Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: 0d8Ur6rOlRxd8Y14cV0djpE/lRk7TRVdIdKvYx8EP8Q=
Subject key identifier: 19:72:4A:F0:86:2E:4A:B7:1D:D1:0A:1E:18:93:55:56:28:61:8D:10
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0198873210CC94EABED5743556B9C41E765D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 01:01:01 +0000
Manifest this update: Fri 08 Aug 2025 01:01:01 +0000
Manifest next update: Sat 09 Aug 2025 01:01:01 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: +t63UH3MmfFpDhfdq6wMGR83RlvXP3T/WFBgtrxyD1o=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:10:cc:94:ea:be:d5:74:35:56:b9:c4:1e:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Aug 8 01:01:01 2025 GMT
Not After : Aug 9 01:01:01 2025 GMT
Subject: CN=19724af0862e4ab71dd10a1e1893555628618d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:10:88:07:01:13:a6:16:81:db:ea:84:8a:
cb:57:e9:47:a9:3d:5e:c4:65:e7:5a:bc:b5:72:f4:
10:02:6c:4c:21:b2:00:1a:7a:1c:dc:9e:07:33:13:
94:87:dc:d4:b0:c5:e4:e5:b0:0e:f1:a7:41:bc:a4:
4e:a4:ac:a8:24:11:98:71:f5:36:05:98:d8:1b:cc:
a5:fe:da:d3:4e:99:6e:ba:da:14:30:2c:de:b1:82:
68:3c:aa:ba:f4:21:fc:3d:0e:d3:df:e8:f1:51:9f:
d8:47:26:83:6e:94:84:b3:f8:c4:87:1b:c2:59:50:
83:41:fc:86:cb:d3:92:97:61:f6:7c:66:82:01:c1:
57:3c:e3:d0:3a:9f:57:db:eb:ed:b4:ec:ed:8b:59:
79:a7:10:b5:4a:6d:74:f1:7e:4f:8a:2c:11:33:20:
5a:e5:ab:20:1a:45:3e:14:02:c2:51:e8:3b:63:6d:
6e:25:70:c3:ae:5c:f3:16:e8:5a:55:89:bc:c5:aa:
11:30:12:01:1c:6d:3e:91:76:2f:81:02:2f:05:5d:
95:f6:3e:23:a6:da:a3:67:d1:24:e9:24:10:ca:bd:
be:ab:28:bf:1c:93:9a:58:f5:4f:a9:9e:1d:8e:fb:
da:b7:ee:8b:9f:00:2a:6f:03:1e:35:64:a9:31:87:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:72:4A:F0:86:2E:4A:B7:1D:D1:0A:1E:18:93:55:56:28:61:8D:10
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:27:26:aa:e4:a6:96:51:6d:1a:79:a3:0b:00:cc:00:0a:0f:
2d:ac:bc:fc:41:1b:cf:ce:2e:d5:cd:55:1c:c4:c8:55:c5:e3:
81:41:98:fc:fe:71:b6:2e:5e:18:41:28:30:ef:a0:5e:71:81:
7b:65:23:89:5c:e6:38:3c:4a:cf:2e:cc:09:df:13:00:81:bc:
c4:70:a7:7a:ab:85:68:40:2c:6f:00:52:cc:f4:9c:17:7a:03:
f7:be:87:9e:3e:42:c9:6d:c6:dc:99:c2:2d:dd:89:08:4d:c4:
bf:6d:69:43:5e:35:d3:d5:ce:19:91:8b:a6:df:25:93:01:ea:
2d:bc:18:2f:73:cf:2d:a8:d6:0c:ac:25:4d:5f:b1:b1:e0:ab:
29:31:c8:9a:60:9b:23:6e:bd:40:62:f0:ab:a0:3b:b4:20:3d:
f7:d4:fe:ca:01:49:0a:9e:fc:6c:08:da:7b:86:0f:40:93:94:
3f:b6:30:71:e1:7c:6e:e5:a7:ae:97:08:ea:c8:d8:31:5b:20:
91:4c:72:9a:ae:a5:7a:d0:29:77:82:a9:e4:3b:17:53:1d:c4:
74:3d:55:ef:21:b3:08:62:74:cb:53:4b:39:6f:2b:ff:fc:d7:
c6:cf:9e:5c:fe:63:43:57:6c:81:a0:54:f8:a5:a3:d6:b3:4c:
da:4e:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:17 2025 by rpki-client