Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: F7u1qJqhFxoiuYNEHbUrm05qlUuVvhXNknC0W2uELAI=
Subject key identifier: A9:5F:83:11:3F:88:FB:A5:89:55:12:F3:61:4D:6B:5D:A3:6E:0B:5D
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0198906BAD35BD6A31B88BEC0106DB92A9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0F5F
Signing time: Sat 09 Aug 2025 20:00:32 +0000
Manifest this update: Sat 09 Aug 2025 20:00:32 +0000
Manifest next update: Sun 10 Aug 2025 20:00:32 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: 8lKTtPZOMVb9O7xPbkDCxYC8U1259ftzzv/pSq2sEdc=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:ad:35:bd:6a:31:b8:8b:ec:01:06:db:92:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Aug 9 20:00:32 2025 GMT
Not After : Aug 10 20:00:32 2025 GMT
Subject: CN=a95f83113f88fba5895512f3614d6b5da36e0b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:37:d5:33:51:23:8a:81:58:21:2a:95:e9:
9c:03:15:cc:ca:b6:08:04:6f:b3:cc:a9:12:69:b1:
f9:67:0d:b2:88:80:75:f5:f6:09:1c:15:04:f2:42:
51:f1:b9:d8:ce:22:38:81:3d:ee:c3:ea:c4:50:b2:
54:69:ad:b3:1d:f4:72:38:73:b2:42:eb:95:09:28:
14:6a:7a:e8:44:a2:e7:f8:9a:21:b6:d9:ea:3c:e3:
59:2e:9b:77:12:9f:8d:a4:fe:b3:c7:00:6b:0b:b7:
73:0b:c1:2c:5d:e5:55:36:e5:da:97:01:9a:41:bd:
b3:ef:63:10:f8:0e:08:e8:62:e9:2b:b3:b8:be:b3:
83:33:bb:b0:ef:93:27:30:ca:5e:a1:f0:14:08:9a:
24:95:3f:4e:bd:a7:8b:85:fe:5b:94:e2:57:33:d6:
25:2a:5b:ff:f1:74:e6:c7:ea:16:b3:d9:6d:2c:c9:
9a:23:0d:f7:8a:58:18:57:9c:dd:36:82:e5:ee:27:
6d:1e:69:12:27:63:4e:32:53:6c:66:66:b6:44:23:
3c:c0:c0:89:fb:15:88:f9:ee:eb:cf:2f:0d:84:94:
a9:a7:af:de:3d:2a:1b:66:f1:c3:88:93:5b:dd:45:
b7:20:9a:12:0b:08:5d:d6:40:1f:27:6a:74:6e:75:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:83:11:3F:88:FB:A5:89:55:12:F3:61:4D:6B:5D:A3:6E:0B:5D
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:1b:47:e5:5f:c8:8f:fb:dd:80:f6:d9:b0:a3:62:6e:ca:
6e:d4:22:d0:09:78:cd:98:2c:31:7b:d0:4a:1a:16:c2:87:0a:
ce:cc:1b:db:ac:0c:b8:11:8d:7a:7a:f0:80:0e:89:ad:c0:c7:
fd:13:22:4d:a5:e8:e8:dd:d9:c3:0c:dc:fa:15:b4:9b:2c:26:
99:82:b5:e0:80:7b:de:65:ce:0e:92:42:31:2b:c0:44:52:2d:
10:38:a2:98:53:6d:bb:af:4d:17:cb:12:6f:15:fe:d9:e2:ac:
0a:88:0c:8b:5c:b3:25:80:28:c1:bc:b2:84:a3:2f:f5:5c:93:
8a:6f:30:3f:e3:53:b3:be:78:31:0c:bb:18:29:7a:a2:eb:5a:
52:2a:fd:1a:ed:15:1b:63:aa:08:10:32:bc:d7:8d:bd:ac:2b:
90:23:0e:49:88:17:46:c7:98:78:1b:76:79:fc:88:26:5d:f9:
72:ce:df:1e:59:6b:f4:ed:64:1f:43:99:13:7d:3c:f6:2d:cd:
89:70:30:0a:86:73:04:aa:20:ff:7d:e3:42:f5:3e:69:00:b9:
0a:07:c1:73:39:82:f1:5d:f7:4c:04:3d:44:d3:d5:fa:21:91:
9b:c9:d4:26:d7:13:e9:3d:b9:be:df:32:0e:42:fa:4d:7d:ed:
c8:2d:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:39 2025 by rpki-client