Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: J6+H4JTjkJVqDuP8iM/u++iSSmWfzLrFX08cCiy8a8U=
Subject key identifier: D5:FE:F8:77:40:02:67:BB:5F:D6:F0:F9:B6:E7:B7:37:4B:F0:1A:0D
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 0198D65FC81104154D78A95277E11C6AC160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: LgOb665nFw4UMbyKQBjr7QKOa1k+YUJyS5Rox3IRHwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c8:11:04:15:4d:78:a9:52:77:e1:1c:6a:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=d5fef877400267bb5fd6f0f9b6e7b7374bf01a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:70:77:a7:5b:51:4e:e2:95:80:d9:25:d4:
d5:f6:72:2a:78:5c:6f:12:b3:af:bd:8f:c7:71:ce:
f4:48:94:e7:fe:9f:79:4c:f2:bd:04:82:9e:bd:c1:
92:25:3a:71:90:61:6b:bb:93:5c:03:25:e7:65:2a:
1b:ea:3f:b5:1b:ca:d3:ee:e4:ea:0d:61:06:43:af:
66:64:75:9d:b9:4d:2b:2f:2f:fa:02:18:8f:7d:4f:
2a:ca:ee:51:b7:b1:c3:31:81:29:3b:f4:9e:c2:8a:
60:9f:48:36:83:4a:42:03:db:7a:64:65:80:be:9e:
34:45:e7:dd:22:fc:cd:c0:38:e6:fc:4d:56:7a:5b:
58:ee:df:05:e2:dd:07:19:eb:4b:73:5b:bd:48:3f:
33:05:5a:b5:fc:44:af:72:8d:6b:4c:d8:30:ef:72:
ad:58:8c:97:db:0c:9f:ac:3b:63:21:6a:33:d4:4b:
eb:7b:e1:3b:80:67:9e:fb:43:c1:87:f9:1c:f5:37:
14:31:c0:41:f4:5e:6f:a4:4a:30:f4:ce:d1:63:9d:
82:3b:8b:ea:4b:5d:d3:08:2e:f8:2c:b4:84:ab:1e:
5b:13:5f:b7:6a:28:de:1a:7f:90:d7:df:c6:22:ba:
c3:13:8f:bc:21:aa:80:df:25:9e:99:4a:0e:5f:e2:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:F8:77:40:02:67:BB:5F:D6:F0:F9:B6:E7:B7:37:4B:F0:1A:0D
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:ec:50:8d:85:57:d6:74:47:5a:82:bf:3e:93:6f:fb:f8:
54:bb:de:01:6b:28:6a:22:41:61:f1:a4:24:08:b4:9b:21:df:
0b:6e:15:09:74:83:35:c4:f6:5a:bc:85:06:07:48:d0:19:68:
e9:58:0f:6f:fb:69:4b:25:f0:7f:04:72:38:81:76:9f:e5:c5:
a4:43:83:a6:e6:a0:ca:1f:2d:16:91:64:7e:6c:85:a4:61:65:
51:59:f0:50:ce:eb:7a:6d:a1:f4:f3:e5:90:06:d8:38:5a:c2:
9d:b5:d4:0c:cd:e9:df:c0:33:69:81:0e:51:a5:50:0d:f5:5c:
da:07:ad:2d:fb:08:8d:f0:40:f7:49:c1:ce:db:86:53:9b:6b:
ff:49:aa:05:b6:e8:e9:fb:51:44:4c:73:c9:9d:4b:bd:cc:15:
fd:be:3b:88:e7:56:81:74:1c:52:36:7f:93:91:33:c9:c7:62:
ec:89:1a:8c:32:6e:8c:7c:c3:45:56:42:6f:58:8a:30:78:13:
df:c4:f0:3f:38:c3:b3:64:49:ae:1f:5c:ad:ef:3c:3f:79:2e:
95:7d:ae:76:4a:ef:5c:fe:61:98:b6:ad:46:bf:98:c3:18:c2:
52:1d:d7:db:1a:0f:59:bf:7e:80:aa:bc:af:80:0b:6a:4b:ed:
7c:21:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:01 2025 by rpki-client