Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: ED8H//JSEaRNTe4zP0qyAKHx1p54IE/Kd3l7/iIBoOA=
Subject key identifier: 83:37:3C:7D:CA:9A:C8:35:59:A9:94:62:A3:56:A2:C7:A4:AA:89:B7
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01988B104668392F340B99536B1FD7F35641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 19:02:36 +0000
Manifest this update: Fri 08 Aug 2025 19:02:36 +0000
Manifest next update: Sat 09 Aug 2025 19:02:36 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: ZfEJVGMkBAC3YbZbMeXybK2jGs+P+Hz9tsBDNQgoIT8=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:46:68:39:2f:34:0b:99:53:6b:1f:d7:f3:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Aug 8 19:02:36 2025 GMT
Not After : Aug 9 19:02:36 2025 GMT
Subject: CN=83373c7dca9ac83559a99462a356a2c7a4aa89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:1f:8b:d2:fb:3a:4f:a3:f9:23:94:27:62:
fd:5c:a4:04:75:9a:fd:9e:e2:78:ea:d3:80:85:3f:
18:94:13:f3:9c:51:37:60:4e:f0:47:5e:bb:c7:d4:
3f:65:3c:95:4e:1f:5f:5b:93:27:78:7a:86:eb:7d:
35:23:69:3a:44:57:39:23:39:04:cd:0e:a6:07:ef:
4e:f3:2e:17:63:ff:51:3e:12:0d:dd:63:71:c9:13:
b7:eb:3a:3f:1e:d9:0b:e2:c5:77:06:11:94:c8:5c:
47:2b:8f:9e:28:5c:20:c9:b2:02:79:5e:89:df:24:
72:bf:1e:73:38:60:5f:63:c6:12:9c:8a:02:9f:ee:
49:02:11:cc:0f:4a:8a:0c:6b:ce:3c:b7:47:80:74:
31:39:bd:b3:f7:e5:a1:9f:f9:f8:9e:da:f6:29:47:
3a:ad:ac:9a:10:d3:39:64:aa:f5:99:11:19:60:11:
78:70:9d:6d:f7:f9:53:d5:d4:76:67:bd:33:80:e0:
07:76:55:52:41:db:3f:f1:9a:91:cc:2b:10:fe:3c:
9e:71:6d:6e:c0:da:62:ab:a8:74:8c:9f:d6:18:b2:
f3:88:b1:b2:43:26:9b:00:0a:a9:e2:91:4b:52:aa:
01:25:5e:03:d3:29:0e:a7:03:3c:70:7b:87:df:d1:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:3C:7D:CA:9A:C8:35:59:A9:94:62:A3:56:A2:C7:A4:AA:89:B7
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:c6:05:78:84:0a:50:65:e7:7d:ba:44:32:f2:48:e2:6b:
47:8a:41:97:0b:d0:62:45:0d:ad:71:20:22:da:29:e7:ff:9e:
72:8a:ca:08:6e:bc:96:c6:b6:c3:90:28:dc:2c:96:bb:f5:3e:
72:f8:e9:7b:d8:1a:b3:bf:6b:0e:79:4c:41:eb:21:bd:55:fc:
af:d4:e6:7a:98:f0:46:8d:8d:af:53:84:96:e5:7a:fb:2f:93:
89:c8:fc:bc:52:a0:d6:32:67:7b:c8:2b:67:ec:16:10:ea:d9:
e7:f6:28:30:79:86:2c:94:89:46:06:d6:19:41:cd:9c:33:50:
a5:a2:22:7c:bc:37:13:ef:f2:51:12:90:03:eb:80:28:ff:bf:
ba:6a:d8:77:30:11:e3:57:71:64:d8:01:77:8e:0a:3e:fe:97:
b0:82:c2:7b:5f:f6:0e:68:55:d6:67:a4:c5:df:35:69:80:0e:
73:c2:53:e2:06:7d:e0:01:34:f2:7d:47:92:2f:5d:3c:59:9b:
07:f9:03:41:09:89:85:53:11:9a:2d:60:1c:70:89:d7:ca:73:
09:ef:82:fb:bb:b7:c0:15:a5:21:ba:b1:9a:05:35:a4:eb:a3:
6e:cf:0f:b1:7d:15:e9:ca:5c:45:01:e3:ea:8b:c1:d1:b3:02:
8f:f5:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:58 2025 by rpki-client