Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
File: GdZfozzls_e9tJfl_KUJ1_wDxpM.mft (raw, json)
Hash identifier: bQJTdzkYZajJeDTXeWUMi9IXVoAoUfrkgzI2CbnHrt8=
Subject key identifier: B5:F3:F4:C2:46:E8:3E:DC:40:26:8F:36:4B:6F:24:F2:20:78:BB:5B
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Certificate issuer: /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial: 0198D660C80FF0EFEC9CACAEAD69BD8655FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: GdZfozzls_e9tJfl_KUJ1_wDxpM.crl (hash: EV68J3+TSNj6qds+J4f3Rfb9Fmh73LqUzqBL9CFKOWk=)
2: HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (hash: TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c8:0f:f0:ef:ec:9c:ac:ae:ad:69:bd:86:55:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=b5f3f4c246e83edc40268f364b6f24f22078bb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:5f:fa:33:f1:cf:8e:2c:fc:8c:5f:5c:ef:
c9:97:73:a0:50:07:14:09:89:dc:32:9c:08:e8:92:
35:a4:6c:69:d4:c3:c4:cf:4b:4a:62:6a:5e:78:f5:
4c:08:3f:c5:09:de:8e:1b:39:31:2e:37:37:50:d3:
34:2b:58:b2:63:0f:ce:72:7e:c7:a7:1b:d0:b3:90:
ac:01:af:5a:33:c1:fc:b3:db:6b:36:6f:68:79:50:
b9:25:fc:a8:82:3e:51:ce:ed:78:34:fd:69:0d:2a:
6c:aa:b6:29:52:d2:de:7a:0d:fa:10:9d:ad:f1:da:
ed:eb:1f:5c:c7:d8:11:80:3c:82:19:69:43:3b:c2:
77:ed:12:92:bf:51:62:af:9c:70:5d:29:77:e0:e2:
97:73:7c:f2:b1:b0:39:d4:b8:d1:b7:c4:a2:42:f3:
27:9b:85:af:2f:a0:f3:5d:59:f5:be:62:83:c6:9a:
ae:f2:e8:3f:ca:7c:c8:75:34:d5:00:1e:8a:93:b3:
43:1d:c9:28:b4:5c:af:e5:88:1b:20:71:9b:34:f6:
84:fc:ff:f1:5d:4f:a6:3d:1d:87:25:31:e5:4b:10:
89:7b:7a:1b:dd:e1:82:42:49:8b:7b:34:2b:bd:a2:
2f:46:f0:7f:7d:12:64:09:c9:02:35:29:84:37:92:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:F4:C2:46:E8:3E:DC:40:26:8F:36:4B:6F:24:F2:20:78:BB:5B
X509v3 Authority Key Identifier:
keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:9e:c9:8e:08:af:5c:fc:cd:cd:0a:d5:32:aa:67:c0:c2:
12:0d:ec:47:bd:c8:9b:b7:54:28:04:bf:9b:0f:7e:81:37:d7:
3f:1e:69:b4:7a:b0:4c:98:8b:8a:d5:b7:41:27:4b:1b:d7:2b:
24:57:5c:25:ee:55:19:49:9c:49:f8:fb:95:8f:82:73:2e:71:
6e:80:bc:d8:c7:01:ff:e7:34:3c:bd:29:66:e1:eb:4c:7c:c8:
36:c0:43:16:e0:3c:76:61:c8:6c:25:38:bf:d6:c6:a7:6c:03:
5f:e3:d2:70:7b:89:f1:c5:da:aa:a3:ad:1e:9c:be:1e:ae:db:
2f:3e:3e:2a:27:c6:ca:81:5c:81:5d:2d:b9:86:b0:97:6d:70:
1e:42:a5:21:8d:54:9d:b8:d2:8b:cc:04:91:d7:30:4c:db:49:
1c:ea:98:81:9d:cb:3f:52:db:d6:ad:41:2d:49:eb:e0:c3:ff:
ce:dd:45:9a:3d:ef:32:74:d9:90:7d:52:c7:27:c2:50:fe:16:
7e:85:87:ee:6c:51:cd:d2:72:ca:01:68:b3:95:34:cf:c5:d4:
3b:e6:cb:63:ff:75:ce:fd:15:4c:01:27:37:cd:e3:05:97:c3:
5f:6c:d3:d1:e5:17:2a:4f:73:14:3b:b4:f5:7d:7b:fd:0a:53:
aa:35:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:54 2025 by rpki-client