Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: sTYq3dCvOK3VXEECxWaaz8J4rbtNHSlIvSXxLzyimgM=
Subject key identifier: AB:5C:D0:B0:E0:2F:0B:76:53:F9:06:E2:51:2B:70:B3:80:BC:36:8E
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 0198A04D9B14EE54081C6ACB3428F1824FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 22:01:36 +0000
Manifest this update: Tue 12 Aug 2025 22:01:36 +0000
Manifest next update: Wed 13 Aug 2025 22:01:36 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: pOxpJP4ej/mGZ8N/EaaP2hS0k2NQD60uTawafzpOmoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:9b:14:ee:54:08:1c:6a:cb:34:28:f1:82:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Aug 12 22:01:36 2025 GMT
Not After : Aug 13 22:01:36 2025 GMT
Subject: CN=ab5cd0b0e02f0b7653f906e2512b70b380bc368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:cb:0c:57:01:bc:cd:71:12:34:54:44:e6:
97:2b:ef:84:37:e1:c4:14:a7:72:65:6f:19:f9:03:
be:26:42:ea:d2:8a:fa:cd:90:8c:e4:b9:35:65:3f:
61:d6:0a:9c:2c:ad:f6:8d:ab:5d:72:bb:d9:6f:3c:
8a:e0:ec:ba:5a:e0:b8:d0:98:bf:1b:42:56:ed:e4:
c8:00:ba:e0:f7:bd:4d:55:e1:71:c4:ca:5f:9f:90:
5d:e8:4f:26:65:d2:37:89:aa:cb:82:14:0a:b8:e4:
f4:17:22:72:09:62:58:7d:be:eb:7c:e8:97:50:4c:
ba:a5:ff:2d:a0:98:a7:f4:dd:7d:62:e1:c1:de:8f:
82:25:fa:16:36:6a:4d:2e:e4:63:c4:7c:f0:5f:43:
92:3d:7e:96:6a:83:d1:bd:48:24:de:8b:bd:41:dc:
c0:26:6c:ec:fd:c8:9d:f6:ef:e3:22:6a:c3:10:0c:
79:65:32:97:1a:87:9d:1e:1d:17:53:19:b4:ac:42:
23:24:30:e5:8f:53:0d:18:1c:dd:01:b6:77:8a:a4:
d0:d9:28:73:41:c0:b0:31:17:32:8d:78:f1:9c:87:
43:ae:6f:97:30:86:20:82:94:b2:27:b1:e9:c2:cb:
be:b1:0a:b1:33:61:8d:c5:35:0a:e2:9f:ac:2d:6c:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5C:D0:B0:E0:2F:0B:76:53:F9:06:E2:51:2B:70:B3:80:BC:36:8E
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2e:20:a2:2d:71:dd:2e:de:4e:95:98:b8:ed:bb:7f:96:d1:
1e:dc:43:f2:8d:1e:de:bf:e6:e0:56:6a:ca:d6:9a:19:4b:24:
3a:0b:77:33:32:60:6b:29:60:36:21:02:33:d6:13:f0:52:af:
b4:dd:8c:88:98:64:24:f7:a7:27:e5:c0:72:28:e7:6a:ec:21:
77:88:41:36:54:10:c6:d0:bf:b6:f8:22:7d:a0:6d:7a:9f:47:
81:35:1c:b1:49:d7:49:77:c2:f0:67:d0:5f:14:d0:7a:7c:da:
49:69:85:4d:b6:e5:8d:95:60:20:20:3c:43:71:e8:a6:b2:d2:
7d:b3:f2:c5:be:79:cb:2b:ce:8b:c2:28:4f:05:bf:f8:13:07:
81:73:45:7f:1a:93:b0:04:a4:4f:79:22:36:a6:79:45:20:3f:
1c:63:29:9a:07:aa:b6:94:91:a0:e2:48:ac:f7:be:54:9d:b0:
9f:85:dd:a7:6b:88:9b:d5:22:9d:d2:96:e4:c0:a5:4a:9c:03:
90:1a:48:c6:bc:e4:70:63:87:df:ac:df:02:5b:76:62:b3:83:
17:ef:43:a1:81:8f:bc:4a:26:59:a3:9c:4d:cc:df:4c:fc:93:
aa:04:9a:c0:ab:f8:0e:5d:49:c7:08:67:e3:dc:f5:ba:4e:d8:
49:a7:07:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:17 2025 by rpki-client