Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: gnabCDOdCZdowD8MIqgI5AxFeiAFKsSAvR4JtRAhzHk=
Subject key identifier: B4:35:E6:62:6A:25:ED:39:D5:56:54:50:4B:20:B7:7E:AA:9D:6A:F9
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 0198D472CAFCAFE761588A39A12EB893B531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:29 +0000
Manifest this update: Sat 23 Aug 2025 01:02:29 +0000
Manifest next update: Sun 24 Aug 2025 01:02:29 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: ZpxALkKt2iRb4qnIcdCph6Je9F2RzqzDS7Rq9Z7CyFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ca:fc:af:e7:61:58:8a:39:a1:2e:b8:93:b5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Aug 23 01:02:29 2025 GMT
Not After : Aug 24 01:02:29 2025 GMT
Subject: CN=b435e6626a25ed39d55654504b20b77eaa9d6af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:c3:33:58:b7:2e:6a:0e:eb:23:42:99:e4:
38:9e:ea:11:78:30:c5:40:68:fa:f9:c5:e9:6f:60:
5a:6f:50:49:67:51:f3:f1:68:61:3f:6b:00:36:4b:
8b:1f:b4:b4:3e:24:3e:7c:9b:31:18:46:ac:73:0a:
48:aa:df:1f:82:d1:bc:85:07:6a:ec:aa:f0:fc:dc:
63:16:fb:98:12:3f:3a:c6:99:e0:b3:1f:d9:2c:dd:
7b:37:1c:42:e9:62:f3:d7:b8:f6:1b:9c:7f:4b:3d:
4c:ad:67:f8:0f:6b:a2:99:42:b2:0b:33:ae:7a:e3:
5f:f8:3a:c7:0d:83:53:77:dc:82:2f:c7:3a:7c:5f:
ef:d7:6f:a9:39:33:91:89:f8:b1:4e:b4:4f:27:fb:
9d:ed:19:75:7f:0d:58:92:5b:c8:a1:10:d6:5f:52:
bc:87:34:cc:54:56:86:2e:77:79:17:39:29:e3:30:
10:94:15:05:ae:a0:fe:e8:3e:ad:0e:a4:1f:cb:2c:
1c:e5:73:48:6d:11:93:ce:5b:09:8f:2a:2e:42:42:
3d:f5:b8:d3:e4:1b:08:92:7f:02:92:29:13:bf:8d:
f0:ed:59:31:e5:fe:5a:38:eb:cf:2a:b0:06:bc:60:
6a:52:65:2c:4d:a3:b4:d0:dc:30:90:f6:88:bb:a8:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:E6:62:6A:25:ED:39:D5:56:54:50:4B:20:B7:7E:AA:9D:6A:F9
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d0:09:b3:51:97:47:6a:76:80:53:a6:e0:58:92:95:26:55:
82:be:6a:35:cc:73:2f:8e:b4:3c:e8:a6:ba:2d:bf:f3:60:69:
af:9c:96:84:e6:f9:ed:92:88:6b:83:4d:03:c1:3d:24:cb:5f:
1b:63:6f:7c:99:bf:b0:66:ac:a3:22:4f:ad:64:08:4a:8a:4f:
22:c7:87:c3:ac:f8:26:43:22:29:6f:8b:6a:cf:0f:ea:50:b1:
d0:60:01:17:14:3d:ba:b8:46:fd:15:03:dc:7e:fb:7e:19:3a:
f4:35:dc:a6:fa:da:4f:38:74:59:db:ed:84:23:7f:d5:f9:f8:
79:8a:d9:38:20:8e:65:a4:4c:ec:d2:62:a1:54:30:34:53:d2:
f1:0d:3d:1e:fb:38:4d:0f:2d:75:d4:36:7c:99:d8:98:62:39:
1d:5a:4e:a2:fb:65:2a:c2:32:d6:e4:be:2f:52:4d:29:01:96:
be:54:fd:46:73:bb:19:55:4b:24:32:02:b6:a8:94:d5:bf:d3:
a5:7e:48:a6:fa:c8:c2:3f:af:cc:3d:f5:a0:45:e9:e7:c4:b0:
1e:3f:f6:44:1d:ba:e1:68:2f:c7:33:0f:83:2e:2d:90:34:8e:
f4:20:af:64:a8:d2:ca:da:ad:08:c0:80:4d:8c:5e:70:92:4c:
30:ca:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:18 2025 by rpki-client