Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
File: GnGBD-yOewtewmKemciWNZJsYlE.mft (raw, json)
Hash identifier: b9/4q3dwpdaNnhsjaknxWz54+DBi3ZKu5HkYV+NJMDw=
Subject key identifier: D5:E1:CD:B3:BA:DA:D0:87:AC:09:2F:5E:75:D2:4C:D5:A0:FB:93:BF
Authority key identifier: 1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
Certificate issuer: /CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Certificate serial: 01988CFCE9C9DDA7AD676ACFCFFE1CEA7845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
Manifest number: 0B4A
Signing time: Sat 09 Aug 2025 04:00:41 +0000
Manifest this update: Sat 09 Aug 2025 04:00:41 +0000
Manifest next update: Sun 10 Aug 2025 04:00:41 +0000
Files and hashes: 1: GnGBD-yOewtewmKemciWNZJsYlE.crl (hash: rMIilHdApmvMSTq8w1rukFCz4pFARV5IXdV1Kw//TKo=)
2: ainOGSMqgrVPlJbCQ0XAVp3Eo1w.roa (hash: aUARFD50cGug83O2CiAa13xLrj1Z/zyZ8nx2FGmkrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:e9:c9:dd:a7:ad:67:6a:cf:cf:fe:1c:ea:78:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a71810fec8e7b0b5ec2629e99c89635926c6251
Validity
Not Before: Aug 9 04:00:41 2025 GMT
Not After : Aug 10 04:00:41 2025 GMT
Subject: CN=d5e1cdb3badad087ac092f5e75d24cd5a0fb93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:88:82:7d:41:4c:32:d3:ef:6e:b8:8d:96:
1c:b6:ae:bf:f7:eb:68:a6:88:a9:ae:e3:7c:4a:3f:
d5:83:e8:77:a6:51:b7:d6:8f:9d:33:7d:3d:83:c4:
00:d3:1f:0b:f1:8c:09:36:bf:8f:d2:07:79:77:db:
75:9d:ae:c0:6d:7d:02:ed:df:d9:a1:7c:e0:b2:49:
1e:d4:9a:fa:66:ab:59:cf:a6:84:55:00:31:69:ae:
9c:79:ff:eb:1a:d5:66:e9:f2:fa:73:8c:3d:06:1e:
bd:24:5f:83:fd:e5:60:99:0c:b5:90:45:0d:c8:c0:
21:6e:9e:1c:a5:7a:42:78:66:a7:5d:ac:3f:71:59:
16:d2:b4:7f:e1:12:cf:f1:56:01:17:42:95:e2:84:
93:48:fe:4e:c3:df:3f:c0:7c:c6:c9:b2:93:74:5b:
e8:74:78:f2:2c:57:56:44:2b:f5:ce:42:da:7e:33:
b2:ed:2e:52:bc:70:4c:62:5f:cb:73:dd:be:68:04:
27:f6:79:87:ab:ee:4c:1a:9b:31:1d:e4:e4:a3:31:
19:ee:4c:58:a8:40:51:85:e4:fc:83:c0:58:3f:2a:
32:0d:9e:fd:b3:43:74:e5:40:35:7d:8b:77:e1:e6:
7d:a9:08:83:b9:f7:9e:53:ac:1d:57:a9:5f:a3:fc:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:CD:B3:BA:DA:D0:87:AC:09:2F:5E:75:D2:4C:D5:A0:FB:93:BF
X509v3 Authority Key Identifier:
keyid:1A:71:81:0F:EC:8E:7B:0B:5E:C2:62:9E:99:C8:96:35:92:6C:62:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnGBD-yOewtewmKemciWNZJsYlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cc24b9-5918-4557-a832-4017cef5bca9/1/GnGBD-yOewtewmKemciWNZJsYlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:05:4d:39:86:d0:f0:22:75:8c:71:ac:79:8d:81:1c:11:60:
aa:5a:96:df:67:5c:b1:a3:a6:da:8c:81:32:e8:5c:60:1a:66:
b6:36:3b:82:93:0f:b7:7a:cd:d0:b7:47:35:11:d1:e2:f7:bc:
bf:ba:ed:3a:56:e8:63:2e:95:6a:e2:77:d4:ea:d1:b2:57:da:
05:b2:83:88:02:85:3f:4b:3a:51:b6:42:2d:9c:80:f0:03:25:
f0:3c:10:1a:26:0e:52:0a:28:f8:52:81:ec:02:d7:49:fe:cf:
86:17:07:e3:d3:c6:3a:96:e7:b1:c8:89:f5:12:4c:77:64:5f:
4e:77:5a:41:97:34:9e:66:d8:55:e5:63:1a:d1:f4:8c:c2:fa:
28:3f:cc:b8:8e:79:cb:8a:1b:d7:12:7b:91:89:6c:2d:1d:de:
73:5f:2f:f5:98:f2:a5:f1:ad:24:5b:5a:9e:c6:b1:7b:a5:3f:
2c:8d:29:4e:ca:fc:bd:70:f5:cc:f8:8c:82:e1:4b:1a:7c:8f:
f3:5d:81:2d:33:bd:a1:37:f4:1e:de:68:d8:14:0e:7d:72:bf:
8e:cd:2b:b2:8f:65:72:f6:c8:56:29:4e:00:2c:e7:a2:e7:c9:
ee:a9:e8:5c:a1:9c:b5:a7:e9:1d:84:db:a8:b0:6e:e0:4b:3a:
5f:55:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:39 2025 by rpki-client