0e:e8:98:78:74:96:25:
5a:b9:7d:25:03:da:4e:fb:9d:48:a2:62:81:4a:21:6f:37:08:
41:d4:fd:61:3f:7e:b9:26:b6:c7:a2:c2:1b:04:92:3a:84:67:
e9:52:63:9e:78:ff:0c:ae:6b:b6:b5:a5:f5:e9:33:9c:2d:ff:
41:b8:c6:a0:80:5e:e8:c3:0b:de:06:40:c0:ae:0e:33:f8:ed:
be:48:8d:95:76:9f:18:c9:76:05:54:6f:d8:e3:bd:d1:51:c1:
9a:49:f6:d3:a6:2f:c9:d2:c0:67:88:46:bc:10:65:24:25:76:
85:fd:e2:d3:56:35:93:5e:0a:57:db:b8:e1:9e:8c:cc:12:1f:
d2:48:97:df:56:5f:7c:5c:e4:44:a7:2e:71:fc:bf:93:7f:bb:
84:09:2d:63:0f:45:15:02:5e:cc:46:bc:ab:cb:d5:a9:3d:59:
61:f4:a4:aa:2e:25:81:e0:22:72:a8:f5:38:3a:dd:26:19:9f:
de:fa:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:14 2025 by rpki-client