Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File: GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier: 0ZmA0egEa6qwk5AdyDVJLuvpx3gvtzJuOP+RKAp4P3I=
Subject key identifier: 17:B0:7E:67:89:90:7B:67:57:81:C1:31:6B:42:50:A4:0E:6D:8E:55
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer: /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial: 0198A0F15181C9B6F8B319D03DACFCB08611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number: 162C
Signing time: Wed 13 Aug 2025 01:00:26 +0000
Manifest this update: Wed 13 Aug 2025 01:00:26 +0000
Manifest next update: Thu 14 Aug 2025 01:00:26 +0000
Files and hashes: 1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: 5qh/v30E5OxTBDBHKhnPTC/Q9oTZ7ILRUN70AC+2/lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:51:81:c9:b6:f8:b3:19:d0:3d:ac:fc:b0:86:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Validity
Not Before: Aug 13 01:00:26 2025 GMT
Not After : Aug 14 01:00:26 2025 GMT
Subject: CN=17b07e6789907b675781c1316b4250a40e6d8e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:a5:6f:41:6f:e5:95:98:ac:0f:10:49:e4:
24:e0:d1:30:ec:6a:4a:bb:ab:b7:b3:55:2b:66:00:
bf:b1:d0:1b:9d:7b:28:2e:4d:85:5f:57:3d:79:d9:
96:40:66:65:4a:c6:77:98:d0:8a:db:0e:b8:fe:2e:
9f:67:94:36:ab:9e:e5:47:e3:ad:ed:85:c4:b2:07:
45:9c:00:c4:73:bf:d9:af:6c:b5:0e:7e:2d:84:41:
9d:64:f7:b9:41:db:ac:f7:b7:b3:af:b8:79:1a:14:
d8:b7:7c:88:47:54:2a:c4:55:54:7e:a4:3a:49:3e:
36:b9:42:93:d9:76:d5:b2:46:7a:cb:c0:0b:13:d4:
a2:6d:d8:f0:86:60:ee:d6:c5:a7:0b:94:68:c9:d6:
ea:75:a1:61:46:88:74:22:9a:10:81:bc:a4:c3:39:
d3:8d:46:59:e9:30:cf:ad:2a:93:6f:22:b9:79:9d:
b0:07:8f:23:bd:8e:35:c6:e6:64:b2:01:df:4e:bc:
63:30:9e:3d:cd:66:37:0d:31:7b:31:a1:f6:ec:e6:
7d:55:dd:9b:49:db:79:c8:5c:3b:3d:22:0b:ef:85:
5f:f9:14:d0:d5:77:a9:40:8b:6c:9f:aa:65:44:69:
75:98:e3:b3:9a:8d:b9:e0:81:c0:54:df:d8:b9:88:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:7E:67:89:90:7B:67:57:81:C1:31:6B:42:50:A4:0E:6D:8E:55
X509v3 Authority Key Identifier:
keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9c:4c:a8:9b:1e:74:b4:23:c0:a9:68:0e:c9:52:cb:ee:73:
b7:d9:f0:03:4b:73:24:c4:34:63:88:08:bf:c6:9f:c4:9f:09:
d8:75:c5:a4:e7:d0:cb:b0:5b:39:06:ea:9f:79:bf:b6:89:d5:
77:72:ad:44:e2:c7:24:c4:1b:e5:db:d8:47:37:e4:b5:90:13:
c0:5f:fd:96:15:61:17:48:53:3f:0b:a2:9c:60:ca:cf:17:de:
56:e1:3b:cb:dd:c9:12:89:dc:b4:98:b4:4d:d0:87:f1:b9:f7:
dc:0a:c2:9a:21:be:cd:ac:02:f7:c4:27:48:f0:09:47:84:05:
b8:53:da:95:34:6a:65:69:0e:d8:2a:ce:c1:27:6b:16:b5:cf:
b7:da:cb:cb:ce:61:a2:73:22:78:c5:1f:55:dd:2c:06:2f:93:
0e:b7:ea:5e:d6:b9:d8:d2:27:a5:5c:d6:c3:db:d0:29:5f:db:
17:f8:6a:74:07:a1:89:d9:48:01:24:57:f2:84:f5:60:47:5c:
9e:3d:60:ef:47:72:ed:7e:40:58:87:5d:97:54:20:81:75:b1:
90:36:34:5b:a6:37:34:9f:f2:c4:6f:82:39:75:07:62:1e:93:
4b:fb:7d:81:51:60:a4:a9:66:11:bc:8d:9a:10:e4:dc:be:ad:
db:0b:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:29:00 2025 by rpki-client