Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier: QTINBciTf7V5zke/srakfEX5rP+hvFTiWkWm1FwmyvA=
Subject key identifier: DF:83:23:ED:A8:0B:BA:E2:86:CD:D2:78:D2:42:D9:92:36:80:8E:E1
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 0197B63272C5119569168C7832571D709DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number: 0939
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: n3HBQ+Q2DUh1F60sMF7YWeYMHjmkFJWOz3D2FUpQ5fo=)
2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:72:c5:11:95:69:16:8c:78:32:57:1d:70:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=df8323eda80bbae286cdd278d242d99236808ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:dc:8a:ea:ec:b3:8e:9a:ce:74:c9:5c:00:
31:9a:f0:ca:ae:a2:d7:50:5b:2d:c0:39:0a:2f:a3:
a5:96:29:0b:b7:be:5f:e9:5b:42:c4:9e:7c:f1:28:
d6:2b:cd:42:90:dc:12:04:ff:0c:b5:73:6b:b1:b3:
07:45:2c:b9:2c:c4:de:c9:98:b7:2f:a0:f4:d4:b5:
cc:b9:f5:51:d3:9f:c8:c3:96:a1:a9:bf:d2:19:d2:
94:83:bb:b2:96:77:8d:b0:02:08:25:7e:a5:55:4d:
a1:13:a4:65:f3:34:fd:4e:5f:7f:3a:3a:6e:cc:24:
1d:b0:6f:47:36:1f:1b:e7:85:b2:a4:39:22:80:af:
0e:4b:0e:5c:86:0b:05:91:b3:3f:32:df:9b:8e:7e:
d3:b0:96:c3:3a:6f:9e:4a:c5:97:1a:31:6d:7a:75:
97:f1:4d:92:ea:9f:09:6b:04:f6:96:32:fb:9a:7f:
28:e3:3e:58:c5:6d:bf:b6:6f:64:95:bd:3b:d9:b0:
1a:80:5d:60:7e:54:76:21:be:d6:62:a0:60:fc:dd:
8a:00:00:a4:29:8a:7e:2c:e0:71:67:29:90:1c:e2:
6c:d0:2e:66:fc:31:77:da:e0:f4:04:ad:7b:2f:93:
a9:9e:99:08:82:8d:72:45:c2:46:5a:df:b3:d3:a1:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:83:23:ED:A8:0B:BA:E2:86:CD:D2:78:D2:42:D9:92:36:80:8E:E1
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:76:0f:1a:78:ec:a6:44:c2:a2:a1:33:a1:7a:39:f2:bc:c1:
5e:73:a3:62:84:3f:78:d0:d3:d0:e3:a7:30:6b:6d:b9:ea:d2:
fc:59:80:c1:bd:28:09:99:87:fe:a2:5a:9f:27:73:65:f1:cd:
cf:ed:3c:ef:a4:6c:c9:6a:04:10:43:2e:bf:5e:43:3c:1b:04:
30:ae:1d:86:38:51:51:42:2f:8f:e9:f1:67:f0:0d:39:66:2c:
7f:5b:01:e4:59:bd:ed:56:b1:db:58:21:9a:1c:b2:58:40:20:
83:2c:76:eb:2e:2b:13:d3:21:7d:54:3f:8c:67:9c:9a:24:3a:
74:e4:0f:85:98:b4:3e:43:b5:7e:78:32:5b:72:01:6a:2f:e5:
d3:69:6d:3d:81:07:94:50:8a:3f:95:38:32:78:65:3e:88:ab:
59:a7:11:4e:f6:bf:c8:39:3a:6c:be:02:06:67:4f:ba:62:a4:
a3:e1:18:58:fe:63:2f:a1:6e:00:9b:f4:09:13:28:4c:74:37:
37:fa:e1:fc:40:e3:b7:ad:4a:8d:da:ec:e4:b1:f9:06:b3:00:
86:0e:92:3f:72:44:e8:40:66:3f:77:61:c7:3f:59:75:f3:72:
3f:da:d3:8a:52:d3:09:e6:6b:17:dd:08:80:b3:f9:a2:f9:60:
22:f4:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:52 2025 by rpki-client