Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: eSCO1gAlYb2ubAL1REEV2RkPzU/UnKZj/wHYwMBxtEc=
Subject key identifier: 9B:E3:C9:B2:15:28:36:16:50:13:21:76:FC:27:39:42:09:8F:A9:2F
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 01988D3403B8A07C6DCAACAEB68C6509CA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0C7A
Signing time: Sat 09 Aug 2025 05:00:52 +0000
Manifest this update: Sat 09 Aug 2025 05:00:52 +0000
Manifest next update: Sun 10 Aug 2025 05:00:52 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: y/W2bvO+j+joOhJHyd0wiTXC1a67Mzf7iFgBlMYcZcI=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:03:b8:a0:7c:6d:ca:ac:ae:b6:8c:65:09:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Aug 9 05:00:52 2025 GMT
Not After : Aug 10 05:00:52 2025 GMT
Subject: CN=9be3c9b21528361650132176fc273942098fa92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:42:e1:13:81:d4:d0:0b:21:67:3a:01:e5:
eb:a7:c5:21:74:38:de:66:12:d2:58:01:0c:23:b2:
9e:75:6d:fa:3b:78:b0:87:a8:ce:62:3e:6f:6d:ed:
60:93:87:d0:2b:1f:68:d2:a1:5d:fd:98:27:df:c9:
f2:51:1b:32:47:7d:26:8b:fc:cc:c6:a9:ed:c2:fc:
c3:ca:3c:08:d1:db:e6:d5:b7:b4:d6:7b:f5:2b:1e:
66:8b:21:a7:44:24:80:eb:cf:b5:23:d3:71:c4:63:
d4:b5:ce:87:98:f4:95:93:1e:bc:f8:e3:4f:04:06:
4b:32:be:8b:5f:b8:96:00:8c:18:b9:43:86:04:10:
d4:6c:9c:22:ec:a6:f3:69:b1:be:3d:65:4d:a4:8f:
e4:ec:d9:5f:1f:7e:ae:cc:95:ea:dd:71:6e:f5:3b:
94:62:4d:fb:72:c0:5d:2d:38:aa:d5:cf:4b:8a:0b:
03:db:7e:68:9f:64:df:d0:ca:41:d9:1e:64:5e:46:
32:dc:9b:9d:66:b9:15:c5:4a:22:d6:3e:bf:e1:b6:
81:c2:ff:c0:2b:35:f5:34:5f:20:c6:65:65:17:e8:
f5:f4:a2:01:51:71:0a:87:0c:ad:7c:8d:89:1a:ba:
54:ac:8e:c9:0a:b3:15:62:b7:01:05:21:73:df:92:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:C9:B2:15:28:36:16:50:13:21:76:FC:27:39:42:09:8F:A9:2F
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f1:4e:e2:12:13:ae:da:98:a7:4d:d2:15:f3:17:49:db:d8:
ff:69:19:08:e6:12:63:8f:e4:2b:e8:a7:61:8a:1d:78:0f:4b:
f8:bd:bb:08:a1:cb:75:88:f5:3f:5e:c8:f6:e4:ae:7d:0c:a4:
2f:59:25:b2:01:a6:08:3f:93:e4:a4:1a:81:22:03:fa:0f:41:
85:20:1a:77:7f:63:56:cb:8f:e4:2e:b2:ef:d4:c0:12:01:39:
0a:6a:9a:50:96:61:5f:06:ba:37:f5:81:86:a6:dc:02:8f:d6:
a8:59:c7:30:44:c4:8a:0c:8f:52:a4:a0:f6:6a:e0:d6:02:c6:
05:2a:5c:aa:8a:e5:93:ae:5b:fa:2d:9f:b9:22:a5:5a:a2:62:
ee:f1:82:e2:3f:e6:82:b4:d9:23:09:98:9f:15:6e:f2:fd:1f:
64:a9:63:09:5d:0e:c6:44:69:b8:92:4f:f2:39:3d:a5:2c:1c:
88:f1:5a:89:3e:51:f3:5c:41:86:8f:39:d8:77:d9:8d:c7:79:
c4:4d:e7:8a:c0:b2:30:78:76:6c:52:df:3d:59:ec:a3:2e:de:
81:90:b8:1f:bd:93:a9:e2:99:1b:71:02:7d:36:05:65:de:44:
92:c3:4b:fa:6b:e7:5e:75:d9:a1:e2:0c:17:5e:e0:b0:3e:2e:
43:fe:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:04 2025 by rpki-client