Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: ELCFYZa+sX0pLnBySsb8XaFwPugYe1M/V42yZgJ6gNs=
Subject key identifier: 0E:B8:45:3C:83:E5:D1:22:BA:2E:FF:AD:10:72:86:AE:68:5F:F5:55
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 0198D515651A781C5C8847FE04BE8368EA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: HzZ/d8C0NQhNOh+b7STe6DRpwbWgk4WM6Ip1PvRxPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:1a:78:1c:5c:88:47:fe:04:be:83:68:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=0eb8453c83e5d122ba2effad107286ae685ff555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:be:66:01:3e:ca:c8:a8:ec:a8:36:8d:62:
f9:2a:4a:24:e6:55:35:06:6c:c4:76:5e:18:2e:85:
6f:6d:9d:9e:38:c8:e4:b3:a5:e5:f5:20:8d:a2:02:
ca:28:2c:a0:41:e0:91:06:f8:5e:1f:81:97:ff:6b:
e5:73:0c:58:82:44:71:ba:d8:4b:a0:f3:1f:15:03:
bd:bc:91:7e:06:a7:ac:70:10:94:93:a7:5e:ac:0d:
4f:64:bc:54:62:69:c7:41:ef:66:68:31:b7:73:47:
91:c1:64:a5:e8:43:cc:1d:db:2e:70:ee:50:55:e4:
3a:4b:39:2a:5d:9f:49:b6:c3:71:95:0e:b7:69:60:
8f:d2:6a:d2:3c:94:5a:2b:ae:2a:ef:ce:ca:c6:b8:
f0:ee:1c:a1:9b:67:bb:c8:16:3b:b7:f1:e7:66:fb:
76:57:ba:c7:f7:dd:7e:c6:fe:c7:27:4c:ca:61:67:
da:47:33:cb:2d:2f:60:e6:da:ff:5c:4a:11:af:a6:
3c:91:2a:59:36:97:ce:1c:49:44:a4:e8:f4:92:ed:
fd:f2:a5:12:ed:9d:7b:05:54:81:40:95:d6:8f:e1:
99:5a:ad:ae:c9:fb:6f:24:75:05:78:fc:e9:3c:fb:
42:06:f4:dd:d8:03:bd:02:78:4a:dc:6a:00:39:eb:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:45:3C:83:E5:D1:22:BA:2E:FF:AD:10:72:86:AE:68:5F:F5:55
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:17:bd:98:06:a8:8a:83:39:a2:4b:41:f5:88:a5:d1:d9:
c2:a1:87:14:fd:4b:5a:3f:43:83:cd:bf:fa:a8:f4:17:f4:0a:
01:81:0d:f1:c3:2c:a1:6e:0d:06:88:ae:da:01:6d:9a:19:13:
25:c0:85:78:99:0a:a6:99:47:62:a5:9f:29:44:4b:96:5a:d8:
a0:b9:0b:ab:89:43:ea:3c:91:83:b3:5b:67:55:82:95:67:a4:
1c:43:66:02:7b:0a:41:76:24:28:3e:b4:b2:c5:2f:b4:d9:64:
2d:12:48:91:97:df:9e:ec:c3:a2:32:47:79:1e:32:97:be:31:
c3:e3:ea:8d:86:e4:f3:b7:6d:b3:e3:23:4a:a8:94:75:77:72:
91:0e:82:32:66:dc:ec:29:4e:a4:77:ec:83:20:7b:84:70:c5:
b6:5f:f5:b5:a8:06:f8:2d:fd:4c:6c:83:19:a7:55:22:d3:2d:
52:b8:1f:d1:e7:3b:95:4e:3b:41:87:a6:27:14:ef:a8:18:43:
c4:f5:a4:78:b4:8a:27:1b:f8:3e:9f:4e:28:60:3a:ba:fc:a0:
be:e8:bd:6a:d9:c0:bd:2f:2e:11:cf:8f:4c:76:fc:d9:d3:b1:
29:c6:cb:bb:e5:e4:70:ac:2a:a9:88:7c:4a:f1:e3:7a:88:a4:
47:2f:22:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:34 2025 by rpki-client