Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: 4QE88Yav8ROQSaqP1HYBxKECZ6yIeY+SuPMpxhXjJMM=
Subject key identifier: 60:F9:96:77:D9:5A:D1:F1:48:CE:A6:08:E3:4E:51:9A:31:9E:6F:32
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 01987D8B14B2633BA0631A364C18A8197521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:02:03 +0000
Manifest this update: Wed 06 Aug 2025 04:02:03 +0000
Manifest next update: Thu 07 Aug 2025 04:02:03 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: af4UltQYFVUhgUoVVe5n97wT6bQPnIVtHn7URl1C6Go=)
2: ocSKLBAvwLdO6Bz9BzgpYro5A9k.roa (hash: Gf/KD5MQfVoD7yuJC1PN6VI3qKYUcNl5HcQ7qcq9TAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:14:b2:63:3b:a0:63:1a:36:4c:18:a8:19:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Aug 6 04:02:03 2025 GMT
Not After : Aug 7 04:02:03 2025 GMT
Subject: CN=60f99677d95ad1f148cea608e34e519a319e6f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:7c:5e:74:13:50:b3:c5:6f:98:04:5a:85:
91:b6:29:14:a6:15:5c:40:63:af:ed:9b:94:ab:97:
49:4f:9f:a8:f8:79:d5:9c:30:7c:eb:f8:14:a2:98:
70:5a:35:96:9a:83:da:a1:af:d8:74:eb:7a:dc:c1:
35:ad:c2:c3:0f:b3:39:af:ad:4e:36:d2:ad:ed:42:
2c:ca:a9:5c:25:ff:b8:88:84:7b:d4:47:c3:a9:0e:
80:b2:6d:d9:c1:6d:37:b8:85:ca:ec:1e:ac:49:78:
c3:3f:72:bb:c7:df:7a:94:55:a7:85:23:50:da:77:
7a:13:d7:1f:25:81:2b:71:29:75:7d:95:c4:77:a3:
01:07:8d:b7:22:82:96:fd:ea:5b:4f:4d:ae:c8:7f:
33:43:81:55:17:ec:42:25:1e:49:0d:95:77:1c:ff:
10:cd:ef:56:ba:00:28:6d:fb:9a:f8:0b:57:40:ca:
81:71:a2:e2:18:da:92:4e:2c:d3:e5:cb:e0:32:dc:
e8:a3:62:cb:c7:f3:67:92:65:3f:be:cf:0f:38:78:
be:fc:cc:0b:86:19:78:7e:fb:4a:ac:e5:7d:6a:73:
f6:b0:9a:33:c5:53:80:c5:56:e1:6d:15:ad:16:19:
74:9e:cf:19:e3:5f:9a:8f:7a:d9:1c:b5:8c:ba:f9:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:96:77:D9:5A:D1:F1:48:CE:A6:08:E3:4E:51:9A:31:9E:6F:32
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ba:f5:73:6c:5e:42:97:b2:55:1d:0e:fb:f4:43:19:1a:82:
b5:67:f9:f3:1d:0c:2f:0e:68:ee:25:83:32:4d:c2:c8:78:f5:
c8:40:a1:6c:e6:a6:6b:05:f8:7e:fa:b6:d8:23:c3:f6:3d:03:
2e:3e:6b:4f:c3:ad:ec:4e:cb:c6:55:22:cb:bb:b1:2b:75:e8:
45:cc:cb:72:fe:ba:00:22:21:38:cb:41:07:60:a9:86:c2:df:
c0:e8:b5:dd:f6:a4:1c:eb:bd:da:55:79:e0:30:59:6b:cb:8d:
75:3b:c7:6c:99:e5:22:88:bf:c3:e6:e1:29:ec:63:03:b2:dd:
bd:e2:93:c5:7e:d8:34:fe:b2:85:2a:5d:50:64:b2:e6:37:6c:
88:27:16:36:c7:24:84:fc:da:4c:f3:40:39:0f:bb:fb:06:6a:
45:d8:5f:29:59:39:c9:52:29:12:50:c7:93:41:33:72:7f:4f:
c1:fa:bc:5f:76:1f:88:09:8e:17:dc:ac:06:d7:de:d4:9a:d8:
d0:b8:9d:f3:59:fd:ee:25:20:7d:96:40:5e:c5:84:f4:cc:d3:
36:0a:f0:e0:2f:42:33:c8:e9:f8:76:52:90:38:48:a4:f2:2b:
cc:ea:d6:8c:f7:f3:e7:6e:4b:2b:7f:e4:37:fa:41:0e:1b:de:
7b:de:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:47 2025 by rpki-client