
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: Tnyc8Z3ZsbdwxYQ3dKN7wGp/PiYoEyiyCxP2kUVw/g8=
Subject key identifier: DC:EB:52:E0:E1:73:D1:97:D6:C9:39:6D:3D:BB:90:44:E3:A5:28:62
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019873E3D50C0DFD31262184A280F8C5AA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 033F
Signing time: Mon 04 Aug 2025 07:02:47 +0000
Manifest this update: Mon 04 Aug 2025 07:02:47 +0000
Manifest next update: Tue 05 Aug 2025 07:02:47 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: pGZjL1Z4owbnoGTGxmdrs06xOEvOjo6t2ZZxXnvI1V8=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d5:0c:0d:fd:31:26:21:84:a2:80:f8:c5:aa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Aug 4 07:02:47 2025 GMT
Not After : Aug 5 07:02:47 2025 GMT
Subject: CN=dceb52e0e173d197d6c9396d3dbb9044e3a52862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:f7:dd:8b:92:8d:44:80:bb:e3:8e:00:d2:
73:69:78:df:8c:59:d4:5d:52:ff:0f:c0:a8:ed:d9:
77:9d:e0:73:23:f6:0c:df:69:f9:17:08:eb:76:ac:
3a:57:1d:d3:f9:e0:de:c2:1a:40:40:65:fd:5b:36:
84:31:4f:9a:de:54:61:34:09:ba:4d:17:f7:97:c4:
44:03:25:a4:1e:9a:41:e5:86:e6:97:fd:67:d2:77:
8b:da:c3:c7:de:8c:4b:48:4f:40:eb:48:0c:4e:4f:
74:e8:38:74:fd:94:cd:9d:a0:0d:ca:9c:9c:de:2e:
95:59:56:1a:98:6c:59:17:73:84:3e:33:c5:f9:36:
9a:93:0c:4a:2d:e6:ca:6b:b6:a0:cb:62:cd:0e:fd:
93:89:d9:99:64:ef:d0:19:d4:4c:a9:d3:f3:1a:26:
fb:19:a6:5e:84:ce:f0:65:42:1a:06:2e:21:ad:db:
75:85:a3:8b:a5:68:03:e5:6a:32:3a:8a:00:c1:4f:
80:54:07:a1:bc:85:4c:f2:91:c1:81:a5:99:1c:27:
8a:95:e4:d1:51:b2:0d:c9:d4:9a:6b:4b:11:43:9f:
b0:32:0e:5e:4b:81:39:bd:d2:c0:cb:8e:6b:f5:39:
c3:4a:20:58:c5:60:be:f0:97:63:21:5e:e1:44:51:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:52:E0:E1:73:D1:97:D6:C9:39:6D:3D:BB:90:44:E3:A5:28:62
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3f:a9:71:3a:11:44:08:c1:b6:75:5d:1e:b1:20:fa:75:8f:
4c:dd:4c:2d:7e:62:db:bb:e6:8f:b4:73:71:a6:10:6b:05:98:
9b:ba:22:9b:00:2d:2f:4c:3a:f4:c5:4b:b5:16:92:35:b7:4b:
8f:2e:6f:2f:87:1e:3c:10:c3:18:ac:99:74:13:d6:34:f0:7b:
39:de:54:de:bf:08:de:94:36:ac:64:26:1d:7c:fe:7d:5b:fd:
ac:da:7b:d0:98:21:d0:55:6c:69:09:a6:df:d3:4f:31:7b:b1:
1f:e5:33:7a:49:a3:5a:34:76:9a:6c:cd:ee:95:eb:b3:25:a1:
c9:18:c9:ca:0a:07:a3:ae:e1:0e:84:e3:0c:26:98:e3:3c:03:
76:36:f7:a1:e8:9e:8a:8d:97:5e:ea:e1:e9:45:74:ea:61:3d:
aa:91:ac:53:5c:ee:98:8e:8c:3c:7e:87:67:30:ee:07:6e:03:
6e:b8:e2:5c:b7:1d:98:a8:09:6c:a6:7c:1b:a3:a1:a9:d1:8c:
75:a3:84:43:32:68:1b:bb:31:63:1e:54:1e:68:c3:1e:f1:d1:
eb:5a:ab:0b:24:1d:9a:35:3f:35:b9:b6:28:de:17:0f:73:cf:
8f:c4:85:01:8e:75:45:b5:a7:dd:b7:03:18:92:32:ca:99:06:
8d:af:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:22 2025 by rpki-client