Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: Xi22gZ8HzUj5fYBka4NKo4ofj9r2W+jE08mH/vnc4wk=
Subject key identifier: 2C:75:48:7E:86:9D:88:B1:9B:DF:90:5E:69:B8:A5:30:50:8D:37:EB
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019885E85582D1965F135C9814AF64DB2105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0148
Signing time: Thu 07 Aug 2025 19:00:52 +0000
Manifest this update: Thu 07 Aug 2025 19:00:52 +0000
Manifest next update: Fri 08 Aug 2025 19:00:52 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: AeaHxakSV5Rqg7kCSf8ILjWtLDpIDpOc5qqeOkedaTY=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:55:82:d1:96:5f:13:5c:98:14:af:64:db:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Aug 7 19:00:52 2025 GMT
Not After : Aug 8 19:00:52 2025 GMT
Subject: CN=2c75487e869d88b19bdf905e69b8a530508d37eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:0a:9e:db:3f:d1:fe:42:56:ad:a5:75:fa:
b4:c7:a5:e5:c7:23:cc:76:24:35:ec:16:5f:6f:ec:
2b:5d:b1:c4:a7:1f:6f:0a:36:91:35:72:b5:94:89:
44:f2:ee:d6:1b:01:4f:d2:fc:d5:97:4f:c5:37:e6:
e5:a0:81:ae:8c:73:28:42:49:42:69:33:06:bf:a4:
c9:0b:99:26:3c:40:c3:6b:dd:a5:77:46:a1:95:00:
89:8e:08:d5:3c:9e:16:d9:12:ff:ab:ac:0b:75:66:
d7:c6:99:5e:c1:d8:2b:9f:fe:44:56:5f:a9:96:2c:
d5:1a:e0:48:73:8a:b8:51:d2:e7:39:21:0a:75:8a:
8b:0c:9d:83:19:7d:9e:0c:16:6d:e3:f3:c2:1d:43:
c4:73:a8:38:d6:65:c7:ea:01:b7:5d:16:04:56:80:
24:ba:44:3a:fa:ea:1c:5c:68:a6:f7:0c:6b:fc:29:
fc:86:e2:22:84:69:f5:20:0e:82:0f:88:3f:d3:12:
93:73:12:c8:53:f2:54:2b:a6:9d:73:82:4f:1b:f1:
5e:19:2b:bd:55:9d:f3:25:73:b1:e8:76:8a:60:3f:
39:d1:b8:9c:1c:94:97:91:58:c9:49:6b:2a:ba:8d:
e2:c0:65:e4:b0:46:f2:3c:61:72:4f:e7:93:54:d4:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:48:7E:86:9D:88:B1:9B:DF:90:5E:69:B8:A5:30:50:8D:37:EB
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:84:d1:37:62:78:7b:80:50:39:f9:d4:37:d5:0e:f0:84:23:
8d:4d:79:2f:a2:c2:12:4c:b4:e4:88:dd:c2:48:31:5c:d8:86:
0f:2b:d1:2f:94:73:12:c7:28:55:97:cf:c2:36:e1:02:97:80:
91:c2:13:2c:10:01:86:cb:60:29:32:c7:a8:cb:ae:9e:34:26:
74:74:68:2d:b0:e3:a8:6e:95:3a:b2:2f:5c:c4:09:39:37:8d:
7c:f2:71:55:6d:b7:7a:fb:30:de:f4:2f:02:85:90:97:24:09:
4f:db:75:60:63:99:14:58:ff:65:8d:b7:4c:01:26:6c:c8:51:
99:88:61:b5:e9:5a:ea:90:23:0e:15:6e:99:5f:ac:d8:8e:a9:
f4:21:f1:4e:83:da:df:c9:3c:0d:59:44:5f:83:46:18:5b:ad:
ed:ec:9b:f7:dc:8e:8d:f2:62:af:68:c1:2e:11:18:20:cc:82:
e8:d1:2a:b7:a9:8c:c0:98:00:be:a9:1c:4c:54:c7:82:3a:66:
53:dc:12:5d:e9:8c:e1:8d:a6:4c:6a:7a:b0:ec:94:e1:a5:74:
a2:e9:3c:f5:ed:45:fe:50:f2:b2:a7:f3:d8:9e:72:fc:09:0d:
97:3c:f6:c4:32:90:7a:19:8e:c7:6b:09:d3:a6:23:d7:78:b8:
23:bb:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:39 2025 by rpki-client