Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: HV5Dx2N+i2gwqdnyFwd0HzFDB0w57zWq92yIZnP9JDo=
Subject key identifier: 57:C5:84:E0:96:7C:E5:EC:83:39:D8:87:82:F0:06:AE:A2:66:97:61
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0198D65FA1D73DEF9E351D05EF8D3E50DE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: uX79V7bRW+Q6ImSKMW40usjoQnBihrxAPVho+BUK/o0=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a1:d7:3d:ef:9e:35:1d:05:ef:8d:3e:50:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=57c584e0967ce5ec8339d88782f006aea2669761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:a0:89:d5:10:9c:db:f9:5e:46:2e:40:84:
6f:d8:12:cf:8e:1e:bf:5d:dd:9d:a6:2d:3b:e8:07:
3c:c5:4e:d4:2b:27:d1:17:02:12:96:4b:b4:ce:dd:
50:67:0f:a5:1d:59:78:fe:90:60:c9:d0:8b:ff:e5:
c8:c8:e7:21:a1:29:c4:18:9b:5b:5d:ef:f6:5d:c3:
fc:be:da:03:e2:c9:4f:11:16:bf:12:62:e0:9f:93:
47:3f:ae:95:de:ca:6d:dc:e2:55:d7:1a:be:eb:e5:
e8:5c:59:ba:a9:6b:33:54:84:90:84:8d:b8:7c:a2:
10:b9:89:b4:13:dc:3b:67:47:b0:8e:14:7c:0d:17:
c5:de:df:85:2c:5f:86:86:64:81:9e:a9:3f:90:24:
d6:8a:2c:e8:7d:95:08:4f:df:38:1a:76:50:b5:6b:
90:56:2a:0d:d4:13:04:b5:f3:0e:4a:91:d4:68:82:
21:ea:cb:a1:f3:c5:97:1f:36:89:17:d3:2b:7b:e3:
e3:a7:b9:93:42:40:e8:6b:1f:8b:13:da:04:af:15:
47:28:75:f4:5d:b4:1a:f5:bc:bb:e2:77:c5:17:3b:
f1:8c:92:10:68:de:ab:e5:39:e0:6e:dc:60:55:e1:
59:53:d1:6a:51:ee:cb:d7:02:d9:e2:8b:4d:61:4c:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:84:E0:96:7C:E5:EC:83:39:D8:87:82:F0:06:AE:A2:66:97:61
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c0:99:f1:a7:8b:87:41:83:c7:9f:4f:6f:fd:c0:a0:f0:e5:
99:3a:12:d4:e3:9b:b0:ef:80:49:86:99:c3:b2:dc:03:38:f4:
11:61:55:06:8d:c2:0a:8d:8e:5b:ee:e3:73:07:26:a0:09:31:
e7:e1:f9:10:67:7e:f2:3a:65:30:cc:41:6b:f7:da:a1:de:aa:
b5:35:f6:8d:18:cd:a2:11:e3:5d:41:4b:70:d6:17:32:06:68:
56:42:1d:d2:56:ad:19:69:bd:b1:43:ef:2e:db:5c:11:a9:7c:
b9:46:aa:73:0f:30:b3:e6:45:99:ac:3d:40:cf:6c:2a:4b:45:
c2:b3:66:6f:07:ef:e5:09:d1:7f:95:fc:93:09:88:d2:8e:b9:
75:42:5a:65:11:97:3c:87:61:32:88:d3:04:75:e2:88:22:e3:
ce:75:56:32:41:ca:18:b1:d5:6b:cb:00:3e:28:e6:fd:68:23:
77:5e:bf:55:50:16:1d:1e:53:a2:db:68:89:29:c1:3e:69:1a:
e3:2a:b4:27:b2:22:19:e9:63:15:99:a3:49:10:67:84:91:2e:
e6:2d:ae:68:a4:1b:79:e7:7a:60:55:a6:43:6e:d9:6a:89:6d:
e7:0f:e9:64:8d:f1:e8:18:44:e2:02:96:bd:31:3e:b8:aa:ac:
a4:45:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:00 2025 by rpki-client