
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: UXOrZFEwgZ4H+sF6BZ+SgmNEimdxqjtJB1cz/n0GQNI=
Subject key identifier: A4:B3:BA:18:A8:9A:98:E5:40:CB:98:65:EF:91:C4:23:63:27:8F:F4
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 01988B7CD2D1E053A0D5FD6D69B8F4504BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 21:01:10 +0000
Manifest this update: Fri 08 Aug 2025 21:01:10 +0000
Manifest next update: Sat 09 Aug 2025 21:01:10 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: 5Fk1j1I2K5RM0/oi78Sj9Uf39YXwrzW1xIwTZtWumII=)
2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d2:d1:e0:53:a0:d5:fd:6d:69:b8:f4:50:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Aug 8 21:01:10 2025 GMT
Not After : Aug 9 21:01:10 2025 GMT
Subject: CN=a4b3ba18a89a98e540cb9865ef91c42363278ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:74:4a:0e:32:aa:24:fb:14:5f:14:14:33:
82:67:8a:2b:1e:40:69:56:4d:6a:13:4e:68:0e:0e:
12:cb:85:22:a6:f6:d7:90:fb:6c:73:32:64:bc:7d:
2c:2f:21:28:dd:ee:25:67:f9:da:6b:8d:3f:7b:71:
31:c2:11:aa:38:b0:5a:8a:22:4e:78:26:ca:06:21:
1a:85:c0:c2:93:1b:3e:de:e3:4d:ee:4b:b8:7a:21:
e8:01:64:97:b1:6e:cb:e6:3c:a8:59:ae:6b:ba:3e:
60:42:dc:aa:2a:8c:08:1c:47:01:d7:97:7e:02:eb:
8e:68:0d:1f:a3:a3:66:b6:51:53:7d:a2:b0:d5:aa:
d9:78:5d:a5:6e:07:d7:7d:23:bf:86:c8:b6:b1:44:
0e:76:06:f4:02:c5:04:76:3a:bc:f2:03:7d:17:b6:
7b:9a:a4:2c:1a:0d:58:cb:4d:5c:33:bc:cc:49:b4:
e0:0d:c5:66:5d:a3:fe:5f:7b:45:b9:10:fa:d6:a5:
f3:9a:e5:86:0d:81:ed:d9:50:f6:07:d1:0e:4a:e2:
c1:11:c5:0e:3e:59:2d:cb:6c:f0:ed:fe:7f:4f:a2:
9a:d3:f2:aa:57:63:74:68:09:fa:e3:ac:28:05:6c:
f5:99:a9:0d:04:2b:9e:bc:a6:a8:5a:e7:b0:1a:27:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:BA:18:A8:9A:98:E5:40:CB:98:65:EF:91:C4:23:63:27:8F:F4
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:a1:8c:00:c7:88:75:20:fb:65:2e:61:eb:3c:31:da:bf:
4c:6c:0f:f8:63:5e:6d:87:6a:4f:4e:79:47:57:7d:78:dd:21:
12:f3:c1:94:b9:1e:6b:50:90:5f:af:3c:72:69:52:c8:9d:26:
c7:2b:62:99:20:34:95:f5:c7:c5:cd:7d:8c:6f:17:fa:5f:8c:
d8:70:8f:23:92:93:95:6d:9d:da:78:d1:97:0c:a9:9f:0a:5b:
70:0c:29:3d:bb:d1:b4:64:17:fa:9d:84:94:2c:b9:b3:6c:49:
56:75:72:30:fb:a2:6a:32:f8:47:80:ed:6b:54:84:18:dd:62:
78:e2:ef:11:b6:6b:ca:15:f5:0b:21:26:62:d0:34:75:04:72:
e4:1a:a6:4e:3c:dd:63:b9:9e:60:ad:1d:be:55:c0:81:ec:52:
4b:a8:57:89:85:7e:d0:72:00:f7:fd:b7:b1:00:ef:5a:66:49:
f2:a8:5c:59:a0:69:65:b3:2c:c5:2c:58:47:9f:35:a5:a4:7c:
7e:8a:e6:d4:be:64:45:32:aa:15:4f:3e:c0:4b:de:21:4c:87:
06:ef:88:9a:50:0b:32:82:35:db:eb:e2:2b:b3:dc:17:f4:da:
d0:bb:79:56:fc:14:3e:ad:c9:34:5c:c4:94:f2:46:34:32:97:
8e:38:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:42 2025 by rpki-client