Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File: gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier: cY0OujvS3Yjn/K0AUoTgHMd7sKxvKHhD17lT/3YjrP4=
Subject key identifier: EE:35:0B:63:16:AA:5D:80:EF:A6:6F:5D:C9:F1:B0:84:FC:DF:75:C5
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer: /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial: 0198D65F697202EBC9E3E3E216DCB93F9071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number: 1463
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: WxnK2ooI+yCu94Pnbp4/juaEfO0igKblihTOWW+e4Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:69:72:02:eb:c9:e3:e3:e2:16:dc:b9:3f:90:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=ee350b6316aa5d80efa66f5dc9f1b084fcdf75c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:e9:d6:8e:c1:87:e6:c3:f6:1a:9a:79:51:
cf:b1:95:41:8e:74:f2:c8:b0:57:26:f5:bd:d2:2f:
f0:26:7b:03:e3:3e:16:74:7d:22:39:19:57:36:4d:
dd:79:28:94:c0:9e:69:00:c3:c7:9c:fd:20:d1:97:
10:5d:a4:57:c8:b1:1a:34:04:6d:7a:be:98:b4:44:
b5:1e:13:ce:36:a3:a1:60:3b:9d:ee:b4:0d:c2:b3:
36:1b:e7:0a:c5:ee:8d:be:75:99:48:7e:0b:91:61:
b3:fe:85:4d:5d:42:aa:44:b9:6e:cc:fd:c5:6e:e2:
03:07:2a:5f:3f:43:04:18:77:8d:04:6b:0d:28:38:
bb:7d:62:d0:cb:b1:3f:89:71:24:b9:66:71:78:e7:
af:7c:64:95:9f:f8:83:71:3b:9c:31:55:5f:b5:91:
59:7f:dc:e3:19:59:0b:9e:eb:50:0b:ee:5e:f8:39:
23:8b:a6:2d:4d:5f:a1:64:47:e2:c9:ef:99:b3:11:
98:5e:c3:40:0b:4e:64:fa:54:d7:1e:28:1f:1c:4a:
0a:ad:fb:ac:5c:42:c8:0d:ad:ea:f8:77:45:92:e6:
00:61:d6:3d:cb:e9:07:e7:56:6d:c8:c2:3b:dd:8f:
97:51:2e:fe:71:07:f4:34:07:6b:82:13:4a:b9:36:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:0B:63:16:AA:5D:80:EF:A6:6F:5D:C9:F1:B0:84:FC:DF:75:C5
X509v3 Authority Key Identifier:
keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dc:9b:ca:3a:3f:cd:54:6c:24:6e:13:64:0d:dc:f4:0b:ff:
31:42:f1:77:2b:da:33:88:ef:67:c1:90:1b:b3:0c:34:19:87:
82:97:16:99:5b:93:77:b8:b7:f3:09:1d:41:a5:b1:1b:51:5e:
cb:24:31:16:0f:7d:f4:d0:cf:0f:5f:82:d1:62:41:e9:6b:47:
30:2a:3a:82:05:bb:d4:5f:57:5b:6e:85:b8:b5:0c:bc:22:a5:
86:48:6b:5f:25:9d:21:44:17:3b:b4:9d:9b:9b:a8:40:82:9b:
ca:a8:3f:99:d3:e3:98:e7:ad:f6:8f:4c:04:1e:32:01:e6:34:
b1:e1:dc:d5:50:08:cc:c6:0d:ff:d7:06:f9:c4:04:d0:5c:4d:
74:16:a6:6f:22:f2:97:51:4e:e9:88:b7:d6:fb:60:f9:35:94:
08:05:e0:6d:36:f4:a1:cd:94:ac:6a:30:c7:41:80:cd:9d:ac:
99:ab:d9:43:85:13:40:8c:1f:7d:98:52:42:80:95:9b:c2:90:
4f:cd:5c:6e:bf:62:bc:03:55:56:f8:e4:77:6e:79:ef:f4:d3:
80:a8:9c:10:8b:c1:0f:42:c6:10:b1:1c:37:03:db:cd:a6:ba:
23:40:34:c1:fc:50:e0:96:99:d5:c1:26:a4:1a:41:96:75:a7:
bd:da:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:14 2025 by rpki-client