
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File: GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier: YQlXqzTbjPSteAvgjumDTVsEy26KvAUH4945C9hKWDE=
Subject key identifier: B0:24:3A:7D:83:94:F9:8C:D2:4B:95:84:BE:6C:B9:09:62:C1:13:6E
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer: /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial: 019885B1B2789329C26C6BD048603A9AC7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number: 1301
Signing time: Thu 07 Aug 2025 18:01:11 +0000
Manifest this update: Thu 07 Aug 2025 18:01:11 +0000
Manifest next update: Fri 08 Aug 2025 18:01:11 +0000
Files and hashes: 1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: IlM4emxeVsfw/7R5xRmHhAHsUnAYmPLnqY34CYNJqxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:b2:78:93:29:c2:6c:6b:d0:48:60:3a:9a:c7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Validity
Not Before: Aug 7 18:01:11 2025 GMT
Not After : Aug 8 18:01:11 2025 GMT
Subject: CN=b0243a7d8394f98cd24b9584be6cb90962c1136e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:1f:18:ee:d5:b1:92:d0:95:1a:09:5f:a1:
5e:f6:2c:dd:7e:26:5d:60:8f:42:7f:2d:39:76:0f:
75:d9:aa:5d:5c:cc:ae:69:c8:74:cd:bb:82:2c:86:
d6:10:ca:80:40:54:6f:79:aa:44:0c:1a:5c:15:7a:
83:35:5b:c3:8c:95:de:61:a0:8d:6e:54:cb:65:c8:
c0:bc:b5:e9:1e:45:29:28:d6:b4:d0:41:f4:c4:9e:
09:68:98:0f:0d:ec:bb:5c:35:62:07:7a:e0:9e:b3:
fe:d4:85:79:d5:c8:0c:50:84:1f:bc:d0:0e:7d:b6:
83:81:96:ff:9a:59:07:6d:6a:69:27:93:29:b2:8d:
28:92:0c:05:19:61:6d:3e:07:53:b5:3b:2f:d3:d0:
e2:9d:c9:e2:6b:85:88:8a:94:0f:54:2a:67:69:91:
f3:8d:26:8b:b9:db:c4:96:00:7d:51:58:dd:75:32:
25:53:fe:d2:e2:22:4a:e8:8c:15:d3:c2:e1:a9:2d:
a1:20:ef:3a:f7:04:dd:fa:44:3f:b4:ce:ca:19:43:
e6:bd:b6:34:9b:97:a4:df:19:52:74:bc:56:42:98:
09:d2:16:1c:7c:18:76:23:ae:72:b8:fb:08:1e:02:
70:90:ed:fb:de:11:46:53:45:03:19:91:9b:27:e3:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:3A:7D:83:94:F9:8C:D2:4B:95:84:BE:6C:B9:09:62:C1:13:6E
X509v3 Authority Key Identifier:
keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:fb:d4:3e:08:8c:61:e0:11:1a:94:18:9c:d5:b4:f8:94:
ef:6b:d0:47:57:eb:b8:d3:91:d5:b1:1f:c5:d0:43:46:66:41:
82:79:54:06:15:3f:ca:f6:92:8f:19:cc:41:80:f4:73:26:81:
91:9b:d4:4a:cf:6f:29:9c:8e:a1:b5:49:4b:60:40:d5:59:9d:
32:de:db:a6:66:16:84:c7:68:dd:27:72:96:96:b0:b5:21:4e:
e9:dd:be:c0:0c:8a:44:ba:c8:5b:f3:d1:fb:60:ce:b3:34:df:
f1:b1:fd:44:a5:e8:0e:ec:90:fe:55:ea:c3:c2:ac:73:fd:66:
17:ac:c3:e8:ce:ff:52:a7:6f:4d:b3:cc:5a:32:68:79:8d:7a:
e9:81:8c:a0:ce:32:ac:f9:90:50:56:98:96:ce:15:99:67:6a:
34:e5:43:9a:58:d6:6c:9a:4f:5d:8d:c1:88:ec:97:48:89:0f:
10:b9:87:5f:51:5e:44:fc:49:74:1a:f5:f0:37:82:25:26:0f:
f0:7e:e5:e6:4a:32:82:b1:58:bd:4c:28:43:bb:fc:42:b9:07:
07:9c:9a:1b:c3:71:eb:b9:2e:0f:81:d3:6e:fa:2b:77:e1:d5:
ba:8e:48:9c:46:35:17:c4:cb:7e:e0:7d:be:2f:ea:c4:dc:a9:
f7:00:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:10 2025 by rpki-client