Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File: GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier: h+Ng8tXoWtPW+3DCRXVQVyqIdTLqZVslDL31G7goBQc=
Subject key identifier: 8E:E0:CC:00:9E:1A:BE:B3:51:49:18:1E:3D:E2:48:FE:55:B6:3B:84
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer: /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial: 0198D5BBB9DC180D2F1080D7D05D7DBF3344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: PAnAEbYdyKWB+iUwhfbikU+ADy3z+NXhrRtOELKAuSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:dc:18:0d:2f:10:80:d7:d0:5d:7d:bf:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=8ee0cc009e1abeb35149181e3de248fe55b63b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:89:25:fa:d0:cd:3f:c1:e6:8b:3a:04:ae:
1b:4c:69:e0:71:e4:c6:2d:3a:88:93:d1:b4:dd:c1:
3c:4d:a9:c1:9f:d0:d4:d4:21:3c:ff:69:ff:5c:27:
8a:81:fe:94:f7:ca:ce:73:20:39:fb:b8:19:c2:0a:
29:c0:4c:9d:12:3e:ba:27:77:75:64:3a:c4:df:5f:
72:83:6a:35:15:fa:b9:9d:db:06:34:c4:99:61:e1:
bf:33:b3:2d:2a:1f:ce:a1:77:61:62:98:22:1d:e4:
a6:bd:2c:6b:94:70:7b:41:14:d7:ab:64:78:7e:1e:
d3:95:cc:aa:48:79:e4:0c:72:33:03:f5:90:b3:ea:
58:9e:9b:41:7f:b1:3d:34:f7:bf:a9:d9:bf:3c:e8:
a0:06:02:25:9d:38:5a:ec:b2:ae:01:52:9d:13:b9:
4e:ef:4f:09:cd:7a:a4:59:b6:bb:fa:54:d9:10:0a:
49:cf:74:03:44:3c:e8:e0:ee:23:5c:32:6f:62:30:
53:23:fc:0c:02:3e:b4:39:47:60:59:c7:a1:ff:a5:
fe:68:3b:96:94:36:98:e1:37:c3:d8:af:d6:41:40:
a2:6d:a3:45:a1:0f:11:4b:d7:15:bb:98:37:f9:74:
5b:c3:77:3a:90:1d:4b:34:06:8a:b6:44:17:ae:36:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:CC:00:9E:1A:BE:B3:51:49:18:1E:3D:E2:48:FE:55:B6:3B:84
X509v3 Authority Key Identifier:
keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:39:52:5d:b1:1c:bb:0d:1e:77:71:bf:9a:9b:02:80:f7:7f:
62:18:e9:bd:8f:7e:4e:70:62:7e:29:71:cd:54:e6:6b:be:7c:
bc:49:a8:44:d8:48:18:55:1a:e3:ee:92:ac:fa:cd:68:27:95:
41:ff:30:d2:48:09:d5:97:4c:4f:3b:15:ce:4c:19:08:77:da:
73:34:bc:d4:c8:80:9f:f5:60:54:f9:8b:b2:38:e2:0e:28:46:
53:62:13:42:7d:18:3b:90:71:9c:1a:10:fd:16:e8:60:cc:c8:
81:94:36:31:17:95:e2:e1:7a:53:25:3c:75:50:54:80:8b:8d:
49:ed:9f:a8:c2:f7:dd:26:e6:26:4c:83:e0:be:4c:58:cf:b6:
17:5b:d9:91:52:74:50:97:c6:e9:6c:69:1d:0b:f5:7e:af:c3:
03:be:4f:7a:2d:bd:f6:21:3c:71:14:17:c2:86:b6:28:36:6c:
d1:07:f1:0c:bf:38:a0:60:a8:8c:86:f0:7a:ba:7e:6d:8c:55:
fa:97:2b:de:c0:88:b9:68:88:47:e5:27:cd:06:36:3a:1d:f6:
ac:f1:c7:f3:dc:aa:18:9a:70:a2:cb:0e:e2:80:23:a3:e9:5f:
48:4e:78:98:c5:0b:b5:09:f0:2c:fc:6a:bd:ca:0f:4e:de:01:
f4:80:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:49 2025 by rpki-client