Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: slZVsPF9SOenH/2SFKty/scllDW3aQoCDfAsskjezeo=
Subject key identifier: 2D:A8:70:19:F2:17:C2:1C:97:AB:B9:AF:98:07:3D:7B:08:E1:DF:20
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 0198D472705602DD96490740C1ACFD0697DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: WXjnHqgtDT1OoCrmdxVW0Qx/X7A9lX3qL3oeXhYw7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:70:56:02:dd:96:49:07:40:c1:ac:fd:06:97:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=2da87019f217c21c97abb9af98073d7b08e1df20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:bf:2c:73:4e:3e:a2:9b:27:f7:af:2d:0f:
ca:54:3e:bc:e8:7b:76:db:65:0f:4d:d7:54:b1:6d:
2b:b1:d8:79:85:d3:f0:cf:c1:dc:49:58:a3:9b:13:
9d:25:a5:11:88:43:ec:bb:15:53:1f:b7:b2:a4:45:
e2:31:50:b7:08:8d:e6:6e:28:f7:48:6e:c2:95:08:
73:84:c6:4f:b9:1e:51:b1:1b:95:d8:e8:a3:fc:d3:
a6:e9:79:7f:c7:22:7e:31:5a:1f:1c:91:11:cd:8b:
26:34:77:73:58:42:db:73:cc:fa:54:b6:ca:70:db:
41:d6:fb:fb:2b:81:fa:d5:92:38:b4:45:aa:99:1d:
dd:f3:d1:0e:69:ce:da:47:03:05:96:b0:69:1e:71:
7d:82:ea:9b:9d:54:ef:6b:69:84:13:dd:c2:ed:09:
4b:90:e1:c2:4a:51:bf:e4:b2:d7:32:01:8b:13:77:
0a:78:c5:35:3e:35:22:39:39:f7:c4:9b:5f:65:28:
16:f7:61:98:88:35:37:c0:c9:35:84:2d:4e:12:bc:
56:a2:3d:38:9a:68:cd:84:2f:83:06:c6:c5:e5:02:
bd:7e:8c:3a:38:44:7f:99:f5:83:95:c0:e8:e8:74:
a3:29:49:c4:9e:f6:04:b5:27:a1:f5:5a:00:e5:20:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:70:19:F2:17:C2:1C:97:AB:B9:AF:98:07:3D:7B:08:E1:DF:20
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:37:ea:d7:7e:52:03:42:1f:8d:e1:ce:f6:08:a7:4f:a6:3a:
da:5b:f0:ec:74:ed:c2:d1:19:01:95:ea:ca:18:95:be:87:27:
13:d6:b7:c6:2f:e5:5d:31:2e:0a:00:69:4d:6c:e4:02:ed:26:
b5:71:5b:b7:ef:f9:e8:91:76:6a:86:a7:be:f0:27:29:76:0e:
26:80:bb:3f:f2:b4:05:01:a7:6c:d3:aa:09:9c:48:98:d5:1b:
9c:53:b2:bf:ac:29:49:63:47:de:06:96:de:6a:40:f4:be:e4:
37:6e:9a:a4:43:ec:b5:51:5e:f0:b4:f6:ad:8d:37:10:2e:7b:
c8:f6:0e:e3:33:b2:eb:b5:83:c5:df:53:cc:94:28:ae:f9:28:
0e:ad:fd:b7:d6:05:3e:0d:c8:c1:24:81:52:f3:dd:b4:52:c5:
e9:57:e4:44:11:ad:d1:10:e8:a9:a2:cc:06:66:b4:ff:3f:12:
71:40:f9:82:24:68:b3:e3:e5:fa:53:03:b6:82:ea:d5:62:23:
08:70:ed:db:ce:3b:c1:06:ab:e1:7a:ad:67:2a:54:2e:cd:1f:
1c:a0:32:29:61:a8:1d:bf:db:7d:6e:df:16:10:5b:e4:44:c1:
a6:d5:97:4d:5e:84:43:23:cf:b7:24:01:67:bb:8b:54:50:c4:
3c:8c:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:53 2025 by rpki-client