Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: pIuu+kOZR8zafHqIf+YalYiVdg58ZNfFJ20NDZ3c3Gk=
Subject key identifier: D9:29:C3:65:47:78:69:8B:B1:94:31:EA:B7:EE:17:23:06:F3:2F:67
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 0198D65FC3BD1D133A435C79DB142DE83515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0D8D
Signing time: Sat 23 Aug 2025 10:00:56 +0000
Manifest this update: Sat 23 Aug 2025 10:00:56 +0000
Manifest next update: Sun 24 Aug 2025 10:00:56 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: iVXO+W468l2DQ5l7AUU/FcIUB/7eix1rdO5KlELKWws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c3:bd:1d:13:3a:43:5c:79:db:14:2d:e8:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Aug 23 10:00:56 2025 GMT
Not After : Aug 24 10:00:56 2025 GMT
Subject: CN=d929c3654778698bb19431eab7ee172306f32f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:0b:a6:02:e1:2d:1d:94:1d:00:b1:bb:6a:
6e:3e:f8:8f:5c:3a:99:1e:f4:68:c2:59:a6:92:f3:
9b:4d:1e:c9:34:71:e2:c6:87:15:9d:ea:ff:c4:f1:
f6:39:e6:ef:e9:39:30:96:4c:90:67:14:8e:ff:5b:
aa:13:39:81:3c:a2:c8:15:45:34:71:9f:98:e4:b6:
c4:75:0c:d9:80:c7:5f:c6:ea:eb:f7:fa:dc:81:a0:
fd:05:83:f7:b4:90:0f:80:30:21:aa:e2:a9:c4:d6:
cd:dd:94:af:f7:36:f8:b7:47:64:16:d9:1d:c4:00:
f0:61:78:79:68:2b:c5:b8:97:9b:80:b7:c1:52:0d:
74:e8:33:ea:eb:1e:bb:af:9f:0b:15:df:1b:e6:cd:
a2:68:a9:73:72:4e:07:1a:27:66:4d:3a:58:b9:0c:
64:75:c0:79:d8:4d:7e:1b:d7:28:12:b5:61:14:ab:
6f:d0:8f:4c:bf:e2:9f:d0:cb:a4:d7:a3:95:7b:f6:
da:6e:0a:9d:ea:9b:87:ea:7d:18:9e:1e:47:b5:b7:
a9:f9:c2:b3:78:56:11:31:24:d8:7b:7b:e1:53:dd:
f3:69:d8:5e:3b:7d:bc:d1:e7:b1:05:56:9c:80:b9:
8d:12:c7:53:77:56:fe:03:3e:a2:b9:bc:56:cc:72:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:C3:65:47:78:69:8B:B1:94:31:EA:B7:EE:17:23:06:F3:2F:67
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f1:7f:82:34:ad:a1:9e:18:04:34:d6:3b:e2:1f:bb:11:95:
68:35:17:0b:3d:5b:b7:86:c6:27:24:ff:5a:8f:26:2c:b2:5a:
e1:d3:dd:12:d6:8d:05:48:d0:e3:a5:04:26:0a:8b:87:ae:00:
c2:73:ac:f5:0a:16:70:71:71:e5:3f:67:fb:9b:64:c9:51:36:
eb:1e:a7:e1:b1:3e:e5:b5:30:37:e6:e0:0e:49:38:3a:12:d6:
b4:83:9d:ff:ae:26:0f:74:ed:63:c7:cb:69:d0:01:2a:da:ba:
a1:c3:55:b8:e6:92:4a:80:81:bf:87:3e:38:1e:3b:ef:bc:b2:
94:69:94:71:a1:c4:6b:e1:4b:b1:41:22:9a:36:4d:a7:73:0d:
5d:e7:43:68:02:ef:71:ea:dd:87:0b:3f:09:4f:4d:a0:3b:9e:
fb:58:59:09:99:2e:58:ef:e4:dc:af:74:be:65:85:04:83:ce:
48:6b:80:5d:10:66:6a:03:ce:9c:3a:1a:67:3d:ff:47:f5:cf:
dc:f3:8e:e5:fb:f3:6d:7b:12:7a:c8:0d:b7:b4:34:fa:f6:8e:
5d:79:c9:a0:6f:35:32:c8:e4:73:95:55:46:19:c9:aa:ae:6c:
a0:27:ca:57:86:41:2a:c3:6c:83:fb:f3:6e:28:0c:ca:b7:11:
a6:0d:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:18 2025 by rpki-client