Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: Hn+wpYeqvfkuTMGQxKuSp6fZfghkU8UJW44hFBpZqBE=
Subject key identifier: B9:F6:38:E5:80:AC:A1:3A:5B:F8:0A:5F:EA:26:F6:06:45:1F:31:89
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 0198D516479ED7AAE3733EA3E31924F1212C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 04:01:03 +0000
Manifest this update: Sat 23 Aug 2025 04:01:03 +0000
Manifest next update: Sun 24 Aug 2025 04:01:03 +0000
Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: KvnGckOyuikxd0LsWb62Q0TJ8sfa4gf3Y/QMMf+u5j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:47:9e:d7:aa:e3:73:3e:a3:e3:19:24:f1:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Aug 23 04:01:03 2025 GMT
Not After : Aug 24 04:01:03 2025 GMT
Subject: CN=b9f638e580aca13a5bf80a5fea26f606451f3189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:88:8d:ff:8f:11:c2:4d:3a:a8:fe:cf:23:
f0:0b:c9:44:7b:f0:ac:e5:4d:8b:ab:fb:e7:c5:f2:
33:b2:19:dc:ff:dc:17:88:0c:b9:92:71:a0:97:df:
4b:bc:de:ed:ae:dc:eb:4b:a0:37:f1:eb:69:15:e9:
06:7b:ea:5c:10:04:2c:dd:c0:3c:b8:6e:61:dc:ac:
36:a4:a2:e1:53:c5:42:87:dc:12:c9:4a:90:fd:53:
09:c1:27:e1:c9:ee:9f:a8:86:61:6c:48:34:18:32:
8f:e3:11:e6:60:fc:15:9c:83:e5:c2:65:fd:89:8d:
a4:e1:8e:11:49:15:53:de:82:31:1b:d0:c2:49:0b:
d7:08:09:26:f2:e8:60:39:91:ae:ae:e0:9a:1b:27:
02:c5:42:ad:fc:76:02:73:22:e8:ad:0b:49:cc:8b:
dd:c0:09:4d:05:12:54:2c:2a:c7:ce:11:4c:62:f7:
d8:d3:7e:3a:25:be:ba:27:84:04:43:a0:3a:3c:52:
eb:c6:ad:1f:40:ff:35:f2:0c:f4:99:c8:2f:08:2b:
99:ec:24:f6:0d:fa:da:87:15:8a:41:54:bc:fa:38:
ed:2d:74:f4:00:58:c1:dd:47:07:f8:73:a7:9c:2f:
94:f6:55:85:69:0a:08:48:b8:a1:2f:9b:c9:12:c6:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:38:E5:80:AC:A1:3A:5B:F8:0A:5F:EA:26:F6:06:45:1F:31:89
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:6a:5f:88:0f:9c:39:2b:4f:69:bb:e1:27:aa:87:87:e1:5c:
1e:27:da:a9:d0:83:da:ea:40:aa:7c:07:5e:ec:ca:ba:0c:0d:
fe:73:9c:8a:e5:96:92:c2:e4:16:8e:21:1e:63:f5:71:44:7d:
78:db:db:dc:38:57:cc:0c:5c:57:3e:3e:8e:c4:ae:ec:be:eb:
3c:61:48:7a:b1:d9:ce:58:b6:d1:61:5c:b2:f1:f6:6c:d5:0c:
d4:fd:56:a8:2a:bc:a1:7c:19:c2:ed:bc:d0:ee:2f:9d:71:4b:
28:88:e6:d5:c1:90:99:7e:19:72:5d:1b:a5:0d:c1:c9:4b:2e:
4b:96:4c:c0:d5:1c:88:c1:54:58:b9:fa:9a:c1:08:ec:81:b7:
73:bc:23:f1:10:a7:98:c9:e5:f5:7a:a1:cf:3a:6e:12:e8:37:
a0:3d:a5:46:e6:19:59:52:56:f6:8a:1f:86:a0:1b:fc:18:56:
55:60:82:96:6b:c7:97:55:13:5f:e5:f4:37:b1:1a:09:30:2d:
da:a5:7f:f8:0e:5d:07:57:aa:01:ef:68:e3:de:85:9d:ba:3a:
c8:6d:a8:59:22:b2:80:95:21:69:0f:62:99:da:c7:a0:8f:67:
c4:87:12:a5:df:7a:25:9a:95:4f:7f:31:03:a2:2d:ac:50:14:
85:9f:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:32 2025 by rpki-client