Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: WjDQuf3ML7xGYHlkbqZkXw3JX7nCLmYtABRKEkFNe0E=
Subject key identifier: 32:7D:60:07:1B:45:E7:29:EB:EF:45:E2:19:8D:36:BD:06:99:85:AD
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 01987CAEAA89F197A3364AC7C8BA7B6AF1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 0921
Signing time: Wed 06 Aug 2025 00:01:18 +0000
Manifest this update: Wed 06 Aug 2025 00:01:18 +0000
Manifest next update: Thu 07 Aug 2025 00:01:18 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: ZkK1+Lx4Re7OWY9OUFz8aLCZ9JyiHtzesk5S+7emSU4=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:aa:89:f1:97:a3:36:4a:c7:c8:ba:7b:6a:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Aug 6 00:01:18 2025 GMT
Not After : Aug 7 00:01:18 2025 GMT
Subject: CN=327d60071b45e729ebef45e2198d36bd069985ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:46:fb:91:08:9b:87:c0:c6:45:95:04:88:
25:de:69:ef:aa:79:f2:1a:5d:3b:c6:8b:79:b2:75:
d2:c6:59:88:9b:83:a0:77:ee:b2:e0:f6:88:ce:61:
2a:79:4a:d6:79:ac:ad:ab:c7:56:d9:90:35:0f:c3:
1b:d3:e4:9f:f8:49:1a:e5:45:56:bf:11:d9:46:83:
2b:0b:ca:11:ff:3c:d0:85:54:e0:b4:5b:11:09:de:
a3:26:a6:ae:96:ea:0b:96:c3:bd:56:f2:f1:7f:26:
14:8a:75:0d:5a:3e:34:b7:0e:b4:ee:d8:32:9d:1a:
d3:07:76:8f:8a:de:75:99:04:7c:f6:66:73:f1:70:
ff:6b:92:e9:ce:ad:86:ad:47:c3:d0:22:41:de:22:
1a:fa:3b:35:bc:c2:b0:0a:c4:72:2e:f0:4f:e8:c3:
24:d2:8f:aa:6a:c7:68:b7:5a:9c:f0:88:6a:66:d4:
e9:f6:64:78:59:00:05:ba:65:e4:2d:82:37:76:f8:
1e:8a:85:25:91:d1:a0:37:be:c1:b2:dc:ab:59:b8:
2d:a3:ee:69:97:4b:fe:cd:fb:27:9a:ed:37:90:b4:
45:57:e1:16:b5:a0:a0:cf:49:18:15:93:98:43:96:
ad:ea:e6:c4:b7:c1:fa:1f:13:9a:73:7b:76:a8:45:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:60:07:1B:45:E7:29:EB:EF:45:E2:19:8D:36:BD:06:99:85:AD
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:93:91:f6:ce:fd:e3:e5:32:8d:1f:98:34:f0:5a:98:26:
e5:b3:4c:65:c8:1f:36:2f:be:e9:85:e6:de:64:e2:af:0a:42:
ba:3a:e5:bf:9d:59:3e:65:5f:41:15:bd:e4:c8:8d:b5:d6:09:
a5:6f:b8:1b:49:de:c6:12:22:4d:95:dd:5a:26:8b:9f:d1:9e:
aa:fb:20:2a:68:38:dd:c5:9f:c0:78:0a:50:89:29:3e:91:fe:
be:c3:56:79:5a:64:70:bd:e7:64:2e:97:cb:d9:2b:eb:9b:7b:
4f:0f:16:d5:36:5f:73:5f:29:0a:cc:9a:e8:d8:6f:23:4c:d7:
e7:ee:f2:82:5b:6d:a9:3c:0b:88:68:75:2c:d2:da:10:c0:8f:
6c:cd:d3:e0:ec:59:3b:ba:81:61:80:f9:c2:51:87:b7:e9:0f:
0d:8e:ec:ac:d3:98:a7:91:bf:0d:e2:65:6e:1c:4a:de:18:a1:
26:16:e6:97:c6:4a:cb:80:af:ca:47:0b:18:94:25:8f:53:14:
c0:b1:38:78:28:97:cc:66:9d:61:09:69:52:e2:53:04:c5:eb:
81:2e:ed:ef:5c:20:33:4a:0f:b7:cc:80:17:27:6a:bc:86:2a:
8c:6c:ff:52:be:c4:f7:b2:47:4b:a3:75:b7:b5:ad:01:78:43:
a4:0a:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:47 2025 by rpki-client