Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
File: GF88M_sBE7RdRZKaTAbyjHFNyks.mft (raw, json)
Hash identifier: OXA4v03O2RQ9qzRX4UNGXwhPEjFFhxGu4i4QaDuACeA=
Subject key identifier: 75:AA:48:00:8D:0C:02:3C:1C:35:BE:BF:68:FA:D7:CD:9D:9E:5D:E3
Authority key identifier: 18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
Certificate issuer: /CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Certificate serial: 01988D6AD16BFC7CC908E0C9BAE4BC58318C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
Manifest number: 15F9
Signing time: Sat 09 Aug 2025 06:00:44 +0000
Manifest this update: Sat 09 Aug 2025 06:00:44 +0000
Manifest next update: Sun 10 Aug 2025 06:00:44 +0000
Files and hashes: 1: Dj-Uv0t3dvfxWtykcGKcEfSOyys.roa (hash: Cq81bMV4HRofyA9CM4mQwXF2q1ipT3j7p1KwK0T9L7g=)
2: GF88M_sBE7RdRZKaTAbyjHFNyks.crl (hash: AesgV5w0eg5wnrBadd0wQ9+JtrbFpub155zifeFFVTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d1:6b:fc:7c:c9:08:e0:c9:ba:e4:bc:58:31:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185f3c33fb0113b45d45929a4c06f28c714dca4b
Validity
Not Before: Aug 9 06:00:44 2025 GMT
Not After : Aug 10 06:00:44 2025 GMT
Subject: CN=75aa48008d0c023c1c35bebf68fad7cd9d9e5de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:bd:b0:b2:ee:bc:a1:25:7a:7c:3d:b6:18:
91:91:69:a6:98:c1:6f:74:22:f6:e6:2c:a5:80:d4:
ef:8e:b3:7b:9a:82:8d:d5:09:e3:fc:34:a1:e5:60:
68:f5:bb:cb:a0:e3:ce:1a:e9:30:e6:bf:6b:e4:94:
95:73:10:0e:90:3f:c6:32:31:19:75:5f:a1:27:ac:
70:a6:c5:61:4a:cc:db:62:4c:17:41:a5:bb:06:d0:
90:2a:7a:d8:00:c6:70:ae:32:6c:c2:be:da:2a:61:
48:d6:60:cb:6a:4d:6a:69:1a:b4:e3:a1:ab:7f:95:
44:8b:b7:2a:98:e9:de:5d:63:b0:3d:bb:86:34:ea:
f5:34:71:e2:86:78:04:1d:f8:78:04:b0:17:97:40:
6d:cd:68:4f:47:41:de:62:bd:d3:4c:84:86:05:09:
1d:11:96:00:c7:79:b1:7f:78:05:4e:f5:a9:80:84:
66:0d:b8:00:8b:68:79:c6:07:9c:88:64:b9:72:d2:
a0:16:f1:c2:8c:b5:e3:37:30:9b:1c:cc:95:ca:74:
2f:d7:4e:10:77:1c:c3:b4:a0:18:47:e5:58:06:81:
01:fd:ef:72:ae:b8:a2:c4:ab:e6:17:38:53:9d:c6:
db:a4:22:50:fe:bd:27:93:c3:57:d2:50:2a:5a:4a:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:48:00:8D:0C:02:3C:1C:35:BE:BF:68:FA:D7:CD:9D:9E:5D:E3
X509v3 Authority Key Identifier:
keyid:18:5F:3C:33:FB:01:13:B4:5D:45:92:9A:4C:06:F2:8C:71:4D:CA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF88M_sBE7RdRZKaTAbyjHFNyks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/1cfeb7-d0aa-4c1d-bb9b-763abab97101/1/GF88M_sBE7RdRZKaTAbyjHFNyks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8d:80:d9:d8:da:74:95:a3:83:6f:71:78:76:9a:e9:5a:13:
28:67:1a:3e:92:73:44:51:05:e5:f9:88:91:20:d5:d6:7a:98:
1d:8c:a2:c9:78:92:d7:62:e9:1d:56:9f:e3:28:2d:cf:05:82:
7e:44:a0:60:84:75:11:b9:6a:b1:1a:9d:66:a0:e9:19:88:a6:
ce:d0:77:8b:ff:a2:35:6c:f3:a8:7b:14:16:98:2c:79:dc:ba:
c4:29:08:1a:bd:0e:73:e8:40:ac:19:e4:4f:83:fc:a7:6b:b4:
a7:09:55:45:ed:53:05:75:81:b8:a9:47:14:72:5a:2c:e2:44:
6b:c3:81:c0:d6:b6:0c:bf:04:74:c1:06:61:ed:05:ea:ee:76:
3d:81:53:8c:06:51:d0:3d:5b:b1:21:c5:ac:ee:61:21:39:1e:
14:49:98:23:c3:dc:c6:03:43:97:63:05:46:36:93:10:4f:3f:
a8:cf:e4:a9:82:bb:95:0c:5d:fb:65:eb:85:15:26:cd:4f:c7:
7f:0c:11:bb:1a:a5:01:6e:60:44:71:1b:6b:0c:5b:ff:98:c3:
3b:a6:f8:fb:20:23:89:44:c1:4e:54:e3:14:38:0f:11:81:98:
e2:e6:8b:6e:13:e2:fe:98:c9:a3:ed:6a:86:30:1c:7a:ff:6f:
54:31:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:51 2025 by rpki-client