Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: H1oExW90xvREhkdLHICDCtnUaefwfb0Vy7ENlERZ4Kk=
Subject key identifier: 9B:69:00:E4:23:2C:13:00:C4:7E:6C:6D:27:71:06:D6:38:39:E0:E6
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 0198A0F15E6A6AFA0A1341C68AAED2962EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 162A
Signing time: Wed 13 Aug 2025 01:00:29 +0000
Manifest this update: Wed 13 Aug 2025 01:00:29 +0000
Manifest next update: Thu 14 Aug 2025 01:00:29 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: IXtIgn4pDYhjCzJWPeQULFUgpbqpWKdEN1m5m4gxkJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:5e:6a:6a:fa:0a:13:41:c6:8a:ae:d2:96:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Aug 13 01:00:29 2025 GMT
Not After : Aug 14 01:00:29 2025 GMT
Subject: CN=9b6900e4232c1300c47e6c6d277106d63839e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:7b:26:db:94:f0:8e:96:97:9e:ae:e6:dd:
2e:a5:78:77:f6:a0:0c:0e:c9:9d:b2:9a:b8:f0:65:
b7:6a:99:40:d7:e1:6c:7a:00:cd:8c:aa:83:e5:27:
85:a0:cc:2e:20:44:69:44:c6:36:87:ad:be:1c:6a:
07:09:50:ca:84:e7:55:95:27:b8:2f:e3:88:0c:d2:
21:88:36:ff:8c:44:5c:16:08:c7:99:19:22:8f:ab:
0a:41:ef:c8:dc:c8:89:d2:f0:cd:46:ef:11:3a:4c:
ba:a8:ab:cf:e8:48:6e:24:da:52:b1:9c:b1:fb:3a:
9a:f7:04:c7:51:ee:9e:9b:98:01:0d:9c:e3:5b:bb:
36:a8:86:65:b9:d6:a8:fa:6b:26:24:c5:bc:6f:fb:
30:c0:cf:04:e3:5e:cf:b0:75:36:43:00:e1:09:9e:
8f:68:56:70:78:14:65:d8:a6:a0:e3:bf:92:7e:65:
bd:fd:e8:0f:65:0d:04:8a:3c:b0:a3:1a:c1:65:24:
37:4f:e4:9b:34:7c:83:22:ec:2f:8b:76:2d:93:c3:
fa:bf:5f:25:ea:84:35:e3:bb:05:4f:11:f4:3e:a6:
d3:b6:f9:ac:5d:33:9c:b2:87:4a:41:f6:57:b0:f1:
cf:a8:da:b1:8e:19:b8:09:c1:dd:50:5a:cd:7f:6f:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:69:00:E4:23:2C:13:00:C4:7E:6C:6D:27:71:06:D6:38:39:E0:E6
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:42:0f:3e:bd:ad:4b:27:17:89:34:90:a2:b3:c1:78:93:
40:e8:20:0a:62:29:53:3c:51:9e:8c:5d:08:24:a6:1d:7c:6d:
d7:08:01:1e:5a:a4:74:6a:e1:13:a1:bd:e0:d2:22:f4:fb:7a:
be:e6:fd:08:98:47:88:be:a8:97:24:2d:cd:4a:91:8d:e6:2c:
13:f2:98:ac:4b:f9:6e:23:ec:0b:f1:89:3c:6d:66:e3:42:0f:
1a:37:72:64:f7:15:74:21:07:e4:83:d9:b4:22:cf:8f:f5:0b:
a5:47:ab:bd:43:77:89:fb:fd:07:f5:a2:11:97:be:da:e7:ff:
69:cf:14:1d:db:70:d6:5d:85:1a:2b:8f:12:4e:4b:76:65:b2:
7b:b7:68:97:cf:42:cd:fc:cf:09:f7:fc:77:99:44:e9:81:8a:
58:31:19:ef:61:ec:c1:80:d5:7a:c2:41:9d:df:03:a3:58:99:
44:1a:18:1a:d9:a0:45:87:8a:88:0e:e6:dd:3c:ed:22:02:b5:
20:d0:9c:f3:7f:76:26:a4:08:9a:f2:28:b1:cd:4f:69:4b:97:
f2:0d:58:f8:19:e1:21:63:ae:e4:2e:1e:23:6e:1a:34:bf:8b:
ba:a3:90:20:f3:d5:f0:2f:17:9c:0c:02:6d:57:37:13:a1:d4:
c0:ee:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:27:27 2025 by rpki-client