Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: Th/02KpXV8Kn8H8ZvmVRbdAEeusUXnM3O2nx6NthXBU=
Subject key identifier: CA:61:18:34:6D:7E:A5:3D:36:7C:D5:FD:94:FA:AD:E4:FD:8A:04:17
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 0198D73B32204D7BF4015F5C11C7361295F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:00:37 +0000
Manifest this update: Sat 23 Aug 2025 14:00:37 +0000
Manifest next update: Sun 24 Aug 2025 14:00:37 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: ticiG7rz5IJknfi/2BXlhkekqWeaqmVDcE0qxdtq4Ts=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:32:20:4d:7b:f4:01:5f:5c:11:c7:36:12:95:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Aug 23 14:00:37 2025 GMT
Not After : Aug 24 14:00:37 2025 GMT
Subject: CN=ca6118346d7ea53d367cd5fd94faade4fd8a0417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:f5:fc:44:be:88:40:8c:27:5f:86:e0:75:
68:9e:43:a4:b4:ef:81:32:f5:cc:12:10:d9:12:56:
ed:37:7b:99:a7:42:1d:36:ee:9d:99:fb:34:9c:38:
7b:af:03:76:e8:12:14:5f:99:77:78:51:15:d5:52:
7b:e3:38:6d:a1:92:12:1a:b8:93:c0:48:86:5a:ce:
1b:7f:3d:13:39:f7:d8:b7:5c:90:35:80:9a:ef:78:
a4:20:12:ee:3b:0d:4d:0f:a6:8e:f6:e6:45:3c:e3:
6b:15:f6:41:85:40:1f:d8:0f:e9:3b:13:6d:2d:c2:
e7:3b:60:69:48:56:00:47:c9:cc:67:6a:6f:86:3a:
33:4e:bd:50:b4:91:a5:65:75:3b:6d:5f:42:c4:2a:
35:7e:0b:2c:40:ed:9d:2b:04:2c:47:85:d1:b2:82:
59:cf:0c:52:1f:56:f6:c1:61:aa:a4:ec:43:33:9b:
59:1a:3b:3e:74:f4:e9:a1:11:70:3d:67:18:84:e4:
28:ca:ff:44:dd:cd:a2:45:3c:7b:01:21:55:32:03:
12:8b:2a:09:c1:d9:79:89:52:54:17:00:b4:73:fa:
c2:6a:3b:ef:95:27:3b:06:25:b9:9c:6e:91:ee:45:
d0:a2:66:ce:34:d8:0e:d7:f0:a3:d2:8e:ce:81:03:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:18:34:6D:7E:A5:3D:36:7C:D5:FD:94:FA:AD:E4:FD:8A:04:17
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:3e:97:16:c9:91:5c:e2:4c:1c:ed:22:ff:64:1b:be:46:
4d:2a:1c:5f:f3:a9:49:21:2c:62:79:e5:e7:5c:d3:78:db:cf:
84:28:15:5d:7a:9c:e0:5e:48:24:1f:25:3b:80:43:05:7e:ce:
68:0d:ef:b8:a0:5b:24:c9:e2:9a:9e:15:82:37:b0:79:d9:08:
c3:32:96:c2:40:e3:da:f1:49:f9:96:99:07:af:ef:b7:d9:b4:
0c:d6:8e:97:ef:45:bd:ad:5a:e1:44:09:69:f6:05:cd:a5:36:
c7:51:17:eb:ee:47:f4:c2:ac:bc:59:a6:fc:fa:c1:cb:99:81:
ca:7d:6a:07:a4:e9:c4:ff:e7:c0:19:55:be:5f:5c:86:59:6f:
f1:93:92:35:12:49:b2:84:5a:32:23:0c:77:fd:d3:2e:91:cd:
1f:8b:16:1a:13:8e:86:59:88:2d:d9:8f:76:6a:3d:d4:f7:74:
f4:7c:ec:11:21:45:42:65:3a:2a:0b:68:bd:e9:24:90:87:fd:
da:da:cb:06:0d:20:d3:97:73:30:dd:49:b9:c4:1b:eb:21:a6:
35:16:2e:4e:b0:83:2a:9d:18:8d:53:1b:2c:42:2a:2c:8b:ef:
27:b7:28:a1:e1:1f:cb:2e:3f:32:c3:b6:8b:45:4d:71:a9:00:
b0:aa:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:16 2025 by rpki-client