Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: fhBdAsfq9MtCdeG01jOMj/o8UPyKovntkRrDrRVrFpk=
Subject key identifier: 12:65:6B:45:D2:04:E3:3A:61:A6:B5:08:A7:68:DF:2A:A0:E5:8F:02
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 0198D515E8A4EB40F862E03B2921AB65A447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: 3zyNzK0WNCzgRbtciDYzbRk6cQJQ1A3qklBiTVmMEQA=)
2: o4yUZzbKz_wfUkXyIRtz_sPdHfw.roa (hash: BiVeXsHTenn/poTYlXrG4Bvxv5uxzXwbjeteQc7yW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e8:a4:eb:40:f8:62:e0:3b:29:21:ab:65:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=12656b45d204e33a61a6b508a768df2aa0e58f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:9c:37:96:d9:56:52:7c:c1:4b:58:a0:37:
31:f2:f0:ad:fb:02:d8:1e:4e:f6:d0:2b:e3:7c:c8:
10:21:d4:fd:7e:e2:12:e9:46:5a:c1:16:27:c1:94:
a0:76:45:16:22:9a:24:93:72:73:5d:ae:61:19:38:
cb:13:25:7a:b9:fe:0a:5c:ea:de:41:97:85:f6:89:
33:10:c9:d1:3c:c0:f9:f6:ad:1d:73:ce:ea:2a:6e:
72:b5:92:a6:9f:c6:97:db:ca:27:96:7b:e4:08:66:
4f:04:83:8a:56:13:fe:c2:3f:ec:c9:51:43:e2:71:
c4:38:b6:4b:b4:b4:37:7e:ce:73:b0:71:43:df:11:
3f:d0:d2:5a:7b:64:86:9b:17:9c:b5:24:70:aa:3a:
39:af:35:41:85:51:38:83:7f:25:c5:d2:96:e0:5f:
85:21:94:92:a4:12:28:51:86:8f:07:88:58:46:28:
91:38:01:3f:bf:fe:e7:0c:3b:bb:f9:18:a8:12:4f:
28:9a:b2:33:95:b5:a7:a7:f0:02:40:47:35:8c:e0:
e1:7c:7b:bb:ea:30:13:57:f0:b7:71:ea:4e:9e:30:
6b:f7:59:83:ed:2d:e4:dd:41:95:65:8f:6a:1b:d5:
67:d9:32:52:db:14:bc:99:54:8f:c5:51:b1:9c:e0:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:6B:45:D2:04:E3:3A:61:A6:B5:08:A7:68:DF:2A:A0:E5:8F:02
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b3:c3:dd:8f:02:d4:70:1d:46:93:bf:b2:c2:7e:ef:15:b3:
6f:13:3e:b2:a5:b9:c0:44:b5:fa:89:21:a4:1a:4f:81:e4:ed:
68:c2:49:51:c4:59:f4:36:21:0f:56:68:85:4a:d1:38:c1:4a:
93:27:a3:d9:84:d8:c6:da:50:b4:3f:ea:f1:8e:85:a0:bc:34:
85:01:ff:1c:f8:1d:45:ff:a0:0e:fc:2f:0d:b9:89:2a:e3:0b:
79:84:9e:e5:e1:00:7f:eb:8c:d9:54:3b:6e:64:f0:39:32:0a:
f9:8c:07:53:f8:ee:b9:4a:74:35:2f:34:2d:dd:3c:80:41:d5:
63:a5:9b:eb:15:17:6f:e9:ee:d4:38:fe:bc:42:ab:17:ea:91:
90:14:32:97:21:21:d7:3b:6e:ca:a6:fe:62:a4:c4:c4:80:d6:
2f:a7:e8:c0:6a:11:b0:92:44:7c:b5:a0:e8:8e:40:7a:ce:60:
c2:83:88:a7:c6:38:5b:f4:53:8d:c8:07:2c:3f:a2:7b:5e:ed:
26:b6:1a:85:af:cf:9d:ec:15:7d:81:98:50:4d:83:3c:d6:eb:
14:a7:48:f4:58:d1:22:52:41:ae:74:32:8e:17:64:97:fb:cc:
0c:58:28:51:10:b1:19:53:57:d9:b2:1e:1c:aa:3c:1b:68:bf:
4d:6f:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client