Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: 5UR5IkcZtzLtteDIQWZ3mgKsieE1Knm9wP/0qKCmSJQ=
Subject key identifier: B0:69:E1:50:5D:51:14:01:BB:42:4E:22:EF:D6:33:6F:29:66:B3:DF
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019879E4637AC5EC9CDB5C24FBFC3AFEC0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 11:01:07 +0000
Manifest this update: Tue 05 Aug 2025 11:01:07 +0000
Manifest next update: Wed 06 Aug 2025 11:01:07 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: rKGMVP4k60BuaHV6qnfQCuRYza+HzQO2EWbVjsZgHlE=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:63:7a:c5:ec:9c:db:5c:24:fb:fc:3a:fe:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Aug 5 11:01:07 2025 GMT
Not After : Aug 6 11:01:07 2025 GMT
Subject: CN=b069e1505d511401bb424e22efd6336f2966b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:ff:4e:77:cc:26:5b:19:09:d6:a0:37:83:
86:d3:ea:e3:10:84:c2:27:22:4f:12:b8:0c:fc:e8:
41:a8:7b:8f:83:e2:de:16:2f:4e:4b:74:db:d3:0a:
53:cf:0b:cd:ad:9a:e4:6f:81:2b:b0:05:7b:17:17:
20:92:e9:01:6a:75:4a:79:3d:9f:8b:2a:45:e6:18:
28:a0:e0:7c:f3:7a:e1:85:81:66:5b:eb:07:dc:b9:
bb:f5:cc:9b:7a:ee:d2:5b:5e:0d:4a:c9:36:03:1d:
e8:9b:d6:04:fc:b7:8e:b0:da:f0:1b:8e:7f:fe:8b:
68:79:bc:38:f8:b5:1d:f0:57:cc:68:d3:85:f4:33:
03:34:bc:15:0b:a7:ce:53:e1:3e:ff:05:1a:b8:5e:
35:61:89:e2:d8:70:33:11:a7:5f:3a:8e:14:cf:17:
a8:5f:e5:d2:72:72:b7:3a:16:98:aa:2e:ce:bc:64:
4e:ce:1a:67:30:47:f2:97:be:36:d8:27:93:69:0e:
99:ed:a8:69:17:6f:9c:15:b2:41:3e:56:1d:09:90:
f5:fe:16:81:fa:88:27:ed:53:0b:c8:23:bd:c0:4f:
17:17:1e:90:e4:a0:fa:26:88:f7:44:69:a6:0a:42:
84:a8:db:fc:08:5a:9b:86:60:bf:26:62:3b:1a:f6:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:E1:50:5D:51:14:01:BB:42:4E:22:EF:D6:33:6F:29:66:B3:DF
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8e:fa:e4:05:78:e3:d9:43:fd:c8:6b:49:1e:04:80:31:f5:
a2:74:ef:87:49:da:69:20:56:a4:42:04:9d:89:34:dc:f0:24:
5d:4c:1b:bb:ef:f5:1a:d4:df:4d:a1:09:a6:c8:03:7d:39:9c:
bb:69:29:7e:70:83:b1:fc:00:ba:b5:1b:66:27:fd:1a:11:81:
a3:b9:83:ca:a1:ba:60:0e:f7:82:be:58:a5:08:ee:8f:14:73:
e4:88:ec:08:72:50:1c:44:19:4a:7c:7e:50:e8:5c:5d:41:e7:
02:03:f6:88:64:e4:df:56:db:04:17:6d:f4:54:1a:dc:7e:fa:
14:64:e0:e1:36:d7:3e:d9:ee:84:9d:39:7e:37:4a:ce:cf:bd:
98:83:c3:13:d5:f5:c6:11:c4:b3:11:26:05:f3:b3:8d:b4:38:
25:0e:ed:95:08:a8:3c:2a:57:12:03:d6:53:e0:7b:32:e1:5b:
55:53:41:b2:a5:98:69:06:ee:14:21:df:11:57:3d:4f:85:c1:
bf:ed:a1:25:de:45:ef:e2:63:10:c0:dd:2a:c2:83:65:c9:74:
c1:79:ac:b4:34:81:91:70:ae:00:04:19:0f:6a:d6:04:00:db:
9b:7e:80:85:81:9a:d2:58:31:e5:92:94:1a:c9:32:7d:58:f4:
e0:f3:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:51:29 2025 by rpki-client