Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
File: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft (raw, json)
Hash identifier: wTWPcVoJbRWWqxOOfoocizfyNhRGAHVhxslXkpdyDNU=
Subject key identifier: DD:4C:33:65:6C:D7:EF:4F:D0:89:A3:28:6A:F9:96:59:0F:89:35:8B
Authority key identifier: 82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
Certificate issuer: /CN=8260c94351066ec06debfab2bca9dfaed407e698
Certificate serial: 0198D6CCF429B51F8EA19050B0B8EA3F698D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
Manifest number: 06F8
Signing time: Sat 23 Aug 2025 12:00:12 +0000
Manifest this update: Sat 23 Aug 2025 12:00:12 +0000
Manifest next update: Sun 24 Aug 2025 12:00:12 +0000
Files and hashes: 1: gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl (hash: yO9ZJoM7StsCupM7pBzMcnHaubYm92f4Bsucy8flGN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f4:29:b5:1f:8e:a1:90:50:b0:b8:ea:3f:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260c94351066ec06debfab2bca9dfaed407e698
Validity
Not Before: Aug 23 12:00:12 2025 GMT
Not After : Aug 24 12:00:12 2025 GMT
Subject: CN=dd4c33656cd7ef4fd089a3286af996590f89358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:ca:5c:67:29:59:c4:8c:df:c6:95:47:38:
26:1e:6a:8f:d8:67:a3:7b:7b:cd:6e:f3:19:ce:1c:
f1:60:1f:e7:7e:47:94:9b:70:f9:8c:5a:f1:21:44:
9c:01:9d:86:af:74:af:f6:15:e5:43:0b:19:03:75:
5d:93:5d:00:a0:af:60:ea:44:19:25:61:6d:43:d3:
02:96:34:36:96:f5:42:1c:af:c3:ba:ab:79:08:28:
b4:25:67:11:c7:ee:bc:22:b4:bd:ca:a0:98:b4:7f:
ef:59:be:3b:00:c3:7a:8c:d8:5e:04:7a:15:67:56:
8a:11:29:0b:42:01:3c:80:3b:82:62:1e:d7:e7:48:
8d:2d:6a:79:e9:1c:1b:67:2e:9b:8b:7e:cd:34:2c:
23:7e:17:80:2c:96:14:0f:32:c3:90:87:15:b8:10:
5b:d1:46:c9:1a:00:3e:63:7d:c7:89:06:76:63:79:
79:cb:4b:11:6e:ba:d9:59:85:4a:b2:8d:3f:ef:bf:
24:cb:6f:b6:ca:87:a7:ba:4d:35:ef:22:4e:34:ba:
ce:bd:4d:27:68:ea:34:af:61:59:8e:21:0d:c5:6f:
da:b7:c8:63:d5:82:01:af:a6:86:58:00:e7:75:42:
85:7f:f1:3d:fe:06:6a:95:b1:ec:4d:9c:fb:e7:72:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:33:65:6C:D7:EF:4F:D0:89:A3:28:6A:F9:96:59:0F:89:35:8B
X509v3 Authority Key Identifier:
keyid:82:60:C9:43:51:06:6E:C0:6D:EB:FA:B2:BC:A9:DF:AE:D4:07:E6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/86cd9a-e732-4ff5-ae44-8464a8114180/1/gmDJQ1EGbsBt6_qyvKnfrtQH5pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:bf:8a:99:88:e6:e5:02:2e:91:b9:41:92:af:85:d3:80:
e9:a1:e6:a8:be:ea:ae:1c:85:2a:48:1e:84:06:d7:cb:47:e5:
f2:d7:ab:43:4e:75:bc:c5:11:2b:ad:ca:75:24:f0:89:ce:76:
95:e6:3e:50:d1:43:0b:cc:6c:74:40:fa:8a:a8:c2:a5:3e:d5:
0e:56:ef:b5:34:de:63:a8:c5:63:4c:6e:4d:20:f9:09:f3:6c:
21:db:07:5d:13:7a:52:ca:c9:71:2e:6f:de:e3:50:d4:96:3c:
0a:1b:c4:ca:2d:17:ce:26:e6:8e:c9:57:99:e2:c9:8b:d0:bf:
b1:78:e9:87:02:92:5b:72:89:cd:e6:4e:98:b3:e0:cb:62:2a:
14:90:11:dc:17:90:b0:ce:f0:b5:4e:cd:15:5a:80:3c:28:1b:
1b:09:d1:a9:fb:ac:c8:73:8d:88:84:a9:7d:90:d2:1e:49:f8:
8c:6b:b3:1a:19:04:9f:2d:44:9b:2b:98:6c:50:5d:81:17:dd:
cd:cd:ce:18:13:45:e6:8e:6e:b7:43:17:9b:7c:4e:8d:39:cf:
d3:da:a2:ba:3f:66:23:a0:74:0f:2e:69:f5:50:88:5a:bf:a8:
e3:44:73:92:a1:60:72:c8:22:47:46:10:27:90:9b:bc:65:8e:
f0:cd:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:34:12 2025 by rpki-client