Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: fmhJyN7FWKDtWDBA4WVysaP7ubiWxKXZ/VMIxCQOORE=
Subject key identifier: 31:A0:EA:BF:AB:07:BC:21:42:52:2F:ED:D2:05:C9:05:DF:3A:79:A8
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0198D6615481D7B722104EFF18AE527971AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0CB8
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: xEgvmtiuRSAnpYrTJ7ZZbaATme8YoBT1BI15w/z48dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:54:81:d7:b7:22:10:4e:ff:18:ae:52:79:71:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=31a0eabfab07bc2142522fedd205c905df3a79a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:51:5b:76:cf:39:17:b8:c0:16:88:71:f2:
3b:04:ae:b6:61:84:c0:ea:7f:d2:8b:eb:20:d0:03:
e6:63:a8:f9:bd:eb:87:ba:34:c9:d7:39:d6:1b:8a:
f9:92:f7:5a:94:a9:e9:d4:69:f0:8e:37:9b:84:40:
9e:4a:f8:6b:70:f6:d2:b8:d2:24:11:18:e3:e5:b0:
4c:d8:18:68:6b:eb:6a:d0:af:ff:b2:8d:69:d1:ac:
4f:26:0f:e2:e8:df:ac:17:e3:65:89:a2:62:00:1c:
16:80:ac:7d:dc:40:5d:3a:3b:cc:2c:7f:56:7a:7f:
2a:27:4e:a4:a1:b1:5f:99:0e:36:7c:7e:71:09:c2:
f1:63:c5:fb:4b:4f:ee:eb:df:29:bf:fa:dd:36:69:
52:e8:f4:e5:64:a2:18:b6:63:24:46:cc:dd:ef:bc:
8e:01:72:e3:27:86:b7:b9:ba:99:31:e1:bc:ed:e9:
b6:61:ff:a6:d0:5f:39:2d:cf:6b:0c:cc:1f:1d:61:
a3:c2:ed:63:66:e8:8f:62:6b:ba:fb:b0:24:5d:88:
fd:ce:9c:2b:a7:9b:fe:88:cb:06:47:52:3b:db:bd:
e2:1c:15:3e:72:44:34:fb:7a:4f:a6:1a:22:90:80:
22:8a:e8:71:af:6d:f4:2e:58:86:71:23:59:cc:bb:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:EA:BF:AB:07:BC:21:42:52:2F:ED:D2:05:C9:05:DF:3A:79:A8
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:ad:ba:77:b8:e6:40:28:52:dc:f3:d2:a7:06:c1:d9:95:
93:a7:a5:8c:61:62:5a:54:b2:cf:cc:ab:47:e3:92:f0:2b:38:
e6:4a:bc:71:ca:e0:e5:d9:dc:4d:9f:ba:c6:02:80:c4:e5:06:
1f:d7:87:c3:5a:b7:29:2b:34:c2:5f:ab:52:2d:23:5b:7d:3e:
21:15:99:5f:bd:de:45:a7:8c:cb:85:ac:24:57:e0:a7:e0:9c:
58:57:05:d7:2c:99:04:d4:50:70:4d:dd:d7:3c:43:e1:be:a7:
35:3c:39:d0:1e:35:39:0d:7f:7c:7d:17:71:c1:2f:b9:ee:18:
6d:9f:12:dc:fa:ea:5c:a1:eb:06:53:5c:43:eb:d4:d5:2b:b3:
16:1b:f5:1a:c8:97:d6:9c:06:39:cd:a5:66:5b:0f:45:25:2d:
e8:e9:e7:75:7d:2e:a6:14:32:15:2a:50:22:ae:91:7d:b3:84:
09:93:58:84:63:54:07:c3:de:ed:93:b3:4e:dc:7d:41:7d:13:
e2:d1:cd:4b:c4:f0:98:6e:0e:1d:c0:d1:80:16:e2:ce:25:a4:
09:99:8e:f1:87:bb:8d:02:fa:d2:1d:01:26:c5:b9:91:f2:43:
71:ab:d9:f5:65:4e:57:4f:df:e9:fb:c7:d9:12:71:96:e4:31:
73:a5:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:20 2025 by rpki-client