Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: HACD29a2WfDlbUE3sC7HWCqQFeyGrqhe55U05OhVE3A=
Subject key identifier: E5:56:8A:FD:3C:ED:76:58:7A:58:40:31:DA:B5:AC:E5:FC:93:47:5C
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01988EEB831834318D15B18D14332D61F8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 13:00:55 +0000
Manifest this update: Sat 09 Aug 2025 13:00:55 +0000
Manifest next update: Sun 10 Aug 2025 13:00:55 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: 2Eq+Nfq+d0nJDHuRxu/vtI2ggGUqgBsh4HVfdqjEeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:83:18:34:31:8d:15:b1:8d:14:33:2d:61:f8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Aug 9 13:00:55 2025 GMT
Not After : Aug 10 13:00:55 2025 GMT
Subject: CN=e5568afd3ced76587a584031dab5ace5fc93475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:b7:af:a9:0f:7f:d4:ce:48:e1:80:7d:ce:
16:53:f1:b0:e2:b4:66:f1:ea:43:2d:9a:1f:76:89:
33:fe:bf:22:d9:68:4b:d9:68:a3:3f:08:81:89:95:
ec:1b:ed:17:00:8c:18:3d:6b:25:31:df:37:87:0d:
e1:56:6b:37:83:e0:54:0e:e3:1d:bb:4d:57:80:8f:
f2:58:f3:e3:9e:43:88:2f:91:20:49:f6:b1:db:22:
14:87:b8:ec:5c:ca:e2:f5:5a:28:4b:9b:25:79:b6:
c2:1f:da:45:10:a5:3a:ba:10:e0:d0:b3:63:34:2f:
76:a7:9e:3b:fb:32:1c:df:c2:20:1b:6d:ea:f0:4c:
bf:91:8a:62:7a:da:c0:66:74:aa:08:67:a9:02:16:
69:66:3c:c4:78:40:f0:a8:5d:1b:eb:f3:54:83:2e:
e0:97:7b:cb:76:95:dd:40:72:00:a1:e0:b1:cc:f1:
44:13:82:79:e8:08:7d:6f:22:b1:33:95:f7:d8:ba:
15:e7:a3:e1:8a:01:51:d4:41:4d:72:c6:73:39:59:
5f:15:39:fe:85:88:b7:1b:64:28:4c:3b:67:19:d0:
b9:a4:cc:f3:14:7f:93:c3:86:58:a9:40:ca:1b:7b:
27:2e:6c:9d:b7:43:25:e6:11:2f:4d:54:23:29:ab:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:56:8A:FD:3C:ED:76:58:7A:58:40:31:DA:B5:AC:E5:FC:93:47:5C
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d0:e2:c7:4d:5f:13:b9:c6:3d:08:4f:f5:1c:a9:a8:7e:fb:
58:a7:0f:33:86:5d:d2:78:c8:14:8d:6e:28:be:6e:78:e1:82:
3a:df:0a:e2:1d:29:d7:56:40:e8:8f:0c:27:17:9b:73:2e:75:
65:ec:75:e2:86:74:2a:42:86:26:e4:53:be:01:c4:47:5e:6e:
5f:f2:18:de:53:63:6b:a4:20:fe:13:37:4a:e3:16:c7:d3:96:
11:d3:e2:b2:c1:a5:e7:0e:fb:5d:58:81:7e:79:fe:c4:22:39:
ef:39:7c:93:99:bb:b4:8a:8f:aa:27:bd:13:07:27:63:b5:05:
d8:c1:d1:1a:a5:86:0d:00:9e:8f:f3:3e:a2:5a:a1:ed:94:fd:
7b:b3:e6:0c:6d:5f:7a:06:ff:50:57:07:4b:b1:a3:21:46:2c:
47:3d:a3:be:e6:0a:2f:49:88:e5:07:6d:4d:15:90:21:f8:33:
b0:dd:b1:51:38:c1:e9:18:9d:b0:65:ec:b6:4a:07:c5:74:62:
5a:ff:56:43:3a:18:9e:a0:50:a7:b2:4d:a9:e9:aa:bf:3e:2b:
ee:92:ed:29:ce:f6:16:51:29:cd:3d:8b:1f:e4:b6:20:e9:00:
92:a5:91:fc:78:fe:bd:30:b4:58:5a:37:61:0c:7f:e0:a8:a5:
cc:15:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:35 2025 by rpki-client