Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
File: GawUmIYOK7CVgXOFS9BMhpo2kBc.mft (raw, json)
Hash identifier: 8X5Dw062LRj/KJPhj7W6LJ2rxzXSeRJl8tfkJYptklY=
Subject key identifier: EF:D0:00:8A:CB:11:60:BC:F9:7F:46:FB:66:36:B2:2A:87:1C:84:DC
Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017
Certificate serial: 0198D4E0D1FA9BB27975C4B84583E0FBA340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: GawUmIYOK7CVgXOFS9BMhpo2kBc.crl (hash: 1kq50lpDFD24wUWvak7+Lsuetky6yiVCWBpA1lHgrJY=)
2: GujVnYJoAkzfCvxrFRrdm3vJm2A.roa (hash: M0aXCNhnx8CphMMO7CXVpEcNI+LOkAqIy/QV9QRD+Yc=)
3: cPOk9XaYMPnXv3i4A_ZWhKLa-c0.roa (hash: DgpoUG8V1y8nR1k4pl9K8GHgZay1hvO5tnK0jFOLUl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d1:fa:9b:b2:79:75:c4:b8:45:83:e0:fb:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=efd0008acb1160bcf97f46fb6636b22a871c84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:0f:14:87:a9:b9:b8:6a:89:da:97:cf:13:
79:4d:99:65:b2:00:eb:0f:08:8a:56:04:6b:81:14:
8e:84:82:15:4f:88:87:f5:6e:18:08:60:7e:24:5f:
2e:a0:41:1e:b9:0e:3c:4d:74:67:08:1d:79:d1:b4:
c5:30:dd:c4:94:dd:11:6f:fe:c8:ca:6c:2d:18:1b:
f7:46:96:61:fa:11:42:f6:8e:b6:34:2b:44:e1:18:
f7:47:3f:fe:5e:cd:6e:42:68:5a:74:67:02:43:e0:
96:b1:2a:ac:cd:2e:8e:31:fc:74:0e:fc:b0:2e:4c:
3a:87:d3:94:f4:db:af:fc:5c:56:ac:12:89:c0:a9:
2b:42:73:d4:23:12:46:7e:26:f0:1e:a4:1f:1c:8c:
e6:c3:af:6d:1e:30:a0:2b:25:63:cf:53:5f:d9:a8:
5c:fa:71:81:95:6c:5a:d4:2e:89:50:3a:89:91:66:
2e:57:33:8c:26:5e:cc:87:ba:db:79:8d:fa:aa:7c:
13:f6:44:23:24:ed:e2:28:2a:a1:2b:cd:1c:8a:c1:
a7:22:52:b8:fd:e4:58:b3:65:8e:69:22:c9:49:95:
e6:18:45:4e:0e:89:3f:a1:25:c0:56:45:74:f7:b6:
28:20:b4:83:cf:5f:49:0c:1c:f0:eb:fb:3d:3e:83:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:00:8A:CB:11:60:BC:F9:7F:46:FB:66:36:B2:2A:87:1C:84:DC
X509v3 Authority Key Identifier:
keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ee:56:72:bc:e6:9c:e6:7c:4d:12:02:fb:ab:be:79:2f:84:
30:72:5e:0f:a5:ac:a8:a8:c6:27:60:b2:11:7f:69:e5:37:9f:
8a:58:28:de:32:d0:e0:74:23:91:96:4a:8c:15:88:1f:bc:32:
06:45:0f:6b:e1:1a:ce:c5:ee:7a:e5:70:62:7b:ef:a5:a7:08:
18:6c:47:48:62:aa:d8:94:f8:7f:be:12:f4:25:84:f0:36:d5:
43:22:d8:59:72:59:6c:5e:2c:a8:19:bd:16:d0:c4:1b:b0:1b:
96:2e:bf:a4:fc:f3:63:be:96:32:75:5b:41:fc:e2:43:5f:70:
23:44:c7:0f:ac:94:a0:b6:1d:38:ba:fe:1e:2a:4e:b7:26:f7:
b0:4c:f7:e6:3e:0f:bf:5d:a6:25:29:ea:88:be:7c:1a:3a:86:
36:6a:2f:ec:57:1f:de:38:16:48:88:f7:2f:c8:67:67:d6:e4:
54:c6:c3:af:66:15:a1:be:e1:7d:87:79:23:8b:ec:6d:58:04:
e0:9e:8a:e3:78:02:82:07:72:01:26:14:94:0d:d3:81:f9:e9:
87:b8:8c:c3:15:e7:0f:0b:ce:d5:dd:52:76:16:06:3c:3f:99:
57:20:4d:10:a1:58:86:38:c2:05:e2:c9:5f:7e:6a:89:ca:d7:
bf:a8:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:04 2025 by rpki-client