Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: 4/bf5q8wlBdzgurb+sR8u7XVJVY1/T1yiU9qI9bqsBY=
Subject key identifier: 87:44:44:81:0F:30:03:80:63:7F:0F:F2:9C:06:6F:8C:E5:F5:F6:66
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 0198D73BCE2B2AF8A5ABE5580D720BEFB2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 08B4
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: wCvY2+A1B6w530hBNQ+/iC74UuCr0p8J1pn9FzyniGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:ce:2b:2a:f8:a5:ab:e5:58:0d:72:0b:ef:b2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=874444810f300380637f0ff29c066f8ce5f5f666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:e2:04:07:f0:ed:d8:8f:4f:de:5a:76:ee:
57:4b:e3:e6:13:d5:81:71:78:2f:63:34:24:93:5a:
84:19:2b:bf:e8:64:09:de:6b:d1:02:27:e1:f8:4a:
8a:97:d6:ba:f4:98:99:20:05:90:8e:cb:32:d0:8c:
3c:c0:45:cf:62:1c:ce:ff:b7:37:ca:5d:01:27:e6:
66:52:78:20:ca:9a:36:d4:43:94:16:b1:ac:32:10:
9a:1a:4e:4f:77:c8:98:0b:b6:30:32:99:d3:81:69:
64:96:de:01:8d:14:7a:a2:38:13:f9:fe:3c:04:c7:
80:ee:66:35:14:fe:ce:4e:f6:9e:5f:3c:99:fb:87:
b1:ba:f5:d4:c7:ac:a8:23:40:41:24:3e:9e:a8:9e:
e8:e4:33:be:14:a7:6e:ba:bd:de:42:b1:76:59:88:
d5:a6:c3:fd:70:e9:b9:c6:d5:48:86:a1:84:33:ab:
0c:16:bd:ac:36:c3:fe:60:e4:61:92:29:64:46:ea:
7d:c6:45:c2:2d:47:18:b0:fd:d1:f1:ea:37:50:19:
d8:c1:3a:17:e3:ae:95:9e:90:62:8d:92:0a:11:ec:
d9:05:fa:b7:21:7f:6d:47:89:08:47:4c:82:e0:47:
57:65:a1:c5:99:f0:9a:3d:a2:fb:3e:bf:d4:8a:cd:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:44:81:0F:30:03:80:63:7F:0F:F2:9C:06:6F:8C:E5:F5:F6:66
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:c3:7d:b9:70:f1:be:19:7b:d7:af:c5:6c:e6:af:b9:c2:
d2:70:ba:73:f4:39:e0:ce:bb:97:42:fb:31:9a:23:92:60:18:
ce:77:db:d4:c4:27:af:ca:e9:1e:aa:26:6d:5d:bc:a4:dc:ff:
d4:b9:f8:90:00:a8:70:76:c6:5f:a0:fc:69:57:e8:af:f5:53:
a5:c3:fa:ba:47:cb:f9:c8:d8:d1:77:34:14:cf:e0:4f:9e:f8:
f2:c1:ce:45:32:03:29:a4:a7:05:7a:af:51:df:26:8a:a3:5d:
2d:f0:b7:65:a1:5d:4d:c0:c5:04:dc:f5:87:c6:12:b1:5a:78:
ad:9e:e3:18:c2:e0:68:94:6c:a6:e9:46:5c:fe:54:54:e6:aa:
27:32:c3:58:08:0a:8c:98:b9:a4:a0:2e:09:c4:fa:61:71:35:
29:82:06:73:d9:d5:f5:eb:39:4d:9f:df:a9:5b:20:ac:67:8e:
4b:2a:2c:f4:40:15:8b:9d:cc:f9:61:69:b6:ac:26:fa:33:a1:
34:7b:33:b1:b6:41:46:6b:f4:ac:67:13:61:8e:83:88:a2:d0:
6d:f8:97:7a:24:52:d3:a6:0a:df:99:66:3b:fc:42:1b:72:7c:
8d:68:3c:da:27:ae:cd:af:24:3d:5b:f9:cf:7b:2a:ff:4f:35:
dc:98:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:27 2025 by rpki-client