Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: kXVb5dxZsyyoKnoNvHEK17jg002iF6aPF5M84XqXj7c=
Subject key identifier: E1:30:F7:5D:89:3C:79:D1:BA:33:80:38:CF:72:4B:1A:41:34:21:36
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 0198D65F0509B5882A6CDABDC798FCC02B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: MWsxMVCZ57yEHrmSn89K+z2LnhSZmYbQqNEGPWUOO1k=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:05:09:b5:88:2a:6c:da:bd:c7:98:fc:c0:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=e130f75d893c79d1ba338038cf724b1a41342136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:07:66:57:ba:0d:86:56:58:4a:29:11:a8:
2a:36:23:84:eb:4b:fe:f6:5d:87:7e:b8:ab:42:d6:
36:31:bf:30:b3:79:a3:bf:78:46:07:f7:0b:e9:c2:
5e:8f:5d:ea:d0:f8:dc:2b:aa:d4:ce:b0:b7:af:84:
8a:32:da:17:b8:86:ce:fd:28:98:ce:ef:85:c9:69:
57:1e:ed:5d:8f:3b:f8:32:58:f7:2b:b6:69:58:5e:
9d:c5:04:5c:68:66:b1:35:f3:12:5e:b9:f3:92:37:
59:4d:76:ff:63:83:a5:57:0e:de:bf:1a:24:fc:b9:
42:6d:97:fa:56:d0:c9:a1:7d:65:26:b6:a7:84:cf:
ab:9b:fb:90:c6:8b:89:bf:53:08:88:12:36:88:09:
c1:1a:c4:41:5f:17:60:60:ed:03:cf:a6:fd:bc:7c:
ef:ca:ac:e7:d6:16:42:ca:75:b1:18:33:5a:cc:96:
d4:66:6e:46:d1:8c:26:92:c2:6b:e1:19:de:39:7a:
08:1f:d8:64:c6:ff:15:22:51:95:d8:e8:c1:b1:2f:
d0:6f:fa:c0:aa:e9:50:2c:65:bd:f4:c3:54:44:66:
92:85:6c:a2:fd:41:41:e9:01:4f:77:1d:54:79:b1:
f4:e0:ca:e3:5d:1b:5f:27:b9:86:3e:7b:40:e8:68:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:F7:5D:89:3C:79:D1:BA:33:80:38:CF:72:4B:1A:41:34:21:36
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ef:60:e0:b9:05:6a:88:c9:11:cf:b6:a9:3c:e6:cf:7e:b3:
cf:59:8d:62:f4:c1:95:e9:0c:af:ed:a1:25:71:d3:92:36:22:
db:0f:89:a3:79:a8:be:b5:9d:53:f0:95:5e:3d:67:04:bb:f6:
43:8a:ee:ec:64:ae:45:5b:71:80:32:f6:0d:d3:52:5d:8a:80:
ec:07:eb:2f:2d:54:db:19:de:19:16:1a:7d:8f:d2:f5:7d:03:
ba:1e:a7:bd:79:df:44:14:ee:8f:2e:6c:06:3e:82:a7:3c:62:
f6:67:5d:e4:be:3c:9a:0c:d6:29:32:84:6d:c8:dc:5a:c3:2d:
08:c0:a2:cb:f2:dd:2c:97:7d:06:49:05:b6:84:ce:8e:79:32:
2d:fb:d3:ad:5b:3b:e0:12:c9:d5:da:1e:66:df:2f:27:00:73:
8d:b4:4b:b9:6b:11:80:a2:c6:b7:f7:56:b9:3e:78:41:66:1e:
b4:ce:0f:56:30:f3:83:fa:5f:e2:54:f5:48:ec:07:92:70:50:
5c:0d:d1:a3:b4:c4:fc:fd:99:0f:24:7b:c3:7c:48:3d:7b:04:
59:ba:70:bf:04:12:02:5b:33:18:d5:6a:04:8b:16:92:64:9c:
0e:4e:32:17:0e:16:1f:32:d4:6f:a9:71:ee:d1:af:f0:57:10:
f6:ca:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:46 2025 by rpki-client