Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: vyJWtmQkZr9+HnY5o5dBW2M7X9nAjuaa+B4rZeVD88s=
Subject key identifier: 2A:FF:7C:7F:D4:16:1B:47:F4:97:4C:30:78:6F:E3:91:1F:3E:56:72
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 0198D84FDB5A174D210445B2189DE9D21A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 19:02:48 +0000
Manifest this update: Sat 23 Aug 2025 19:02:48 +0000
Manifest next update: Sun 24 Aug 2025 19:02:48 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: 1vpWHaaOfbAltG3h0evBGbAWoqEX9Lnm9wP8HN8ZvOY=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:db:5a:17:4d:21:04:45:b2:18:9d:e9:d2:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Aug 23 19:02:48 2025 GMT
Not After : Aug 24 19:02:48 2025 GMT
Subject: CN=2aff7c7fd4161b47f4974c30786fe3911f3e5672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:08:52:c9:33:a7:8e:ff:4b:c2:2a:92:9e:
30:19:89:34:38:8c:26:71:65:ea:33:ba:d6:8c:4a:
a6:3a:b0:ec:d2:cd:41:83:de:66:38:a0:42:19:13:
b0:15:0b:bd:92:e8:c0:cc:c8:06:8e:59:85:cd:e9:
1a:78:a5:a3:7a:c5:07:dc:f5:ec:6e:8f:46:be:83:
94:ff:31:23:6b:ea:d2:10:cb:53:9f:af:d8:93:19:
8d:7c:68:ac:22:50:cd:17:bd:9b:be:ac:65:9e:75:
fa:56:10:08:e9:b9:59:b8:0c:db:ee:eb:22:57:a9:
39:d5:ae:1d:ce:7b:6e:88:b0:75:61:24:96:54:3c:
cc:1d:b1:68:08:88:3f:5b:c5:96:fa:a3:41:eb:8b:
76:f6:d1:18:ec:73:a4:8d:c2:10:70:41:1f:d1:7e:
0e:7e:40:12:ee:ba:13:c5:d8:2b:e2:94:d8:1b:1b:
12:f1:c3:39:f3:3e:6c:da:62:b3:27:f6:2e:3d:67:
78:b1:2b:7b:6f:b8:5a:ce:9f:83:cc:24:04:c8:50:
68:08:36:d9:57:f0:b5:02:21:9f:ff:1c:4e:f7:3c:
ab:08:aa:48:6c:de:03:0b:a4:8d:7b:04:ce:52:22:
cd:c1:e8:42:3d:e4:73:49:40:9e:eb:da:11:94:df:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:7C:7F:D4:16:1B:47:F4:97:4C:30:78:6F:E3:91:1F:3E:56:72
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:e2:7d:ef:2e:5c:a8:e4:8b:93:f0:cd:e3:f9:38:c7:85:
89:57:f9:9e:dc:f6:57:c1:03:bc:27:0a:72:ac:ef:d3:f6:c6:
cf:ed:16:1a:64:70:84:b4:84:17:8f:b4:89:ca:a4:6f:7e:ed:
e4:1c:d0:0d:29:08:dd:b7:7d:74:ca:68:36:68:ce:58:23:ae:
1c:c9:96:15:c4:88:38:c2:3d:b3:90:20:7b:d3:22:4c:ca:20:
48:a5:1f:7a:31:db:2e:5d:19:e5:db:cd:fc:a9:c1:c0:e2:ad:
99:5b:d0:4a:0d:91:75:ff:62:a6:19:c3:c4:0c:69:0e:93:6a:
54:f6:a4:25:0c:54:38:e4:6b:9e:69:7e:3d:b5:46:25:bb:e2:
e3:24:5b:ce:10:3b:7d:ad:19:90:81:9e:b0:18:77:ba:f7:5e:
74:8a:fd:5d:58:f9:bc:29:dd:74:67:e0:92:86:8f:4a:d7:4f:
6b:ad:ad:59:9c:7c:bb:1b:70:7c:34:35:68:1f:56:95:31:c8:
a3:00:5e:11:9b:88:0f:49:bd:b5:a5:a0:b8:89:3a:4e:fb:7d:
54:46:49:ca:46:14:59:e5:48:7f:31:a2:3a:32:ee:ba:e6:8d:
54:be:76:40:31:0a:d2:8e:bf:1e:e3:e5:f1:29:a6:b6:f3:3c:
43:72:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:58 2025 by rpki-client