Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: X0b3lFrEVLbV9u7wmHAtKm2jruM7iRwZuffSzhZ4/3Q=
Subject key identifier: D3:38:61:34:28:F7:B4:41:F2:CC:1A:5C:9B:2D:54:D9:6C:89:F5:4E
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 0198D54EA5AB91D22F568B0D0F740C05137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: mBpfTbmz7/JxEPAa+Djdtobv74EHvrRxhY0oVjz6j3Q=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a5:ab:91:d2:2f:56:8b:0d:0f:74:0c:05:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=d338613428f7b441f2cc1a5c9b2d54d96c89f54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:4f:af:c1:bf:1c:bc:f1:2c:ff:04:ca:2b:
38:df:b2:c9:c0:2d:fd:c2:7e:b9:32:d6:25:59:e2:
64:5c:8c:49:12:d1:d8:46:c9:32:7d:98:8d:87:eb:
ca:96:55:c0:0c:cc:59:6c:4c:56:cc:88:fb:2c:74:
c7:73:e5:57:3f:8d:c3:24:49:ed:09:70:12:4d:68:
ac:f1:7e:3c:ba:2d:b1:ce:f4:da:3a:f8:2a:b0:e4:
5f:e0:b2:0d:58:ce:6b:d0:62:4b:8e:ad:c0:de:14:
44:f1:52:bb:e1:08:06:66:cf:f5:e2:f9:ac:37:ec:
ae:b1:51:fe:01:3a:65:b6:21:47:f0:7d:ac:cd:65:
77:4f:a0:f2:a1:42:83:09:65:be:d5:9f:a1:7e:25:
cf:93:d4:ce:db:7a:4a:9f:b3:22:95:bf:b1:f6:f1:
de:b7:09:06:f6:e5:b1:c1:57:74:ac:db:01:43:3b:
00:98:1a:b9:59:85:09:ea:ae:dd:46:2f:ee:e8:f0:
1f:64:f0:30:46:7f:b2:f8:a2:e6:62:49:a5:30:b0:
97:de:d2:d0:ea:2a:4b:8e:9c:f5:13:15:6d:83:d5:
88:c7:bf:fe:b5:b0:14:a0:4d:d2:3b:51:3a:f1:1e:
c2:26:b5:1f:93:0a:82:97:29:2e:ad:91:a2:7c:6e:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:61:34:28:F7:B4:41:F2:CC:1A:5C:9B:2D:54:D9:6C:89:F5:4E
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2c:69:21:c5:a5:d3:f8:b1:48:d1:80:fc:4e:14:f3:b6:e3:
5c:bb:94:f8:7b:ba:5f:eb:07:94:3f:ec:1a:e8:64:5f:50:6c:
6d:5b:1f:1a:8a:e1:4a:33:b8:b1:e0:9a:73:cf:28:e7:93:ab:
e5:22:ec:ef:6b:ce:8a:26:1c:8b:15:ab:66:04:b3:e4:5f:2a:
21:e4:eb:77:af:ce:83:9a:b2:c0:2d:d2:fc:75:3f:06:f2:87:
81:b0:85:2b:13:1e:45:d7:8a:6c:09:11:db:7b:76:4c:7e:a1:
84:0f:3c:83:1b:82:88:5f:5f:a4:80:44:b7:e4:d7:91:d7:23:
ee:33:0e:d0:85:ba:45:b2:3b:12:30:85:29:30:6f:bd:b9:1a:
59:9b:c0:cb:25:f1:9c:b0:80:a3:02:4c:af:70:66:5e:40:10:
d7:e2:9f:3b:47:4c:1a:61:f3:e4:59:0f:6e:e6:a1:cc:21:df:
34:e9:34:75:96:eb:fc:4e:39:b7:0c:4d:07:48:6b:4e:07:e0:
fe:b9:6f:cc:7c:45:7d:ef:8a:a2:bd:cb:51:37:53:a5:1d:ac:
85:9c:37:01:a9:b6:e0:d8:bb:b8:4e:b2:0d:0c:e0:6c:44:11:
03:dd:e2:de:ce:7a:46:d9:5e:c7:d4:de:46:e0:c6:12:6a:43:
07:61:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:27 2025 by rpki-client