Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
File: _GpMWV8LLdBaH-Zyh8E84OvICts.mft (raw, json)
Hash identifier: wG/4XBU2Y0SWAzUiszFAKw4RUeFpP8l4ZxWLwT9ARl0=
Subject key identifier: 7B:F8:F5:5C:28:56:3F:38:C7:87:37:E9:AE:A2:A7:26:7E:51:E3:CB
Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Certificate serial: 0198D4A7F76C2151C961E278B83308421D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: PcG8Sq5FdbAe30rm_n_GcaQonsg.roa (hash: Bm8FQyjRUmW9/pGMLb92kJbH7eLAq4FPc7+Cd5r6swA=)
2: _GpMWV8LLdBaH-Zyh8E84OvICts.crl (hash: rhWGldPWbDUozJkcvFdXqxsu5OcFk2R2UpP77VNNok8=)
3: vCyJ_4gbyrukZoytmDIUJKLGPq0.roa (hash: MURqYSpROMIIkoPGoMUJ5DUudVIqQ91/GFdxEyduads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f7:6c:21:51:c9:61:e2:78:b8:33:08:42:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=7bf8f55c28563f38c78737e9aea2a7267e51e3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:aa:d1:b8:59:eb:6d:96:41:ba:71:9b:51:
df:42:0d:27:3c:c4:23:44:f6:8f:f7:3b:6d:ff:d2:
ff:c4:52:6c:74:06:d5:a9:1f:bd:c9:40:7a:58:31:
a9:9f:1d:36:c1:9f:e6:12:16:0b:d7:cd:ec:34:c3:
14:f5:be:01:05:30:54:0b:7f:3f:ce:37:41:7a:e1:
d2:ee:2d:f2:c1:ff:c9:00:83:66:a1:1f:96:90:17:
63:2a:7d:22:bc:f6:b6:cc:0f:96:97:26:2a:1e:75:
2c:9d:cf:2d:18:de:16:e6:16:ab:e4:ce:96:ce:0f:
33:35:03:28:fb:ca:2e:a1:f1:7e:a7:89:69:70:8c:
30:ab:0a:a4:95:ef:4f:a5:bb:24:f4:b1:2d:e9:6b:
4f:10:51:9d:d9:eb:97:7a:c7:3d:82:05:d1:0a:a7:
de:9f:44:15:e2:a1:d1:77:3f:78:a8:63:8f:98:50:
bd:45:99:a0:22:cd:fa:39:53:1c:2a:65:52:0a:a5:
3e:bf:1d:4a:ac:88:88:22:84:ef:b7:e7:6b:56:23:
6a:f1:a5:6d:8b:b5:8b:41:6d:b6:1f:2b:05:ad:c6:
00:97:33:78:6f:86:10:35:4f:06:7b:83:2c:69:ed:
df:ef:b0:9b:81:37:7a:8f:a9:24:c8:53:2c:e7:65:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:F5:5C:28:56:3F:38:C7:87:37:E9:AE:A2:A7:26:7E:51:E3:CB
X509v3 Authority Key Identifier:
keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2e:4b:61:09:9d:20:8d:48:ca:4b:40:f1:1d:6d:b6:04:f2:
75:9e:19:84:9c:df:00:50:41:21:33:fe:25:31:74:bb:8c:5f:
1b:b4:7c:8b:39:1e:bb:83:d6:4b:f0:4a:69:19:16:4b:be:76:
12:1e:6a:71:ec:e0:f6:4f:42:47:d8:12:d4:6f:cb:66:a1:1d:
6f:d1:8e:82:89:34:e2:8b:ae:3c:92:02:82:72:46:d9:4f:7b:
07:97:46:b8:6d:58:e7:40:de:06:90:2c:45:52:94:03:90:9a:
00:46:ac:ff:86:7f:ef:27:23:89:23:28:86:b9:db:e8:d1:f1:
8a:8f:50:01:1e:75:53:93:da:45:30:d0:e1:d0:89:5c:18:d1:
29:cc:c3:b6:87:6f:75:b7:a3:2b:11:79:2b:11:17:7b:9f:7c:
f1:39:51:9f:41:56:58:70:b3:ed:1f:4e:c8:c4:b8:e4:40:41:
23:79:2a:29:c0:da:92:d7:15:c5:e9:f3:53:64:fe:29:fa:b1:
23:bd:32:3f:e2:fa:9b:d2:6c:90:05:ca:e5:4a:4b:8f:75:2c:
2a:eb:24:a8:6f:3b:bb:8b:d3:e6:6e:71:49:0a:23:73:fb:43:
66:ea:6b:56:d9:1e:10:69:bf:91:0e:b2:f7:25:0b:e1:04:34:
b3:59:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:27 2025 by rpki-client