Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: vlEGmLhoLW77RilSRhcjFgYfgv2sxibmm6c42b1E5J0=
Subject key identifier: 9F:FD:A9:15:29:83:60:14:97:15:B8:06:36:D6:22:79:0B:04:DB:16
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 0198D5BC3AEC5E31A784862022538F08C4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: UwYmM0+smKa4HY5FgkfiZF+HhAglBWkecaqzS41Ol4g=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3a:ec:5e:31:a7:84:86:20:22:53:8f:08:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=9ffda915298360149715b80636d622790b04db16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:07:3e:48:5f:4f:3b:5c:bc:ad:09:d1:ab:
7b:a7:0e:0b:97:f9:b9:9e:f7:7f:59:24:b1:99:cb:
b5:c4:64:ad:26:6c:8e:23:04:5e:60:b1:c5:c7:dd:
81:3b:df:f9:c5:82:f5:48:36:af:5c:27:46:d7:8d:
5e:df:ca:a9:72:57:8f:23:7b:36:6a:ff:d4:34:b7:
cd:de:48:ac:09:b1:ee:1b:ae:05:72:51:0e:9e:d2:
a9:bf:1c:52:d4:72:1d:50:aa:a5:33:3d:7a:b9:b9:
cd:00:d9:ec:4d:5f:05:57:aa:dd:a2:ab:59:d2:e4:
3b:f4:b6:cb:40:82:5c:74:64:b5:7c:a1:63:84:71:
ef:08:88:f3:73:68:3f:91:09:8a:fb:37:bf:9d:51:
9d:8a:0d:b2:27:ab:43:a2:9a:11:79:4d:a7:3e:f4:
56:69:5c:c1:71:63:19:5e:fc:b3:b7:97:58:11:dc:
2d:3c:bc:c8:59:d9:63:a1:12:09:78:a9:fa:22:87:
bd:45:b8:9b:6e:87:36:0b:e1:75:d2:04:26:e1:43:
d3:b6:1f:5c:54:21:e7:06:76:b7:76:5d:1d:ed:50:
15:d6:66:a0:c0:4a:9f:1c:79:ec:06:b4:fe:67:de:
1b:28:5f:e2:0f:4a:61:fd:e5:b7:ae:46:29:d5:e6:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:A9:15:29:83:60:14:97:15:B8:06:36:D6:22:79:0B:04:DB:16
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:81:a5:c4:08:8f:8b:6b:c1:88:d2:0e:9d:e1:17:af:75:
6b:8d:86:a3:f4:8e:45:b3:5a:ca:6d:1b:f1:46:d3:70:be:3d:
25:83:3b:4a:bf:92:b6:ca:27:4c:8d:5b:11:85:45:ef:e0:f4:
4f:19:65:d8:01:f1:32:d1:97:03:d9:42:2a:e9:39:7d:aa:ee:
d8:76:7b:18:f1:20:3e:82:81:c1:30:a1:31:5f:f7:4b:c0:fe:
a2:62:32:47:5f:53:f6:92:b7:5e:82:22:59:66:06:28:69:fe:
36:41:63:8d:ac:32:56:a3:bc:80:c8:db:cf:11:2a:3a:7c:6c:
bb:7d:0a:99:6f:94:4a:b7:ec:4a:32:0c:90:b3:71:5e:ad:db:
60:a1:1d:e1:ac:e7:8f:12:0a:98:d7:ae:44:d7:a1:e2:7d:4a:
09:da:b8:2f:eb:83:1f:2e:0b:75:4c:27:9f:7e:27:6e:6c:99:
40:2b:a1:66:1e:23:89:54:6e:bd:86:93:ab:a9:ac:53:c0:2f:
84:be:2c:12:98:7c:95:7d:19:89:fd:67:64:d1:92:6b:f7:34:
eb:a5:f8:fc:24:07:33:f0:7b:1c:5b:78:4e:f8:6f:ee:0e:1c:
92:e9:ed:c4:17:e1:7c:bd:c0:ef:12:e5:ae:cc:a6:8d:dc:7c:
cc:03:fe:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:58 2025 by rpki-client