Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: q9WhIjMgiisOTTBnz9Pwth0LcgeMnDEKFYZAS6DEvw0=
Subject key identifier: 2C:68:BA:7C:AD:8E:42:50:09:6C:B3:AA:8E:51:9D:38:FD:F9:75:85
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0198D773D236CF00B0115E97E5B1F52EE31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 1042
Signing time: Sat 23 Aug 2025 15:02:28 +0000
Manifest this update: Sat 23 Aug 2025 15:02:28 +0000
Manifest next update: Sun 24 Aug 2025 15:02:28 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: xjMEYUMBSDGhis9y2fMhOZr7KdbNTeBC/yUZjQLVcpU=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d2:36:cf:00:b0:11:5e:97:e5:b1:f5:2e:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Aug 23 15:02:28 2025 GMT
Not After : Aug 24 15:02:28 2025 GMT
Subject: CN=2c68ba7cad8e4250096cb3aa8e519d38fdf97585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:bb:de:c3:91:d2:24:2e:74:df:f4:e5:f2:
bb:be:31:91:ee:56:d2:00:70:20:87:3e:60:9b:03:
65:52:0a:f0:08:58:7d:b3:bc:52:a9:1b:32:0f:d8:
d1:4d:1c:3d:0c:28:d6:82:41:88:f1:3d:76:86:1f:
1b:cb:a7:b2:1f:2e:15:48:b8:c7:ea:23:af:2c:18:
3d:61:7f:cf:b6:79:fe:18:52:5c:74:05:cf:5d:a2:
db:94:ac:84:8a:6d:c7:38:33:d1:d8:58:d3:75:71:
9f:17:0f:e1:08:75:0c:46:c7:eb:be:5c:96:63:e0:
77:60:72:fc:22:d1:24:f3:65:aa:10:80:81:07:df:
a5:a1:eb:69:e7:9f:6d:25:6b:47:61:71:41:65:79:
8d:2f:76:f6:ea:ba:68:a4:e8:33:4c:16:dd:f0:fd:
b0:4f:48:5b:03:bb:5d:87:57:22:34:80:24:99:d3:
65:2e:d3:12:da:a6:4b:c6:bb:49:a9:93:55:2a:12:
bc:a6:28:d0:19:2e:5a:76:80:ef:b3:69:b7:08:7e:
7c:35:6e:d6:05:76:c5:65:9e:7f:b0:3b:d3:29:74:
80:a4:d8:f5:15:c9:bb:28:17:87:68:37:bf:d5:65:
ad:7e:54:14:46:fa:6f:10:82:7e:63:52:64:62:75:
b4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:BA:7C:AD:8E:42:50:09:6C:B3:AA:8E:51:9D:38:FD:F9:75:85
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:32:4f:38:ad:8e:75:80:10:66:4d:0b:75:16:ba:1a:ab:
17:86:7d:36:64:c7:c3:e7:14:c1:57:b5:b5:64:25:be:96:16:
6b:38:be:ad:3f:99:03:13:9b:51:7b:c7:32:c2:0c:98:1f:c1:
7a:ff:1a:10:71:cc:31:ca:2c:26:de:04:29:c2:ee:d8:b9:78:
c8:48:1f:a8:f9:68:d9:19:c9:b0:3b:38:16:94:c5:12:9d:fe:
b1:c1:2d:17:36:8b:9f:82:45:e4:64:5d:f3:10:83:3b:0e:1d:
a3:31:cd:58:e2:07:80:4e:5e:53:25:c1:9c:f7:be:29:cb:5d:
c2:65:7f:ab:3c:02:af:e3:b3:df:af:8e:48:41:06:45:11:f1:
76:f9:ec:3d:9c:e5:5d:d0:e0:5f:7c:79:dd:91:50:2f:08:d9:
e0:9b:6f:a0:e7:07:b4:ae:8b:43:2e:db:51:af:03:84:85:54:
9c:e1:76:e5:8f:22:36:15:04:ef:ce:a1:84:28:b7:6a:9e:4c:
c4:e4:d2:f0:e0:18:5d:63:2a:f2:ad:13:e8:2e:3a:90:f2:da:
7d:cb:f3:b9:1e:0a:9c:29:a9:6a:31:c9:0a:c2:f8:db:20:35:
6a:ad:f6:e4:c0:49:d3:c0:35:1e:5c:2c:b0:c1:0e:e6:03:ca:
c3:07:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:13 2025 by rpki-client