Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File: GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier: E5pPFWXjdSRcuG9JKaejM7LYi9GnPpv4v+UOnv50RT4=
Subject key identifier: 1C:59:69:25:C4:8A:C1:0F:84:53:BF:84:DC:3D:58:E9:E0:AE:27:6F
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer: /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial: 019872CF6026ABB2B32A995F8677DC5B3622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number: 03DC
Signing time: Mon 04 Aug 2025 02:00:49 +0000
Manifest this update: Mon 04 Aug 2025 02:00:49 +0000
Manifest next update: Tue 05 Aug 2025 02:00:49 +0000
Files and hashes: 1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: 9K811gXnqpc7JwERlqtO/8ygW/Yx+GdP9rR9kRoVPH8=)
2: z6gRZQL9dktzDQCQibZshxDiKi4.roa (hash: 4kSTaNBCK4SMDmYd2plLBmE2hYKvGg7VL6yg3cqclD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:60:26:ab:b2:b3:2a:99:5f:86:77:dc:5b:36:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Validity
Not Before: Aug 4 02:00:49 2025 GMT
Not After : Aug 5 02:00:49 2025 GMT
Subject: CN=1c596925c48ac10f8453bf84dc3d58e9e0ae276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:5d:cf:5e:16:cd:3e:85:13:75:07:a2:5f:
bd:1e:a2:36:e0:72:e9:ec:98:f7:cd:2d:c9:73:89:
78:e3:5c:ca:36:e7:2a:0e:e7:40:ec:10:31:6c:cf:
59:e0:b6:86:6f:c6:df:75:55:18:7e:64:0d:1a:4a:
a3:31:19:cc:17:e7:70:eb:6d:e9:d3:47:99:68:e6:
35:a3:e9:55:7b:42:87:a9:01:5b:26:18:d4:ce:4a:
9f:77:65:b0:07:16:c0:5c:07:6d:cf:b1:f7:a8:c8:
a0:ce:37:8d:80:e2:ff:a4:f4:e9:21:8d:4a:73:31:
63:ce:69:0f:f6:db:5f:b8:41:53:4c:cc:9d:eb:f2:
17:77:9c:52:68:b5:ab:b4:67:ea:fb:e8:c0:4b:25:
7a:a3:c0:db:97:ec:b1:a2:54:e7:7e:f5:f1:ff:8a:
de:04:4b:d1:74:34:3e:5e:36:a3:80:a3:27:e2:1e:
13:4d:ba:2a:7f:c3:53:df:e7:6e:39:d9:45:1b:2f:
71:32:16:93:9b:be:3f:03:41:ff:05:2c:7d:a8:93:
fc:b9:16:d9:ca:d1:11:68:0e:23:d2:19:f8:31:d6:
57:61:76:36:50:c6:36:51:34:bf:6d:f4:f8:84:8c:
0a:74:04:9e:71:d3:87:f6:98:ff:21:53:1d:3b:c1:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:59:69:25:C4:8A:C1:0F:84:53:BF:84:DC:3D:58:E9:E0:AE:27:6F
X509v3 Authority Key Identifier:
keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e4:3e:ba:74:fe:05:ef:97:70:76:24:87:25:c8:f6:ce:73:
74:6d:9c:18:30:68:7a:15:6f:7b:b6:40:af:f4:0b:c2:08:ca:
56:e3:93:3e:8e:16:1d:26:14:3a:1e:df:b1:0e:a3:75:af:89:
46:02:d2:87:b8:8f:8b:99:ee:d2:85:6d:1d:78:5c:29:5a:30:
1d:4f:44:dd:2b:fa:6c:bc:d4:92:b6:10:d2:df:c6:10:7e:a5:
19:25:b3:ff:53:dc:a3:aa:e1:53:78:12:84:68:fd:0c:78:8f:
71:72:ec:98:4b:d9:19:c2:22:7b:da:c8:3d:61:dc:0f:2a:e3:
d9:4e:00:e3:af:25:af:ef:42:43:a2:27:6f:f9:75:74:64:d2:
b3:0b:51:b0:5f:23:08:98:20:a2:68:8b:a4:b1:09:dd:bc:ea:
11:a0:8c:76:31:7b:9a:bb:1a:86:01:09:c1:fa:3d:9b:a3:bf:
fc:9a:75:a1:e1:01:3b:d3:80:4f:74:7f:96:f5:17:f0:be:85:
eb:6e:d9:77:d1:23:2e:88:fe:fe:da:5d:81:c2:bc:2d:1b:f6:
a5:bd:17:41:9e:c4:37:a5:fc:96:cf:17:bc:7f:50:21:33:11:
73:89:70:df:7c:d6:b8:90:3e:fb:56:dc:b5:4a:07:7b:09:10:
c9:ac:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:42 2025 by rpki-client