Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: pQ55PT1orfPLl3by54rKZMLJkwmqm7ks0facoSDHj6U=
Subject key identifier: A2:D4:E7:D8:E1:5F:D0:35:87:11:01:2F:6D:6C:FC:54:B0:43:94:20
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 0198D660D83400850B5CEB92A9FBCF46B640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 0B3E
Signing time: Sat 23 Aug 2025 10:02:07 +0000
Manifest this update: Sat 23 Aug 2025 10:02:07 +0000
Manifest next update: Sun 24 Aug 2025 10:02:07 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: WgjtukdlVfPscTzUEsdEkwC6gkyn5rDOQwduynU7l3s=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d8:34:00:85:0b:5c:eb:92:a9:fb:cf:46:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Aug 23 10:02:07 2025 GMT
Not After : Aug 24 10:02:07 2025 GMT
Subject: CN=a2d4e7d8e15fd0358711012f6d6cfc54b0439420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:a4:4f:42:62:0d:67:ed:4c:f6:fa:6a:4c:
bd:f7:1a:83:03:ac:92:75:22:4a:80:09:53:97:e7:
18:2c:9c:0e:25:08:4c:57:df:7a:58:8d:d9:5a:a3:
c5:3a:20:a0:4e:09:36:77:e2:ba:c4:eb:1d:10:94:
86:a9:00:10:ca:b0:d3:12:0b:c8:96:4c:e4:1b:a2:
e8:59:d0:48:af:9b:c9:2c:de:50:20:8d:d4:29:aa:
c8:98:94:5e:5b:51:97:8d:16:f0:24:49:12:21:64:
87:d7:5a:42:d0:58:f7:97:2d:b3:f7:75:33:14:65:
8a:fc:10:32:2c:db:0f:4e:b9:b9:9d:e4:e4:4b:b1:
11:99:51:9b:6c:e3:5b:88:d6:8a:37:f9:0c:f7:17:
0b:f6:19:06:dd:c9:1c:9b:0f:69:bb:b8:e1:69:e0:
3b:e9:8b:da:9d:a4:0b:c8:19:c7:72:f0:29:68:23:
58:12:db:df:a3:f1:42:05:bb:76:d5:ac:1b:7b:e8:
bc:88:cc:82:31:29:f3:b5:65:ee:82:13:f3:76:a8:
2d:10:ff:2d:00:84:b3:3f:e4:8d:d3:5f:f1:60:1f:
5f:32:8f:67:94:d4:a8:31:fa:9d:74:ba:8e:dc:3d:
b2:94:63:d9:80:71:04:e3:dd:64:d5:1c:31:13:13:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:E7:D8:E1:5F:D0:35:87:11:01:2F:6D:6C:FC:54:B0:43:94:20
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:15:50:86:ab:5a:92:6d:ae:2e:a2:0e:d3:12:ab:c3:61:67:
c4:77:ed:f0:d6:07:4e:6d:1f:37:61:90:43:56:37:fa:95:cd:
07:5e:df:c5:b8:7e:7d:54:38:8b:50:68:01:7b:bf:6d:95:3e:
4a:26:cf:08:84:42:82:d1:8b:9e:30:8a:62:ba:d5:ee:58:e7:
41:b7:55:33:4c:79:a8:ce:40:b4:bf:a2:18:05:82:4b:63:0f:
0a:52:43:16:d5:05:60:98:d1:3e:8d:ce:05:41:79:78:3a:b7:
74:aa:5d:bd:1c:89:b6:c8:20:f7:fe:cf:46:e7:35:db:83:92:
a3:85:35:c1:55:b8:c6:16:81:95:63:fd:88:2c:93:fa:91:91:
99:31:80:61:cb:80:67:6e:13:78:34:c5:ef:17:61:40:85:b8:
a2:2d:8d:f2:10:9f:1a:be:64:3b:72:39:93:6a:01:cc:5e:e4:
64:ef:c1:f3:91:1a:3d:51:55:5c:1c:22:20:b4:e7:72:68:87:
42:c0:fe:1c:d5:34:94:8a:74:86:86:5c:69:42:c8:ed:16:da:
86:df:2f:65:dd:27:db:a8:be:20:38:ad:10:d8:dd:ca:d3:ee:
86:86:30:d5:19:97:83:56:77:16:04:f2:7d:f2:56:ec:cb:a2:
ea:f4:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:08:42 2025 by rpki-client