
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
File: GFjKpoMqoqPnzG0URRX49DG2Z2I.mft (raw, json)
Hash identifier: DOVWpJFyjWBiwLXLIg1KhhoX4QLapCzDZvKUF02UIAE=
Subject key identifier: B5:2E:A1:86:47:1A:2C:0A:DE:8C:35:5E:77:68:3C:D7:E0:CE:56:A0
Authority key identifier: 18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
Certificate issuer: /CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Certificate serial: 0198D698254BFD6676CD9446040F4A33BCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: 8s2ldX9oHHwyl8fUEVLqhDsQqu4.roa (hash: 8RTmSwJoya32i12kM5MRjAc5F89+JLBUKY/2kNp2yVc=)
2: GFjKpoMqoqPnzG0URRX49DG2Z2I.crl (hash: AkqyNYV4rRCr6y7J62zJnPKnxx9wjkBHYn0cbymLteM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:25:4b:fd:66:76:cd:94:46:04:0f:4a:33:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1858caa6832aa2a3e7cc6d144515f8f431b66762
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=b52ea186471a2c0ade8c355e77683cd7e0ce56a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:b7:99:64:88:26:bc:7d:8e:bb:98:37:23:
3a:f2:b0:ea:1f:48:0c:b9:df:13:03:5b:a3:3e:25:
a8:9c:a1:41:d0:83:86:23:5b:b0:93:0d:58:d9:b6:
bd:43:de:41:f5:9c:09:64:bd:3b:bf:2b:aa:a6:a4:
5f:d1:c8:0f:9d:2e:b7:94:a4:c4:74:7e:e2:21:8f:
5f:35:55:7b:b7:6e:00:0c:c2:55:cf:7c:09:2c:f6:
53:54:56:99:98:3d:ee:a3:19:ea:20:4f:33:74:95:
df:dc:fd:f4:79:29:d5:2e:5e:75:25:d9:72:82:48:
33:ef:79:76:03:02:70:98:70:1e:ac:7c:91:cf:20:
a0:4c:18:37:2f:84:9a:19:8a:0f:84:1a:ac:d1:d1:
b9:a0:d0:be:ce:9f:4a:31:a6:c9:92:07:ce:55:82:
88:6a:f9:aa:20:c4:41:c3:c1:9c:03:97:57:01:54:
bc:a5:21:af:da:8e:a3:4b:3c:81:87:18:6c:8e:1c:
d0:3e:7b:8d:8b:58:64:92:78:b7:89:e6:9d:98:01:
15:e3:24:44:50:7d:ae:c6:2f:33:37:44:ce:82:81:
cf:fd:c5:60:08:97:fa:7c:b8:01:1f:71:c2:14:47:
da:53:97:37:37:9c:d9:18:2c:56:11:64:f4:8d:53:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:A1:86:47:1A:2C:0A:DE:8C:35:5E:77:68:3C:D7:E0:CE:56:A0
X509v3 Authority Key Identifier:
keyid:18:58:CA:A6:83:2A:A2:A3:E7:CC:6D:14:45:15:F8:F4:31:B6:67:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFjKpoMqoqPnzG0URRX49DG2Z2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/GFjKpoMqoqPnzG0URRX49DG2Z2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:50:16:60:0d:90:e5:34:73:13:c9:f5:58:64:5e:de:c8:
77:8b:5e:79:bb:b1:5e:79:90:1d:96:dc:71:50:02:d8:e9:2a:
f2:0e:92:c4:44:b1:4c:ae:92:b2:f9:6e:b6:fb:0c:28:83:bf:
8e:66:fc:1d:65:d3:ef:bd:75:ec:29:11:a7:bb:db:12:c4:08:
7b:67:bb:7e:68:26:88:da:ac:55:6a:0b:82:07:e0:0c:10:2d:
5a:4e:9f:03:c5:da:2c:67:ca:44:59:13:fa:d5:41:ff:ed:7e:
aa:ba:5b:96:3d:d6:7b:22:ba:93:a7:47:ac:71:a4:e4:76:4e:
43:92:f4:80:ed:41:6f:9b:6a:1a:08:a6:24:f0:a4:ee:96:9d:
3a:cd:9e:3a:b0:3a:22:32:5a:39:2b:f0:43:59:e9:06:fd:c3:
76:e8:f1:07:f5:7a:46:c2:e6:83:70:8e:45:68:7d:68:e8:92:
9c:f0:71:44:df:db:05:d6:69:20:90:67:d2:63:9a:56:b6:df:
d9:e0:ec:be:ab:46:a2:e6:87:ff:21:c9:c6:aa:e5:1f:3b:34:
d8:90:19:78:e8:9f:47:85:4a:6b:ab:02:7a:2d:d2:40:dc:30:
78:76:a6:e4:be:a3:33:a3:23:c8:a9:0a:ba:f4:1b:6e:cf:7d:
f9:0f:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:55 2025 by rpki-client