Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: Z2gwBAy8fIeu15Dlp/9lRo9ne+7n+5vLRppsoCtgk6k=
Subject key identifier: B3:E4:D2:33:D3:7E:DE:82:FA:40:AA:84:83:7E:83:7B:BC:43:D4:70
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 0198D84FBAFEFBEB583199C5C96EFE62352B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 0324
Signing time: Sat 23 Aug 2025 19:02:40 +0000
Manifest this update: Sat 23 Aug 2025 19:02:40 +0000
Manifest next update: Sun 24 Aug 2025 19:02:40 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: EH8kOHjPlYMXPkSDHrKhZ4DXuetNvnL3uG/cGyzdjrU=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:ba:fe:fb:eb:58:31:99:c5:c9:6e:fe:62:35:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Aug 23 19:02:40 2025 GMT
Not After : Aug 24 19:02:40 2025 GMT
Subject: CN=b3e4d233d37ede82fa40aa84837e837bbc43d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:18:72:50:a0:a5:b4:94:8c:a9:c0:44:d9:
f9:00:e0:fe:33:a3:5b:95:a0:b5:58:6f:2a:2b:90:
db:3b:3c:e5:c0:3d:42:85:d2:e9:a7:83:8f:94:50:
7f:17:a0:59:d2:27:9d:c8:60:df:bc:74:8d:d6:5b:
7c:22:1f:aa:ad:5a:ad:4d:95:d5:ce:ee:09:df:f2:
2e:27:98:aa:26:04:c6:dd:21:63:39:bc:ac:c4:7b:
7b:fb:3c:d8:6e:a1:b3:22:51:aa:a9:84:b6:6b:30:
b9:c2:71:3c:80:cc:e6:4a:4b:11:0d:10:32:1d:8f:
5f:f4:0b:9c:2a:35:d5:3d:3d:bd:aa:2d:14:b7:e6:
14:ae:9d:83:1c:86:ed:97:90:8c:6f:50:3c:9c:00:
0c:cd:31:20:39:e9:2e:57:60:51:fc:d9:1c:94:28:
5e:0b:f5:f2:88:78:24:b0:b6:1d:f7:5f:ad:96:aa:
a7:53:bc:00:77:15:66:4a:1e:a7:7e:dc:dd:7f:aa:
72:cc:68:71:ba:52:b9:66:d6:e5:dd:0f:ae:df:0f:
e0:80:b2:65:0b:71:a3:57:8d:37:dc:4a:84:54:c0:
88:c9:8c:00:ee:5b:5c:57:af:e5:23:fe:5d:f9:1a:
90:23:7e:0b:e9:53:7e:44:be:4c:46:5e:d6:cb:83:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:D2:33:D3:7E:DE:82:FA:40:AA:84:83:7E:83:7B:BC:43:D4:70
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:e1:de:79:0e:fa:7f:fe:e2:da:c7:21:c9:30:f7:80:ae:3f:
08:eb:42:aa:89:ee:47:49:80:4b:a7:20:49:32:dd:90:76:09:
05:ba:56:2b:44:24:94:9d:71:b8:b2:b9:5e:5f:df:a8:b2:fa:
de:af:de:9a:ff:ce:f6:4b:1f:5a:a3:64:1c:c9:8f:e9:2a:1b:
68:61:fc:75:c7:86:9e:6a:3b:75:c8:d2:ee:66:93:70:37:0e:
f0:70:5f:22:59:88:35:84:f4:0a:81:f2:17:89:62:2b:aa:07:
15:a7:97:89:c9:a3:c1:69:69:06:2c:c2:d5:c4:ae:48:be:86:
bc:70:d4:56:10:73:60:c3:1c:c5:63:4d:8b:b0:be:c3:56:0a:
9c:f7:be:d8:ff:07:36:c7:9e:41:1e:94:e9:10:f0:b1:8d:d6:
59:f6:f2:31:7b:61:0a:0d:1d:66:c1:5a:f9:da:97:b7:05:c9:
49:a2:72:eb:49:ff:bc:2f:83:6b:ff:34:f9:f3:04:89:7b:ca:
06:dd:a9:86:cc:af:f4:5d:d4:2e:4a:d8:60:c6:ae:21:a8:c3:
f1:65:ac:f5:3b:a2:2b:44:76:45:27:ed:25:7e:bc:7f:4b:26:
07:23:47:54:d7:85:fd:17:23:d7:a6:b5:42:08:f7:6b:56:08:
bf:b8:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:14:10 2025 by rpki-client