Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: LelyzzW0l0Vf57Q7uZTjtJZmL1+FhqXSi5DvwJ+VD7g=
Subject key identifier: EC:E8:A1:BC:31:F9:4C:60:F0:8C:16:D5:29:E0:13:04:D6:C8:2C:F2
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 0198D4E012452FBA1B6E08A35EE81FA5DF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:51 +0000
Manifest this update: Sat 23 Aug 2025 03:01:51 +0000
Manifest next update: Sun 24 Aug 2025 03:01:51 +0000
Files and hashes: 1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: se8iNafvvDDbNd6SzcJvqJdumnqyqm5jOYYQ60hnulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:12:45:2f:ba:1b:6e:08:a3:5e:e8:1f:a5:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Aug 23 03:01:51 2025 GMT
Not After : Aug 24 03:01:51 2025 GMT
Subject: CN=ece8a1bc31f94c60f08c16d529e01304d6c82cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:83:61:3a:9d:95:b9:5b:d8:83:62:d1:72:
21:93:d8:da:9d:9d:ad:55:16:bb:e2:da:23:d5:0e:
b0:e2:6b:4e:2f:df:d1:c9:fa:3b:ff:3c:30:b9:56:
36:19:4b:5d:c5:f4:e2:5f:af:95:32:c4:9f:3d:29:
7b:31:d9:db:cc:10:a0:4b:bb:6f:de:2e:7f:30:ee:
75:7b:cd:b1:14:3c:4c:66:d6:2f:9a:55:42:2c:f7:
cb:e4:b7:47:02:cd:e6:59:4d:08:31:88:cd:54:c0:
c9:bb:b8:91:5e:06:87:76:d8:df:18:8e:12:c4:e5:
59:b4:51:fe:03:61:ea:5f:aa:c4:ce:1f:93:66:c4:
4e:5b:5a:05:c3:c5:cd:5c:29:b9:e2:9b:bd:8d:e1:
f9:fd:d2:2b:25:bf:35:4e:a2:6f:f2:cc:4c:e3:88:
14:15:c3:9f:31:2c:d4:c1:45:1a:4c:f8:c0:cf:d0:
be:43:af:e7:89:03:99:4a:ad:66:eb:18:5c:39:f6:
02:d3:54:29:d1:22:48:26:31:6b:6e:84:64:9b:9e:
0c:a6:0e:29:68:09:31:52:e6:2f:e0:96:d6:8d:ae:
4a:35:c3:25:9f:0c:e7:d2:b5:d3:fe:35:c2:68:bf:
6c:37:81:4c:0f:da:82:76:0c:19:d2:1f:b0:72:62:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:A1:BC:31:F9:4C:60:F0:8C:16:D5:29:E0:13:04:D6:C8:2C:F2
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ec:3e:15:d4:10:6a:24:13:de:ef:62:3a:d1:2e:6b:2c:37:
7a:c7:b8:3b:a6:31:49:60:b4:fa:e8:69:85:ec:3d:5b:79:84:
dc:83:46:70:67:de:7c:41:b7:3e:cc:3f:e3:ef:2c:ee:00:80:
c0:cb:51:1f:23:30:75:2b:14:23:b5:96:61:fc:b7:74:9a:b4:
ad:6c:0b:b5:04:d9:5d:ae:e8:84:43:bb:54:31:fe:bb:58:8d:
03:e7:ed:65:9a:91:6d:52:22:f3:0a:5e:f2:dc:90:a7:48:0a:
27:f7:e4:53:43:14:08:41:a9:5a:c6:bd:1e:40:fb:cc:09:2e:
d9:93:0c:e2:7c:6e:02:ee:bb:39:1f:2f:25:aa:79:a6:63:f0:
d0:95:96:a5:7d:72:58:0f:d6:d4:84:2c:1e:67:79:0a:c5:31:
7e:aa:1a:0b:b9:82:e2:02:4c:a9:2c:3b:49:93:80:5a:39:e0:
6b:73:0c:fe:bd:a4:44:1c:ac:8f:e6:e7:73:b5:13:a5:de:dc:
e9:1b:e0:0e:c1:69:ea:9b:a4:b0:1e:8d:5b:aa:b6:11:ce:97:
77:46:5b:1f:04:34:a5:88:27:54:78:e2:cc:c4:17:08:80:f0:
04:a1:1f:3c:88:1f:06:98:22:73:a1:69:cb:bf:1b:b0:0e:49:
98:ae:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:03 2025 by rpki-client