Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: u0hWxVALGcvbdxdprbWLhixEZo8DI3nRpK3eWO7UGmE=
Subject key identifier: 06:C8:B0:FE:14:66:C1:24:AD:F8:85:4F:37:E1:E3:52:25:E9:39:C3
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 0198D4734BA8A4D147963F09265FE1122B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 058F
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: 3oFMvu5bFdR/0Oh9M2sJn7wfKVN/80xqw25JGoScurg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4b:a8:a4:d1:47:96:3f:09:26:5f:e1:12:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=06c8b0fe1466c124adf8854f37e1e35225e939c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ab:cb:34:2b:bb:51:e5:79:a8:a3:85:9b:0d:
d3:ca:90:1a:7c:e2:bb:28:dc:3a:d9:73:03:98:24:
a3:c8:25:33:82:52:63:0a:f6:5f:d8:76:ef:ee:71:
b9:84:27:31:75:86:17:b1:dc:b2:5e:28:3c:0c:fb:
7e:c5:36:28:b2:71:d7:27:bd:a5:a8:1d:00:62:c1:
d3:5e:56:8f:8e:7f:c9:b6:93:0c:c9:1d:98:3a:84:
2d:d6:e2:fb:53:8d:c7:4b:4a:b4:2b:15:2a:58:95:
bb:9d:6d:ca:f5:a2:e9:f2:ce:1b:ad:04:31:98:4a:
7b:c0:c4:31:29:a2:7a:b8:25:79:3e:59:ba:df:fa:
83:ac:75:44:73:f3:14:28:e2:1c:c4:40:65:dc:c0:
85:9b:b6:8e:38:b7:f0:06:51:2b:06:34:ed:79:32:
39:04:99:d2:65:76:8a:c4:3c:fa:1a:8f:b1:5a:7e:
65:3d:c9:dc:7e:4b:02:cf:25:6c:32:80:aa:18:aa:
8f:e0:5e:2a:be:97:ce:e4:ef:18:45:c4:50:68:0b:
92:a1:4f:a1:d8:72:39:f9:44:db:60:41:1d:c4:c4:
9a:73:5a:be:2f:5b:88:01:fb:62:8d:4d:dd:14:b6:
81:46:08:44:43:7f:89:b0:c8:19:1c:a6:a1:da:c3:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:B0:FE:14:66:C1:24:AD:F8:85:4F:37:E1:E3:52:25:E9:39:C3
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:21:e6:53:ac:d7:5c:12:b5:0b:29:35:8e:df:b4:15:98:95:
8f:3b:e5:83:07:f5:d7:39:32:cd:de:e9:27:5e:4d:5c:e3:f0:
61:de:7f:9e:09:ed:bd:27:ce:fd:d9:01:87:00:68:c2:75:09:
cb:f3:07:7b:6c:5c:81:ae:18:23:78:74:de:01:75:dc:a8:ca:
a8:93:a5:b5:0d:69:e2:53:fc:ad:09:8c:61:7f:55:5a:c2:4d:
fb:f7:5f:fe:89:f2:87:cc:e0:5a:6f:ce:ec:58:50:55:94:74:
27:bb:61:1e:fb:6b:86:6b:79:c8:a2:e1:5e:c6:17:8f:f9:fd:
0c:6b:b0:49:73:9e:6d:01:f3:44:4a:ed:44:c5:a5:bb:e8:d2:
51:82:b4:f8:6b:1a:17:d1:0b:10:74:f3:b7:ea:c5:36:12:38:
45:77:30:d0:bc:f0:50:ee:56:5f:ce:0c:3d:a4:69:62:51:4a:
eb:92:dd:6c:a8:66:eb:81:89:c3:3d:a1:f3:90:ce:58:40:98:
32:7e:b1:de:36:6b:9c:29:cc:da:11:3a:72:8a:98:2f:8a:99:
7d:26:c3:69:89:27:84:60:10:10:fc:e4:91:e5:e8:98:89:d1:
78:8c:48:f2:4f:e4:34:41:19:5a:34:dd:d4:09:0b:0a:53:ca:
2f:6d:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:08 2025 by rpki-client