Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: jWB2Gb07HjBD0rRIMm5Jvq9STX3L43syk7eS+y5SI3A=
Subject key identifier: C7:65:C2:F7:62:FE:F8:4E:41:79:A3:2B:5B:DD:E3:13:44:6D:1E:21
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0198D474A6686B32E99F1849A1158606B302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 1468
Signing time: Sat 23 Aug 2025 01:04:31 +0000
Manifest this update: Sat 23 Aug 2025 01:04:31 +0000
Manifest next update: Sun 24 Aug 2025 01:04:31 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: T0wV+0XCh17kpJeUAvdLu0gxdZzUlz1cj2Yfks2pYBc=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:a6:68:6b:32:e9:9f:18:49:a1:15:86:06:b3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Aug 23 01:04:31 2025 GMT
Not After : Aug 24 01:04:31 2025 GMT
Subject: CN=c765c2f762fef84e4179a32b5bdde313446d1e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:67:27:30:1c:1b:d1:29:d4:4b:36:25:e4:
b9:51:db:4f:38:05:99:e5:b7:8b:52:96:ed:c0:12:
7b:50:33:35:84:f1:92:6f:e7:60:c9:98:78:31:29:
e8:67:20:c8:2f:82:21:45:0d:71:ae:a1:4a:7b:5a:
4f:c8:cf:ae:ca:3c:f7:5a:29:ca:40:93:c3:74:0a:
c6:66:ad:d5:e8:a2:a9:6e:57:09:eb:0e:26:c6:01:
45:d1:44:db:ea:c4:b5:55:54:13:11:90:03:c8:04:
29:14:20:29:24:d5:f6:fc:79:8e:bd:f4:7f:9b:d3:
05:11:cf:7e:59:6c:ac:88:ab:8f:cb:9a:7c:15:b6:
3f:7e:f0:94:62:27:36:6c:41:c4:29:2f:26:e1:62:
eb:13:ef:e8:62:a8:25:e3:33:cf:48:48:ce:55:60:
77:19:a6:8d:e8:37:bd:fb:42:87:5a:04:56:43:58:
57:39:63:5b:93:fe:5f:66:6d:2b:c3:5d:2a:67:fb:
56:78:16:8a:24:a7:71:ee:97:5f:c5:ce:25:eb:83:
b7:06:5f:b6:02:c9:a3:e5:ac:30:0e:1d:d1:04:55:
8e:2b:a8:8e:df:bb:d2:41:04:a7:bc:f0:9a:3c:ac:
b1:06:aa:03:c6:fb:5a:b9:a3:b7:96:ef:e1:a4:2f:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:C2:F7:62:FE:F8:4E:41:79:A3:2B:5B:DD:E3:13:44:6D:1E:21
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:98:06:fb:f6:86:b7:af:78:77:99:fb:bb:3f:2a:a9:ea:
14:0e:9d:ce:12:ce:cc:34:59:0a:26:fe:4e:48:e2:2b:96:24:
52:bf:49:63:ac:76:8d:53:7f:4a:a6:f9:ed:ff:44:1a:55:33:
7e:f3:80:4d:6a:6b:cd:ca:f8:41:a4:f4:10:61:f4:65:19:7b:
0e:8a:ef:9c:ea:f4:44:c4:ff:18:9e:6e:75:df:b9:d0:db:27:
c7:45:22:a6:1f:7f:ae:b1:8b:fc:dd:a8:fa:02:3e:21:84:72:
f2:37:6b:8c:f9:29:b9:84:d7:81:17:75:4f:92:c4:4d:5a:a8:
2d:a1:26:07:19:ae:3f:ce:ce:9e:76:be:f1:f8:db:d1:e6:47:
6a:8a:c6:94:96:6d:97:97:5d:a0:82:2a:c9:57:29:f1:f2:9c:
f9:3a:cb:de:e8:69:3d:3b:56:02:25:61:f2:ce:50:66:38:7e:
39:58:27:82:e3:53:37:f3:4d:ca:d0:f9:c4:24:a0:d2:f6:7a:
c5:d6:c8:c2:da:e8:cc:3a:74:f1:27:e2:8c:68:cb:55:6a:46:
43:97:ab:8e:32:65:44:3d:8f:b9:b4:0d:f4:f1:a7:45:6b:ac:
1a:e9:62:28:14:4b:96:85:79:61:c7:41:2e:b7:a4:b9:1e:cd:
8e:51:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:15 2025 by rpki-client