Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier: H0grRO5ImMwhk2IUyEUk89Z6dsWq0jFrJYXU1x+JNXs=
Subject key identifier: 5D:6E:BB:38:11:74:60:B9:37:28:6A:48:C0:B1:16:FF:A6:AF:2C:1C
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer: /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial: 019873E321F8B8DCE3F57D8D82A19419A183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number: 12E7
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: LE3iNIWJ7aQ4Wonm0PfKcB2MJDxoSsiHpzRNtODHiX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:21:f8:b8:dc:e3:f5:7d:8d:82:a1:94:19:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=5d6ebb38117460b937286a48c0b116ffa6af2c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:0b:5a:03:1e:eb:2c:39:1e:4a:63:8b:a8:
25:7f:7f:c2:13:58:24:99:23:0b:64:47:06:cb:38:
32:37:13:4c:29:76:ab:f1:a3:69:31:75:56:3d:4f:
e0:9b:99:4a:d9:5f:94:85:51:2b:74:ab:c8:7a:50:
34:03:d9:c3:8e:86:d8:2c:fc:9c:1c:66:a6:e4:15:
89:f5:5c:5f:b7:8c:b4:c8:dc:81:77:8f:cb:e7:bd:
1e:87:e5:91:1e:a2:58:89:a1:af:d5:d7:d3:f9:fe:
cf:0e:34:0e:eb:f1:59:85:3f:b1:1b:59:10:0e:66:
a7:0b:61:92:be:01:64:59:0c:c8:9e:f4:09:f1:c0:
5d:24:71:0e:e4:72:aa:44:bf:27:6e:c7:bc:78:19:
dd:42:77:73:c6:03:b6:fb:ff:7b:e1:14:5e:ce:31:
0b:1f:47:02:54:e6:1c:e1:c1:20:49:78:82:10:7e:
17:4a:3a:42:46:3b:e3:9a:2a:67:ef:53:81:08:f5:
c4:92:95:5e:c8:ce:d3:df:0a:9f:92:11:a3:96:88:
07:15:46:99:04:6f:f1:70:6b:2a:c0:cb:6e:96:18:
44:f9:db:a6:08:91:71:c1:c1:13:67:fe:a6:5d:92:
9a:54:14:4f:33:8e:99:ff:14:56:11:90:f3:b8:cc:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:BB:38:11:74:60:B9:37:28:6A:48:C0:B1:16:FF:A6:AF:2C:1C
X509v3 Authority Key Identifier:
keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:39:42:9d:1c:82:39:6c:6c:70:cd:38:cf:41:d7:32:3c:19:
19:1a:ad:0b:d4:bb:fe:cf:46:5b:23:e7:cc:10:cd:75:b5:f0:
87:d9:29:48:59:bb:45:d7:0e:b4:c2:07:4c:99:3a:cd:b3:f6:
c8:e4:41:fd:1b:b4:13:76:f7:e3:3d:ff:2b:c2:f8:b4:b0:cc:
f9:df:f8:d7:af:d9:5d:7b:60:cc:79:84:92:6c:47:c7:72:d3:
d7:9b:e5:ef:74:7f:b0:87:67:2a:d7:66:99:7d:07:55:5f:b5:
a4:bf:b6:24:87:47:e6:76:0a:6e:26:96:15:69:93:7a:e3:29:
a1:8d:22:24:9f:22:f4:3b:aa:e2:e5:3a:57:60:a4:02:38:f4:
2b:38:86:95:5f:e2:89:a8:61:d3:ea:25:38:ed:73:22:25:66:
80:28:c7:74:09:69:2c:b4:18:a0:87:2f:61:03:ed:f9:8f:5b:
18:39:f9:c5:e4:50:b0:ae:9c:12:cb:ee:40:ec:aa:3f:45:f5:
aa:0f:d3:fd:80:92:d0:3c:ad:df:9e:d9:08:62:ff:3e:e0:d3:
e0:5e:1b:cd:54:0a:80:47:5e:21:15:00:3c:61:77:c7:c1:67:
90:ae:60:ea:6e:57:8c:a6:7d:1e:b4:73:a2:dc:56:12:26:d9:
43:0d:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:46 2025 by rpki-client