Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: Tqaw3Hh3eo+/jURL0BvPyaAASBlxUThjM/bXQY5lazU=
Subject key identifier: 07:37:7A:89:17:C8:1C:6B:10:72:03:E7:CD:C7:37:73:E2:40:F9:8F
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0198D6CD8EA9729478793C2A8851BE910765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: lnKWrh0MMz31Tp5da4dxGhB6BL/wxRrT2d2l2zB+S9M=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8e:a9:72:94:78:79:3c:2a:88:51:be:91:07:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=07377a8917c81c6b107203e7cdc73773e240f98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:0e:a1:9e:f7:e5:85:41:9c:22:54:7e:29:
9d:ab:b1:2e:86:08:44:53:eb:ba:79:f0:f7:b5:02:
e6:41:13:cb:67:b0:ad:4a:8f:ad:6d:9f:81:20:4c:
23:7a:c0:f2:46:42:37:7f:7e:5d:ca:26:80:36:64:
75:89:80:02:ee:ed:3d:22:bb:10:3d:c7:71:b7:92:
d8:d1:b3:7b:7a:4d:2a:a8:3f:d0:b6:8b:af:dc:56:
87:0a:9a:3b:3f:93:ec:03:0c:0d:52:1c:ef:eb:a6:
fb:84:fc:df:19:02:72:af:f0:77:48:5b:0e:99:0d:
7f:07:a1:2d:ae:22:12:5a:c2:5e:1a:81:01:26:5e:
48:e9:f5:84:3e:e5:9a:e8:e8:5d:5f:34:17:0f:f4:
88:64:30:75:ac:3f:96:41:93:71:ee:45:28:e9:da:
ec:59:5d:ca:b4:57:8c:31:df:f4:8b:60:02:d1:eb:
b9:eb:92:e5:8c:a6:8a:ae:41:27:1b:2f:3d:11:24:
f4:49:81:eb:e8:09:dc:3b:38:81:35:bb:36:c2:dd:
78:73:c7:a7:d2:80:50:a5:b2:b6:76:00:20:7d:45:
52:3f:eb:03:45:56:6e:22:aa:72:bd:13:10:96:7f:
c3:e1:da:06:22:dc:65:a8:cc:ff:fb:25:8f:96:d4:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:7A:89:17:C8:1C:6B:10:72:03:E7:CD:C7:37:73:E2:40:F9:8F
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:70:a5:36:69:61:5a:87:b5:61:94:9a:1a:ed:9f:ed:f8:76:
eb:50:ad:7f:28:e5:9f:08:59:3c:6d:4d:ac:3c:45:98:c2:ea:
0a:b9:d3:b2:91:45:48:9b:40:2b:7e:40:4d:a2:f2:83:25:14:
ef:cc:96:c1:33:de:8a:fe:40:9e:2e:a7:c6:6f:f2:b1:f6:58:
2f:9c:36:7e:fd:3e:c2:99:ed:15:e0:c6:93:c3:85:78:3d:5d:
c2:17:96:3f:90:7e:a4:f9:a6:3a:03:b8:3a:dd:8e:d4:9e:5c:
88:76:1f:b6:8a:72:74:a8:43:46:3c:20:7e:9a:47:b2:cb:60:
51:0f:86:03:d7:34:e9:56:fd:71:cb:2a:66:c1:cc:90:1d:64:
12:a8:04:26:07:b3:59:f8:95:6e:55:3f:54:31:48:7c:46:6a:
96:5f:8a:c2:3d:6d:b0:4d:bd:7f:f2:13:64:8a:7e:e7:be:d8:
85:db:ba:4f:14:17:2a:fb:41:c7:7e:03:71:79:28:af:4d:a3:
36:1d:a6:66:ac:59:b7:68:df:d5:80:f0:33:24:c0:10:8a:06:
09:b8:58:58:65:85:fd:86:7c:45:45:a1:b5:ef:69:30:e2:e9:
07:f0:20:e2:99:66:eb:f8:bd:05:ad:15:3e:97:19:26:81:89:
c7:a2:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:52 2025 by rpki-client