Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: UmvDTGC1wByFU0EN6mM3nAqzioEBcNHSlQo1ta6Qwng=
Subject key identifier: 29:AE:B9:A6:40:3B:B0:3B:DD:FB:09:59:0C:71:8C:53:91:16:DF:5C
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019897B7E2C71D9C2F4CDDDB3DB2D4ECEBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 06:01:07 +0000
Manifest this update: Mon 11 Aug 2025 06:01:07 +0000
Manifest next update: Tue 12 Aug 2025 06:01:07 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: Wf7DLuUpZ+RnfPs9FKtb7qtKDjq1WXH0giyW0e2OquM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:e2:c7:1d:9c:2f:4c:dd:db:3d:b2:d4:ec:eb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Aug 11 06:01:07 2025 GMT
Not After : Aug 12 06:01:07 2025 GMT
Subject: CN=29aeb9a6403bb03bddfb09590c718c539116df5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:b9:4f:68:cb:f2:90:8c:73:87:7d:18:8e:
ff:8c:ba:ad:8b:4d:9d:85:1f:5b:2c:13:86:58:b0:
3d:ef:37:5b:d5:77:de:0b:e3:33:a8:5e:7c:62:cf:
1e:2d:62:a0:63:c6:d9:bf:9a:6c:c7:d9:9c:e9:ca:
16:d7:40:2d:54:c5:27:a2:90:a9:4b:30:8d:33:03:
68:fd:0f:2d:20:02:ff:1a:e2:6d:22:e6:6f:da:97:
c3:5e:4b:0c:0a:38:6d:ae:f8:73:8a:1b:fe:8c:c1:
99:43:8a:85:19:da:d6:08:d0:7b:20:5b:dd:dc:48:
22:42:bc:50:ab:3a:26:cb:ed:87:cc:95:2b:ae:af:
e1:45:93:a4:62:ab:1b:9c:50:fd:f1:d3:eb:7d:83:
ff:01:8c:95:87:5b:91:f6:5b:6b:11:ad:93:21:93:
0a:ca:98:3c:e3:17:bc:ed:c4:05:ec:1a:64:7a:59:
40:88:95:81:a7:95:b3:30:9c:dd:8a:45:4d:10:6c:
9f:66:2c:33:cd:6d:24:26:95:f9:19:6a:d5:a8:71:
c2:40:6d:d0:6e:db:97:ec:1b:36:25:eb:7a:3a:2b:
b6:72:bb:e7:8c:2d:40:d9:e7:c8:de:4c:8f:72:c7:
f9:9a:f6:02:13:06:45:23:79:63:f6:ea:f2:7d:e9:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:B9:A6:40:3B:B0:3B:DD:FB:09:59:0C:71:8C:53:91:16:DF:5C
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:fa:6b:c0:84:74:8f:e6:1f:5a:26:6f:02:af:d8:37:0a:
81:50:3b:c6:d9:13:4e:62:e9:80:9b:57:d8:42:80:14:a0:a3:
5e:32:32:be:55:32:6e:13:a5:af:fe:86:03:3f:92:d7:fc:b7:
b7:13:89:f6:22:0f:20:34:d9:38:76:31:f6:44:f1:ed:3f:33:
f2:1a:57:46:21:74:51:71:6f:ed:c0:5e:54:59:ed:20:87:6a:
60:af:ab:5e:27:55:36:1a:41:a4:b6:74:dd:87:b4:69:bd:99:
b6:ac:91:af:c9:bd:d5:5a:1c:5f:ea:1b:10:03:36:7b:1a:3b:
7f:c5:8a:87:8b:99:9d:80:1b:f0:ed:ff:13:d7:70:ea:ff:3c:
ee:9d:d3:c6:b8:9b:dd:10:79:5e:f9:cc:e6:b0:02:40:bf:3a:
d5:e4:44:ee:cc:08:de:15:8e:ae:9e:40:ee:94:5b:84:44:4b:
0a:97:be:27:f4:ee:67:9e:18:0b:6b:cc:a6:4f:00:e0:18:c2:
bc:00:34:82:60:8e:8d:f3:8f:07:a2:05:f2:d9:48:b0:cd:0d:
8b:69:e5:70:e6:32:05:73:95:13:8d:5e:6f:2a:ef:92:33:00:
ea:3a:cd:9f:c0:33:39:67:49:07:2c:1d:48:da:7e:7d:14:a2:
c9:f8:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:54 2025 by rpki-client