Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: q0wXl4BGVmmP4ESV7uahXZVXDCms+pErDZlAK3R3zNU=
Subject key identifier: 47:BE:69:8E:5C:DB:CF:04:DC:C4:C3:0F:60:8B:52:B8:05:5B:8D:2F
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0198838C1D34F28146F223F9431660AF60F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 078F
Signing time: Thu 07 Aug 2025 08:00:54 +0000
Manifest this update: Thu 07 Aug 2025 08:00:54 +0000
Manifest next update: Fri 08 Aug 2025 08:00:54 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: VAQ1nUZvYIdkH+jxm8hl53yXNIQlQBgTFO2dx+/gC6Q=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:1d:34:f2:81:46:f2:23:f9:43:16:60:af:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Aug 7 08:00:54 2025 GMT
Not After : Aug 8 08:00:54 2025 GMT
Subject: CN=47be698e5cdbcf04dcc4c30f608b52b8055b8d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:8a:72:06:08:5c:0d:09:8b:f8:e8:18:a3:
16:e8:7b:b3:55:b2:b1:e8:3c:35:34:cd:75:bd:f7:
e4:fe:2b:c2:b7:97:7f:00:f0:08:4f:19:cc:4a:e1:
df:3b:4b:09:c6:6e:4c:c8:75:78:8b:22:26:dd:fe:
a9:76:a7:95:ee:77:f1:f9:e7:fc:92:c9:b1:96:a6:
a9:47:8d:3c:00:8f:86:08:36:e2:82:13:d8:c1:b7:
59:ba:ac:1f:04:3d:6b:fb:60:9a:56:02:f7:6d:d9:
b2:73:65:f6:d7:7d:77:c2:93:60:96:02:42:42:d8:
ee:2b:5c:06:da:e7:29:12:a9:30:04:99:d8:ae:86:
56:ee:df:38:91:f3:0b:c3:00:cb:d7:ed:25:ea:5a:
53:b0:15:d7:36:fe:f7:e7:0b:83:4d:c4:99:10:a1:
f0:05:70:6b:17:e8:9b:b1:4a:d2:81:3d:80:df:a5:
39:ef:fd:64:51:2f:d7:f2:3c:39:89:e5:1d:9a:69:
0a:2c:9b:73:90:f7:a0:1b:4f:aa:9f:04:12:03:eb:
4d:ab:d7:cc:f4:e0:f7:ce:d7:e6:95:95:52:a0:cf:
1a:fd:10:a3:c3:85:ac:89:de:8c:12:b2:df:29:ac:
05:c5:3e:84:53:1f:22:e6:10:06:33:ff:b4:14:86:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BE:69:8E:5C:DB:CF:04:DC:C4:C3:0F:60:8B:52:B8:05:5B:8D:2F
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:82:ec:a5:ae:84:b7:44:2f:b5:12:1a:b3:51:45:ff:fd:
83:c0:f6:be:44:c1:07:a0:7a:9b:8f:6a:eb:f4:f5:a0:f8:48:
06:2b:ff:36:aa:00:5e:5f:9c:c4:a6:a0:f2:10:9c:20:c2:49:
bf:b5:9a:2a:b8:fc:4a:66:ea:6a:73:4d:7f:e7:e9:97:b5:ea:
d8:9c:4d:a0:9f:2c:29:9b:47:40:1e:4c:3c:2b:1c:55:99:bf:
e5:a2:a0:5d:a5:5e:0d:cd:34:30:a1:06:4a:97:07:80:22:f1:
ce:1b:39:b8:2b:42:3e:fe:af:41:30:23:f1:40:f7:fb:9d:e4:
d8:e5:37:ff:58:b5:ed:48:54:7b:4b:b6:ce:00:d0:bd:0f:30:
72:fc:c4:97:b3:73:f6:5f:4b:1d:df:07:ed:ba:85:6e:75:ea:
d5:98:96:4c:1d:f0:cd:0d:30:08:20:65:91:07:c2:5b:12:0b:
09:a1:0c:37:c7:96:36:27:95:8a:a8:1a:bf:0a:13:38:f5:fa:
a7:b2:c4:35:41:a2:bf:b0:59:3b:be:23:88:43:7a:75:94:aa:
db:b8:ce:3b:fb:39:3b:08:95:bf:f7:f0:91:5f:70:b9:f4:a9:
fc:df:f3:14:50:7d:b6:b6:05:13:d1:a5:c2:80:ab:eb:eb:43:
68:b4:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:50 2025 by rpki-client