Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: EfrhmqZO0TjWEcajNbA8ZgbpHu4SMCygEzhL9uXq7J8=
Subject key identifier: 3B:5F:45:25:B1:3D:BA:AE:38:83:7E:2C:17:9E:12:23:09:28:4C:B4
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 0198D7A94222B298A407FBE5C256068884EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0DFB
Signing time: Sat 23 Aug 2025 16:00:50 +0000
Manifest this update: Sat 23 Aug 2025 16:00:50 +0000
Manifest next update: Sun 24 Aug 2025 16:00:50 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: v4dvZO3OXse1m0brdWoSO/htrfdur/O9Z/i4Kz9xXrE=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:42:22:b2:98:a4:07:fb:e5:c2:56:06:88:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Aug 23 16:00:50 2025 GMT
Not After : Aug 24 16:00:50 2025 GMT
Subject: CN=3b5f4525b13dbaae38837e2c179e122309284cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:46:03:e7:06:08:c9:5b:d7:3e:24:01:d5:
99:0a:81:30:fd:a4:7b:a8:52:8c:3e:2c:75:0d:3d:
7f:90:ba:3e:8d:51:46:81:40:e3:8b:68:48:7a:59:
dc:a4:12:2c:7e:3f:a4:d7:b6:cb:d7:68:26:2b:f0:
b1:83:e8:b9:ad:78:63:18:82:17:1e:39:aa:45:fc:
01:ed:a3:03:c7:92:7b:52:9d:c6:78:b5:44:17:33:
b2:27:19:d9:0f:17:5b:1f:e8:b1:85:65:75:b9:0a:
21:9e:96:4f:6e:bf:a6:42:aa:7c:db:1d:db:75:4f:
73:0d:1e:7d:c6:9b:d4:6b:8c:49:07:33:45:87:eb:
b6:a9:05:ed:cf:57:6f:84:68:8b:07:0c:96:6c:e7:
9f:ce:ab:4d:98:b2:66:93:aa:d5:3b:26:01:ea:12:
8b:21:ec:b8:44:e3:77:b9:b6:db:2e:51:9e:d1:cf:
12:5b:46:6f:14:2a:c9:91:d8:92:df:78:14:ea:5d:
31:32:8d:6b:a3:5c:a4:e4:23:79:5a:14:a5:68:1a:
72:36:38:d8:b8:c1:50:a9:b1:36:2d:b1:67:36:26:
10:0d:38:f2:c0:2a:89:ae:9c:ed:f5:00:ab:6b:b0:
77:8d:ca:42:6a:be:16:09:b2:73:2b:5d:20:82:fd:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:45:25:B1:3D:BA:AE:38:83:7E:2C:17:9E:12:23:09:28:4C:B4
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:25:86:f1:a3:a2:fe:b8:f1:7a:bf:99:38:b9:d0:90:54:57:
89:c0:56:84:da:91:e9:96:c9:08:15:af:b6:47:41:ac:7b:dc:
be:7d:55:94:f5:c9:70:10:bf:97:d2:fa:64:b4:ed:e3:9f:c5:
4d:4b:74:7d:b9:45:f6:dd:55:e0:a0:6b:db:d1:16:4f:55:9f:
7a:26:42:56:6b:b9:0b:32:35:39:cb:1e:eb:84:1b:38:bd:1c:
d7:07:38:fb:c9:ed:a6:cf:50:47:79:7a:5f:bb:83:00:71:95:
3f:4d:bf:b4:65:71:a3:be:24:6a:0b:ef:b4:1f:bb:31:12:83:
6b:a5:e9:97:a1:16:4a:02:8b:76:47:49:4d:b1:59:0a:60:ca:
3c:1a:77:10:a7:32:3e:1a:8b:71:30:b4:bd:e0:56:85:b1:2b:
e7:71:1e:7f:a0:11:83:39:37:a3:8b:2f:96:e8:9a:23:46:4e:
c3:69:30:8f:cc:25:b0:a1:a6:a1:38:ca:5b:7a:ab:ff:ed:e2:
0c:ed:21:11:36:50:a1:43:d9:34:de:30:b6:3b:b8:52:2c:f7:
8c:c0:89:00:89:06:0d:d0:c8:d7:bc:5c:91:62:cb:6a:d8:f6:
35:41:cb:35:26:62:dc:10:04:02:b5:ff:68:0e:22:19:45:04:
f8:b5:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:31 2025 by rpki-client