Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: wRT7Mdu2y1hEXzR08R2lJTP7uWcbqU2mgJUt9izlsWE=
Subject key identifier: 5C:9B:1C:83:9D:F0:14:80:8B:5A:D5:C9:81:62:0B:57:FD:8A:B3:89
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 0198D884AB993BFB7958FA591F42F7004C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 20:00:29 +0000
Manifest this update: Sat 23 Aug 2025 20:00:29 +0000
Manifest next update: Sun 24 Aug 2025 20:00:29 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: n6LDXCC8cqRYjH7mY04wBG/XoerFjmw1nb4rGdMi0s4=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:ab:99:3b:fb:79:58:fa:59:1f:42:f7:00:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Aug 23 20:00:29 2025 GMT
Not After : Aug 24 20:00:29 2025 GMT
Subject: CN=5c9b1c839df014808b5ad5c981620b57fd8ab389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:41:80:85:0c:65:ba:af:cd:53:90:1c:a5:
6f:a5:96:14:8b:c2:21:f2:64:13:63:10:b0:29:a9:
8f:7e:69:4b:6a:25:33:d1:06:c7:49:20:81:70:17:
18:fd:85:31:b1:18:40:9a:e9:7d:f1:f4:f2:e9:18:
a3:70:e2:e9:ce:71:49:cc:f0:a9:c0:fb:77:a1:9d:
34:9a:a4:eb:47:d9:e4:31:02:dd:f3:d9:8f:2a:bc:
d1:06:e3:f0:80:54:8c:49:96:64:8a:80:a4:cf:5f:
2f:04:05:89:ce:8a:71:18:85:f0:79:cc:56:50:c6:
fd:f7:8b:26:5f:4c:7b:4c:f8:25:ff:61:25:16:a1:
14:57:c1:7f:5e:e7:1a:40:8e:d7:b4:32:20:2e:a1:
9d:35:46:5f:62:64:8f:ee:9b:f5:f6:b7:7f:aa:3b:
04:a1:9e:51:0d:98:5f:96:1b:77:c3:fa:fb:83:3c:
16:8c:4f:0f:cb:60:81:cc:de:2f:ad:71:3d:60:49:
0a:24:18:09:8d:b3:3f:88:40:d8:e1:bc:25:85:71:
60:d1:4b:86:8f:e5:9f:03:5d:26:6f:36:3c:3c:00:
29:a6:84:9a:c9:16:b3:19:66:df:ca:75:51:39:88:
0a:1c:aa:63:a6:f5:41:33:5c:e4:91:af:51:3d:36:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:1C:83:9D:F0:14:80:8B:5A:D5:C9:81:62:0B:57:FD:8A:B3:89
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4c:0c:b8:f4:b8:d7:b6:fa:d8:f4:6a:1d:76:39:e0:41:83:
fa:f8:a4:9f:94:d8:57:c2:0f:a4:33:02:51:1d:7b:21:c3:41:
c1:c2:c5:49:39:03:6e:03:a0:41:ef:b8:ef:22:b3:45:47:7d:
38:03:07:91:90:76:26:22:4b:cc:b2:b1:5c:44:e1:bd:81:32:
7d:ea:04:f2:e3:f6:4d:8d:22:60:d3:e7:8b:d2:c2:27:05:b2:
2f:60:2e:7f:7d:3e:8b:5e:81:be:fc:20:c3:f2:99:0a:bd:68:
6d:4a:1f:23:5c:f4:9b:3e:1a:6a:91:b7:aa:f5:cc:89:a7:e4:
e6:e4:64:4c:40:85:77:54:b1:6f:e3:19:ff:8f:7b:f7:ff:8e:
ed:8a:13:13:75:c3:15:30:c6:7f:4c:31:2c:20:1d:8a:78:ad:
f4:7b:dc:00:19:2d:46:95:fb:9e:df:65:6e:0c:e8:4f:68:2e:
72:ff:e1:20:e6:34:f0:c4:f2:71:e7:1d:93:d3:c6:47:4a:2e:
38:28:7f:12:ac:14:8c:ba:4f:b4:b5:d5:29:19:87:08:da:ad:
5f:55:7c:0e:da:a4:04:3b:96:23:bc:0d:a0:3f:12:f4:5a:de:
14:19:b1:23:82:e1:9b:07:85:2c:ce:e2:4c:2c:d0:fd:6d:62:
cf:29:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:42 2025 by rpki-client