Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: qzoinGmDq8c0DiAKvtjhdwqV/YSJfarxvAVpytg19WE=
Subject key identifier: FA:C4:05:B9:5C:EA:23:8C:09:55:10:EF:EC:F2:1A:2A:4B:14:95:BC
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 0198D660A4E3D320ED9E75FBEB5D0505B980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 10:01:54 +0000
Manifest this update: Sat 23 Aug 2025 10:01:54 +0000
Manifest next update: Sun 24 Aug 2025 10:01:54 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: h6j17XrcXNOcZriez8xVvNgckwGUiw4Khb2BmbCperM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a4:e3:d3:20:ed:9e:75:fb:eb:5d:05:05:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Aug 23 10:01:54 2025 GMT
Not After : Aug 24 10:01:54 2025 GMT
Subject: CN=fac405b95cea238c095510efecf21a2a4b1495bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:03:c3:55:6e:43:10:f8:b2:5e:b9:70:40:
85:f7:99:d7:f4:52:88:34:f8:b1:68:57:63:65:4c:
95:65:28:cd:10:7a:98:fc:89:a0:10:49:0c:9c:7a:
4f:70:a7:e4:77:8e:ab:af:62:fb:3a:1e:e7:81:17:
03:55:3c:32:5c:1a:e0:6b:39:61:fa:b5:3f:1c:c6:
5e:b8:c5:2b:25:6e:4a:c5:56:c2:56:29:87:0a:b9:
25:4c:7b:6e:59:ea:26:63:bb:9b:08:e7:13:9a:cc:
1a:2d:f6:0f:a7:46:cc:55:d6:17:fb:b0:7e:b4:ca:
d2:d3:ee:cd:ea:b5:55:46:72:da:fe:4a:51:6b:c9:
46:90:cb:53:cf:2f:bc:14:31:20:bf:fb:85:b7:43:
d5:71:b5:da:dd:f7:aa:f8:54:e0:c6:ae:01:6e:7e:
87:f7:93:be:dd:47:40:52:d4:6b:13:0e:f0:38:fe:
42:33:a2:f7:a3:f1:8b:18:33:57:50:bb:4f:e2:48:
d2:8d:f5:e1:e3:d7:69:88:e3:a5:10:f2:62:72:1d:
01:3b:97:ef:53:ab:85:b5:a2:05:92:a4:8f:bd:5f:
c9:10:4d:c1:a7:ef:b9:49:1e:9d:24:58:b9:39:01:
36:b3:aa:f6:11:dd:59:b4:aa:7a:e3:90:16:86:61:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:05:B9:5C:EA:23:8C:09:55:10:EF:EC:F2:1A:2A:4B:14:95:BC
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:e2:e7:2e:55:3e:24:4f:84:a4:71:1b:f1:37:59:4d:53:
42:2b:72:12:70:bd:af:67:ce:9d:a2:6e:9c:56:06:1e:88:a7:
b2:bf:08:9f:2f:d7:ef:f9:99:af:1c:ee:64:90:f8:c4:53:9a:
43:0c:03:1f:2e:19:c4:d9:59:51:c1:f5:76:79:ab:56:ec:b5:
a9:d0:03:25:ca:33:14:31:69:78:86:5d:cd:77:7f:dc:3f:3c:
65:51:47:37:88:80:62:a8:ee:b0:77:c9:5e:24:52:7a:e8:5d:
62:32:85:6d:2f:e1:23:47:2a:70:04:f1:84:76:ac:4b:48:f2:
d9:89:03:4c:93:a2:58:07:3e:71:2b:24:71:61:52:f1:18:b3:
60:60:37:74:22:0a:1e:05:46:1f:33:34:ef:a2:8e:d1:83:dd:
61:b6:24:39:07:0b:ec:08:01:34:81:ee:08:28:2d:6a:99:ad:
de:f1:92:92:f2:03:cf:fe:cf:da:2a:52:8e:7a:e2:44:fd:03:
5a:4d:59:c9:fb:b1:35:75:a9:83:4f:4f:8f:c7:dc:ca:1f:a7:
29:dc:12:df:96:0b:28:90:0f:6a:88:99:96:91:ff:41:07:d8:
ca:d3:5b:11:0e:7b:f4:9c:77:70:f1:8d:09:f7:59:42:51:76:
59:38:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:04 2025 by rpki-client