Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: Uaq6OO+ZmbqCKFvSHSkbG3giMp2+z3/AdAw6dLywq5g=
Subject key identifier: CF:D3:1F:E5:10:14:3A:99:3E:30:C3:D3:87:8F:79:80:AA:93:EA:8D
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 0198D4742A64E8743644290A2B35CD138FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 053D
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: WZZzQuX8mfQ2OTiXM1Z4+LkUYUGgas16BrDfI9Iz0ko=)
2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2a:64:e8:74:36:44:29:0a:2b:35:cd:13:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=cfd31fe510143a993e30c3d3878f7980aa93ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:27:43:ff:a2:f6:e6:ed:4f:3c:c9:37:d6:
f4:36:91:3e:2e:8e:6b:6e:39:7e:f9:82:a3:b0:9f:
fb:63:3a:9d:ed:c4:da:44:e2:f6:72:08:7c:1e:3e:
1b:4e:40:59:0d:62:24:05:68:0e:89:07:68:9d:bb:
55:ba:47:e8:f7:5b:ef:b0:46:49:99:e7:18:9a:08:
eb:d8:1b:1c:ae:43:19:07:83:c4:54:88:b5:b3:80:
8a:40:92:39:78:30:96:0f:36:39:38:1d:b2:81:51:
f6:57:f4:d4:78:c5:bf:2b:fd:5e:7f:42:b0:71:55:
70:ab:b1:52:41:85:55:7d:72:bf:56:75:1e:0b:45:
a9:2e:64:65:7f:ac:c3:bf:29:d5:8d:e3:49:c1:e1:
fc:08:05:92:a9:95:0b:61:c4:26:e9:79:42:40:03:
94:ce:65:1a:fa:e4:12:37:a5:2d:33:14:f7:15:f8:
a6:ea:d3:3c:a3:22:41:04:bd:14:9c:46:ce:af:56:
85:f1:95:df:3d:a2:e3:c0:07:28:89:c8:fb:75:a4:
fd:89:86:4e:55:71:e7:6a:78:b2:8f:32:18:ed:35:
04:79:e8:0f:42:e5:b1:96:14:0a:ce:1c:05:8e:30:
5f:5b:ad:c1:e0:34:5a:3d:13:7e:1e:b7:ae:fd:ac:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:1F:E5:10:14:3A:99:3E:30:C3:D3:87:8F:79:80:AA:93:EA:8D
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:17:7c:7a:46:33:ab:7c:3b:02:4b:57:a5:fc:08:0b:0f:c5:
a9:37:0d:1c:66:d7:64:31:74:88:8f:4e:b7:c7:62:03:4e:58:
f0:a5:54:04:21:66:56:a4:c4:0b:9a:04:fc:e5:ad:8e:43:a0:
68:83:db:21:fc:62:7a:b7:0a:c8:3f:e5:9c:8f:cf:f5:68:79:
28:73:98:c3:eb:d5:37:fe:40:eb:cb:46:91:39:e4:43:35:2b:
6d:2a:d5:71:bb:00:66:60:f3:81:3d:e0:ea:04:f0:10:30:c1:
ad:62:51:a1:c2:11:18:2c:b2:2d:f3:cd:bf:88:62:dc:27:4c:
03:60:ed:9d:94:89:60:86:d8:f7:67:5a:17:ef:e8:b5:1d:e0:
32:45:0f:b1:86:3a:33:61:72:d0:91:11:6c:7f:50:d7:05:2e:
4b:da:6e:05:e1:12:9e:d7:68:09:a3:67:c2:00:96:1a:a1:69:
9e:c5:14:a3:01:0c:ef:0a:0b:ae:16:3e:fb:c7:aa:40:11:c9:
84:8f:51:57:b5:e9:df:b7:fb:3c:d8:15:80:6d:a1:bf:c7:f7:
c3:73:5f:26:49:c8:67:e6:93:46:09:24:f3:8c:8a:72:05:27:
d6:af:f1:ba:c0:ee:97:4b:6d:67:dd:35:d1:6a:05:37:fb:2c:
a3:3f:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:12 2025 by rpki-client