Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: rLatMmIWKtImulw+Pkkykeh71R+uC6if6+sKh1hafxg=
Subject key identifier: 48:83:85:D5:3B:32:0E:7F:B9:60:BE:7E:69:95:E9:03:FC:5E:AB:5A
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0198D6298F06964C8B6C24F1EF8B33D74BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 165D
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: Mh01wRChvvtWqTVBhQWqw/NDLt4gwFEjzalPwhuuuqM=)
2: Xh5sljusme-a5168zOA_Qoh1nqM.roa (hash: SCrnvepcA5q+v9pudE90mYTsMwfBB9I3ZOeLK/tRmkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8f:06:96:4c:8b:6c:24:f1:ef:8b:33:d7:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=488385d53b320e7fb960be7e6995e903fc5eab5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:2f:fa:8d:b8:67:6d:a1:9f:87:4e:de:f8:
e7:62:4c:43:6d:62:32:88:c3:1b:82:eb:bd:a9:b5:
f4:ce:5c:a1:c7:97:b5:4f:fd:ab:ce:c1:3c:4e:be:
6e:27:19:b1:05:f5:36:01:07:46:5e:52:02:c4:e7:
5d:b9:28:b6:ef:cf:c3:9a:e5:ac:59:ad:00:ce:9d:
8d:66:a3:24:77:9d:b8:12:91:c3:51:51:d7:c6:92:
48:e6:6e:ca:a7:e5:67:fe:58:a5:f8:ee:c6:22:66:
63:42:46:2d:33:c2:ae:2d:97:d8:e8:f5:1f:de:a4:
66:6e:7a:8f:f9:60:5c:29:fb:7f:04:97:a6:c4:f6:
76:77:9a:94:ab:2e:fb:de:2f:d0:ad:50:94:36:e2:
ca:41:6c:a6:c1:5d:76:3c:b9:df:c8:d2:c9:a9:ff:
d8:b2:28:66:c3:e7:e4:4e:6d:7f:02:63:7f:8e:6f:
d2:89:16:c1:66:f4:e6:31:fa:5c:c4:f8:58:9a:12:
1f:3c:c8:53:b2:d1:04:a4:ac:62:d6:a3:35:c9:38:
05:2e:3d:46:05:d5:9a:2d:c0:f1:cc:55:5b:de:8f:
03:df:c9:3b:9a:12:cb:db:97:c0:d1:87:96:91:de:
06:18:07:01:5d:54:24:cb:9b:f5:ff:2b:ce:28:50:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:85:D5:3B:32:0E:7F:B9:60:BE:7E:69:95:E9:03:FC:5E:AB:5A
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:77:ff:fd:73:3c:ab:23:56:da:1c:98:19:d6:a0:44:92:
ec:ab:dc:35:7e:8f:d7:77:56:9f:c3:1c:6e:2c:97:ed:cb:c1:
eb:89:98:ae:16:29:63:d2:17:98:0c:e3:77:37:fa:d0:d2:65:
02:d8:3b:b9:97:58:eb:f0:e6:07:6c:1a:a0:0e:d9:c9:b9:4d:
08:f5:10:5e:41:83:82:34:51:66:84:55:f7:64:81:1e:c0:a4:
e9:3d:8e:e9:af:48:1a:93:63:82:fc:c9:78:1d:3c:f8:90:46:
87:f9:c7:5a:c2:e6:3e:2f:d6:e2:c1:1e:8e:10:95:28:9b:6d:
d9:b6:1c:8e:f3:0e:e1:5c:fa:d5:ab:18:e2:77:c9:d1:44:84:
39:bf:31:fc:53:7e:8c:74:d2:fb:85:68:fd:24:5a:22:97:cf:
96:00:fe:5e:9f:bb:ec:07:c1:d3:e7:f5:11:5c:72:76:31:67:
20:24:97:79:eb:02:f3:f9:86:b5:6f:45:63:9a:36:6c:80:16:
48:16:e8:00:0c:fb:1b:a9:d5:19:f6:a4:61:f6:68:ee:ef:b1:
d6:48:e4:42:25:b1:51:11:15:dc:cf:3b:b8:d0:48:e6:5c:0b:
a6:01:d8:e3:fc:28:4f:b2:ce:89:bd:af:c0:e1:04:cb:07:b0:
51:11:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:01 2025 by rpki-client