Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: 0X9mqO0oqbpVILRTjmM6ayOa63f/x2Ef3a7OLTGAKBs=
Subject key identifier: 9C:A7:51:19:DE:BE:70:B4:EC:88:03:0D:6B:65:45:7A:C3:49:88:2F
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0198D515F02E2ED5CFDE31D2D114EF2465F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: boNr+6zCUOOV5BvgXSmS6FbSPV/sErFdE6iuWPQUNHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f0:2e:2e:d5:cf:de:31:d2:d1:14:ef:24:65:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=9ca75119debe70b4ec88030d6b65457ac349882f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:84:82:b6:40:3c:ac:d5:16:3e:c0:6b:ec:
38:f3:da:72:3a:11:b9:7b:00:ae:28:93:4b:9d:fc:
ba:41:bf:a1:80:85:b3:16:17:f6:68:ee:5d:80:88:
ca:09:4b:91:22:89:11:52:db:72:f4:b2:f2:3a:27:
c6:7e:0b:c1:fc:fe:be:d6:18:36:7d:89:ac:88:99:
94:c2:4e:3b:97:de:2c:05:f5:49:af:eb:b8:94:2a:
c6:1b:a5:42:10:7c:53:1e:ba:ba:81:15:67:b4:bf:
63:6f:d1:f0:39:be:40:0a:b0:c6:dd:d1:bf:c4:4c:
d2:69:a7:75:ab:1f:2b:57:6b:6b:d2:aa:8c:24:2e:
59:0a:43:f0:6a:cd:77:85:3e:70:70:27:e9:a0:41:
6d:da:4e:e1:28:0b:25:1d:c2:8c:12:89:ea:cc:e4:
79:94:32:91:65:72:34:69:c0:8f:5a:61:05:b3:4c:
77:d0:41:3e:42:fc:88:e3:6a:12:a8:6e:54:92:68:
4a:c2:14:b3:62:50:a8:55:24:e9:f6:32:92:e6:8e:
95:e1:49:c0:5c:ec:f9:42:17:db:47:61:70:01:11:
0f:54:09:8a:c0:12:be:dd:4b:58:43:b1:8c:6f:ab:
3e:62:01:d4:81:20:40:81:e9:d4:25:af:04:de:4c:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:51:19:DE:BE:70:B4:EC:88:03:0D:6B:65:45:7A:C3:49:88:2F
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:41:75:5e:f7:13:56:11:81:b3:fe:cb:de:06:a4:a3:bf:
28:0c:39:df:30:4d:59:f8:aa:56:80:ac:c7:69:6a:e9:14:dd:
aa:7c:83:73:42:31:7b:6a:da:1e:13:96:c0:9b:3a:92:cf:4d:
29:3f:29:58:74:7e:b2:17:c7:74:05:df:13:1e:23:4a:ff:b0:
35:d6:95:e8:b7:27:9c:a0:ea:f1:8b:57:3b:ad:a0:cb:c4:7f:
4e:9d:c1:9e:dc:29:fe:c7:65:7a:e2:9d:2e:78:70:ff:b1:27:
b8:77:73:34:a2:5f:e2:73:26:89:c8:07:63:d3:b9:27:ab:25:
38:8c:f8:4a:de:48:54:2a:39:0a:6d:34:ef:9a:cc:3d:d0:77:
73:76:93:61:e3:5e:e8:6b:45:90:2f:e9:a0:08:56:a7:1f:5a:
78:e9:1a:36:ca:8f:d7:67:b4:38:a8:65:8a:4a:bf:cb:4f:ef:
81:50:71:9e:42:6d:a3:eb:07:ad:74:6e:41:ed:d4:6b:b0:01:
7a:d2:24:85:4d:7d:87:1c:e6:95:39:d3:2f:a6:17:64:ec:f9:
d9:3e:a9:cc:15:60:26:9c:9a:ba:1d:62:e5:4f:28:36:0f:28:
dc:d1:d0:23:a1:e1:2e:2f:eb:2f:0f:54:fd:98:7b:8a:91:b8:
92:5b:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:02 2025 by rpki-client