Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
File: GazwfxNSIiZYt4nk_kDqOKiqcd8.mft (raw, json)
Hash identifier: k/GPDQ6BbR33B5fAIHMqC8SPQ1Fn3YXhng5IYArYTVM=
Subject key identifier: C8:51:56:45:2C:EF:FE:12:EE:33:A8:E7:44:4F:81:00:5C:63:A8:FE
Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Certificate serial: 01989780839FDC026BEFB3D9979BCCB4FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:00:38 +0000
Manifest this update: Mon 11 Aug 2025 05:00:38 +0000
Manifest next update: Tue 12 Aug 2025 05:00:38 +0000
Files and hashes: 1: GazwfxNSIiZYt4nk_kDqOKiqcd8.crl (hash: VuC7Z2u+EWaj3dsaSew8TvqAoc7mYVod2lHpHJM5dMY=)
2: UJadThgIY9kRl3yuOM0mvOp3eiw.roa (hash: NYhzFFlpnpad/HHC5kD2Bp7E8XgYHWJLlBn3GfXQ/6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:83:9f:dc:02:6b:ef:b3:d9:97:9b:cc:b4:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df
Validity
Not Before: Aug 11 05:00:38 2025 GMT
Not After : Aug 12 05:00:38 2025 GMT
Subject: CN=c85156452ceffe12ee33a8e7444f81005c63a8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:b5:ce:85:a0:df:e1:8e:b2:60:0d:5b:19:
5e:84:67:28:1b:d4:e6:0e:dd:b2:85:17:ab:8a:9c:
d8:bc:a3:e0:74:31:7f:cb:83:cc:84:f4:f8:21:ae:
6e:e3:33:ee:d9:aa:56:d7:f3:a5:06:02:fa:5d:80:
60:75:86:ba:8f:61:0a:32:c2:f9:53:dc:c9:e9:df:
c1:2b:e5:01:87:8a:7f:fa:b5:6a:f8:69:96:9d:0c:
a5:c0:63:1e:29:04:d7:c9:1d:6c:af:b6:f6:d3:d3:
9d:4f:72:7d:9e:e7:4e:de:74:27:bb:23:4f:e9:73:
69:7c:b2:c4:53:ea:e2:44:69:67:0a:75:e0:32:33:
33:c3:9f:dd:d6:a0:3e:cf:a2:97:79:4a:72:2e:01:
9f:90:2e:35:0a:1a:db:13:cd:c3:44:ef:26:ea:f4:
53:31:e3:3f:f5:13:cd:44:33:32:e5:ae:fb:82:9e:
98:6b:7b:71:50:4b:4b:c5:04:a2:15:5e:06:a5:46:
5c:5f:8c:a5:06:28:a6:5c:8d:23:50:f1:2a:01:07:
49:e1:2a:87:cc:99:db:51:8a:3b:8b:24:d4:14:b5:
1d:7a:83:0e:b3:a5:7b:98:4b:c7:a1:98:67:aa:e5:
4c:49:bb:c3:3c:01:f2:ca:fb:71:86:db:fd:05:51:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:56:45:2C:EF:FE:12:EE:33:A8:E7:44:4F:81:00:5C:63:A8:FE
X509v3 Authority Key Identifier:
keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:95:02:5b:29:fa:a6:d0:08:66:bc:09:a7:8a:1b:fd:36:68:
7a:16:4e:1a:93:e7:4e:d7:67:a7:73:8a:c8:70:5e:f9:7b:75:
f9:e6:e3:e2:71:85:5f:30:40:4e:e5:b1:ff:37:9a:7b:c6:57:
da:44:28:9f:36:95:df:b3:46:6f:b3:61:02:3a:49:39:31:49:
d9:bc:19:e6:b8:55:9a:09:17:b6:33:a0:54:19:1a:fa:08:2f:
8f:c6:c1:94:34:3f:4c:71:df:a0:50:d0:1c:d2:80:de:1d:5d:
27:d5:0b:23:4b:c5:c1:c6:90:2f:0d:73:40:ab:b6:ed:d7:8a:
98:56:5d:55:4d:04:b5:82:4a:7c:75:e7:34:f5:7b:c2:53:92:
b3:ac:e2:02:f5:a1:a3:86:df:23:f3:33:d9:70:d7:56:01:ca:
c2:26:0f:6f:f9:c1:87:1e:f0:e1:2f:11:9f:58:5b:15:7a:b1:
dc:15:90:c2:4a:98:d7:bb:97:c0:ed:5f:c2:cc:32:60:02:57:
69:c5:55:27:67:f2:1d:3f:35:89:af:50:b1:93:1f:45:68:c9:
e5:54:e8:67:b8:4e:2b:7c:24:1f:2b:6c:bd:9b:75:3a:08:83:
05:18:35:11:51:75:ce:75:f4:7b:c5:5f:4b:ff:0b:f7:aa:75:
2b:cc:0f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:38 2025 by rpki-client