Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File: GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier: KlR9Oy+30nrgvv9EFKrmxQEALuGNw70Xmsqhjto1+oM=
Subject key identifier: 88:4D:18:36:0D:E1:BB:3A:A6:E4:63:E2:D7:B8:76:26:8B:AA:20:FD
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 0198A0F1CA01BBE9E581E56DF3006F285027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number: 14CE
Signing time: Wed 13 Aug 2025 01:00:57 +0000
Manifest this update: Wed 13 Aug 2025 01:00:57 +0000
Manifest next update: Thu 14 Aug 2025 01:00:57 +0000
Files and hashes: 1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: Ek917uBfrDx86bcB2m5/+Uo9idE1lYngm3ObvK6mBPI=)
2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:ca:01:bb:e9:e5:81:e5:6d:f3:00:6f:28:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Aug 13 01:00:57 2025 GMT
Not After : Aug 14 01:00:57 2025 GMT
Subject: CN=884d18360de1bb3aa6e463e2d7b876268baa20fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:da:d3:e1:5c:c3:07:48:cf:d7:b8:18:d7:
ab:84:a6:ae:e1:65:e7:c7:d8:72:90:2a:c2:93:f4:
f9:00:1b:61:25:53:18:cc:cc:53:b6:41:fa:d8:3b:
05:19:00:89:69:9f:c6:70:1e:df:6e:7f:f4:09:9a:
61:46:93:e8:25:53:bd:bc:58:d7:8a:fa:7a:f5:dd:
a6:05:75:91:62:b8:df:20:be:76:fc:eb:87:0d:6f:
de:a4:b9:fe:61:c7:20:a6:70:6a:f0:41:ca:a0:54:
c0:0c:24:33:d1:cb:f9:38:80:ed:1b:94:63:81:58:
5b:c0:83:b5:3d:e2:e8:27:4d:93:27:6f:0b:84:ab:
52:da:ee:4a:69:d4:74:df:f0:7b:d3:a7:a9:7c:16:
db:36:0d:49:4a:4d:31:b9:9b:20:72:14:e0:5f:fe:
85:8b:5d:dc:16:76:ca:e3:41:69:b9:7d:a6:c7:26:
4b:b7:fa:d2:88:bf:80:f6:3c:7a:09:54:e1:cf:30:
4d:4b:73:85:14:a3:12:db:7e:4c:e7:a7:40:78:09:
c0:f1:54:97:77:65:4a:a8:28:03:23:f8:08:13:f6:
b6:62:56:2b:b9:a2:2f:35:dc:e9:ee:3f:ac:2c:db:
eb:63:60:9a:7d:70:b5:fa:c7:91:70:e5:09:50:f7:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:18:36:0D:E1:BB:3A:A6:E4:63:E2:D7:B8:76:26:8B:AA:20:FD
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:ce:8e:98:cc:d1:21:fb:8e:21:35:d4:15:49:ec:82:c0:
66:6b:cf:ed:0a:5e:af:ec:f1:9d:36:d7:d6:30:f7:6d:db:57:
a4:42:5f:45:62:15:ba:e1:9e:ab:3e:21:3a:98:ce:78:54:97:
7c:32:58:62:75:82:6b:52:a7:35:8b:f5:3c:4e:34:47:a8:b1:
1f:96:20:66:09:f7:19:88:01:8a:9b:52:45:1f:ae:da:8f:a9:
41:dd:a7:33:3e:62:30:a2:a4:4e:d3:5d:c7:fd:22:1f:c8:ca:
1d:20:5d:1f:37:eb:2c:7f:a4:32:38:7d:c5:b2:8b:20:8e:71:
6b:82:f5:55:fe:81:69:62:9b:14:38:ba:5b:01:57:28:ba:1c:
7d:0c:ff:d7:c3:bf:51:0b:2a:34:40:21:bd:6f:c2:29:62:c1:
90:f5:de:dd:60:51:3c:15:07:8d:25:40:54:71:40:98:77:83:
89:51:70:7d:82:43:1f:3f:15:aa:ec:b4:02:3d:7c:1a:2a:ec:
65:a2:ef:d7:1c:0d:fb:4a:95:fd:15:bf:d4:fb:60:04:9c:4f:
9e:13:19:e4:36:6d:ed:97:78:8a:37:3f:4e:6f:da:04:0a:ce:
0d:55:48:56:c6:dd:09:d3:d3:a7:13:59:82:fd:da:b6:a1:52:
9f:cb:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:31 2025 by rpki-client