Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: pcYnXcii9fXF5rY4P0FU2WIxZBwNha9CCwuUkXRfud8=
Subject key identifier: 34:3D:9A:3F:01:C0:9F:7F:6F:05:75:61:5F:08:D7:66:5D:91:D6:C8
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 01989411B2BB1CE73EE3D7ABB079797CF2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0F24
Signing time: Sun 10 Aug 2025 13:00:44 +0000
Manifest this update: Sun 10 Aug 2025 13:00:44 +0000
Manifest next update: Mon 11 Aug 2025 13:00:44 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: oef8rCh3BkX0xvCjzqPx7u6cJIK+wklx+2Rkxtv31XI=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:b2:bb:1c:e7:3e:e3:d7:ab:b0:79:79:7c:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Aug 10 13:00:44 2025 GMT
Not After : Aug 11 13:00:44 2025 GMT
Subject: CN=343d9a3f01c09f7f6f0575615f08d7665d91d6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:66:4a:53:89:9f:50:be:c0:18:57:df:de:
c4:2e:c8:ff:e2:4e:f0:d8:5b:de:5e:86:63:65:8f:
2a:f8:49:ec:73:ce:66:b4:a9:c7:c1:af:f9:03:37:
76:b1:1b:5c:35:18:5e:e3:3d:9f:96:00:7b:57:ae:
82:28:22:2a:5c:2f:9d:3b:69:0e:7f:b0:14:9b:58:
02:5f:af:23:8b:c2:78:46:bf:75:b4:48:52:57:8b:
86:ee:45:47:8f:4d:b8:9e:10:7c:8f:7d:2c:45:be:
0a:d3:9e:c9:7d:f6:dd:84:5f:d0:06:95:76:42:aa:
ab:63:a4:1a:a6:df:3c:53:1d:b0:68:60:8e:2f:7d:
7e:8b:7b:d3:67:23:6c:79:66:e8:4f:ac:6d:be:1a:
45:55:ef:10:e2:a6:ee:20:b4:64:bd:a3:4a:e4:87:
c9:23:2d:0b:97:4f:0d:c7:c2:25:73:86:75:39:de:
5c:c4:65:be:04:a3:4e:8b:b7:9b:cc:1d:2b:34:cd:
3c:90:f9:67:c1:2a:32:85:7e:0f:fe:2c:7a:c3:81:
ee:fa:cc:4b:77:2d:85:b5:c6:bc:6a:44:d2:9c:96:
97:24:d6:ee:aa:4f:91:48:a6:19:f4:45:4e:5e:51:
57:c7:45:89:69:08:f9:f0:25:1f:b7:0d:a9:0f:b2:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:9A:3F:01:C0:9F:7F:6F:05:75:61:5F:08:D7:66:5D:91:D6:C8
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:4d:ab:62:94:27:f7:fb:cf:eb:9c:73:f5:d9:ba:e9:f9:
de:22:85:22:18:a9:56:93:f8:59:bc:8f:9f:d4:53:0d:a3:5a:
4a:dc:30:25:d9:a4:c1:cc:b4:d3:e0:5e:06:5c:88:72:6a:13:
c4:58:e6:0d:74:3d:f8:35:7a:a1:33:e9:18:97:b3:e1:91:d7:
5c:f7:2d:a9:d9:c8:6b:dd:31:ae:b6:6f:06:5c:30:b4:3c:2d:
ee:70:bd:3f:24:a3:37:51:9b:15:81:0d:cd:61:59:a9:02:95:
43:4f:a6:b0:3c:6c:37:ff:f1:41:b7:0d:eb:32:e0:78:09:6a:
48:41:00:e4:e5:7b:ef:71:2b:55:27:32:2b:25:e0:b3:23:dc:
dc:ba:33:df:75:c6:48:c9:bb:f1:a1:b8:b9:e0:7e:f0:d3:ac:
5c:6d:7f:65:87:e2:43:22:41:a3:94:b6:5c:87:d3:c1:f6:93:
e5:8d:03:2b:31:56:30:68:22:3e:a6:46:2f:e2:ee:06:44:6c:
10:76:4d:4b:9d:a0:71:ed:bb:0a:71:cf:69:c8:d9:01:31:ad:
76:e2:d2:89:a0:55:42:1e:c4:cf:c0:6c:26:1b:48:c9:56:96:
80:f4:4b:f6:e5:96:4f:21:33:c8:36:b0:1d:95:f3:f6:db:9c:
c9:64:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:37 2025 by rpki-client