Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: dhRQCZsKw7ifn3LoC6+JeXNfKB82KgEcdPdm8IEaZo0=
Subject key identifier: AA:E6:47:8E:DC:89:54:80:92:43:5F:F9:08:77:20:36:AD:64:C6:1D
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 0198903521C8FB8AC7545C77DB1277B21042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0CF6
Signing time: Sat 09 Aug 2025 19:00:57 +0000
Manifest this update: Sat 09 Aug 2025 19:00:57 +0000
Manifest next update: Sun 10 Aug 2025 19:00:57 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: Mi6OesrGxyNyRG6NXhFqpy/6z4St8POgHrWSgDs6ZFM=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:21:c8:fb:8a:c7:54:5c:77:db:12:77:b2:10:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Aug 9 19:00:57 2025 GMT
Not After : Aug 10 19:00:57 2025 GMT
Subject: CN=aae6478edc89548092435ff908772036ad64c61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:2b:23:ce:27:aa:b0:69:07:40:d2:6b:8b:
69:55:2e:48:92:68:d8:d5:86:8b:0f:75:7d:e0:c9:
75:9a:40:46:ca:ef:18:88:93:9e:3f:a7:15:66:f0:
64:78:b5:c0:7e:d0:30:a8:63:a7:1b:01:b1:32:37:
cb:64:ab:28:8b:f6:9e:00:28:72:ac:08:7c:49:14:
9f:0a:1b:6a:52:ed:7e:b6:db:3c:44:88:9a:a5:be:
d5:d3:e3:b7:52:cf:66:41:c4:9a:34:16:7b:00:6f:
e1:e3:e7:1b:50:0a:ae:17:3d:10:2a:cd:3e:dc:78:
a0:c6:0c:bb:8c:71:b2:5b:00:a4:81:fb:73:8d:86:
28:c2:d6:54:11:d7:71:ed:01:72:9a:ec:29:02:4b:
30:6d:82:55:81:01:97:85:a6:4c:42:dc:64:9b:a6:
3e:c0:8d:c9:cf:69:22:96:31:b3:c4:c4:e4:e1:3b:
e9:4d:8d:dc:39:1d:eb:8e:17:bd:e6:b3:7e:ae:c9:
72:19:df:65:7e:66:09:a7:05:32:09:d0:4a:b6:c9:
8f:d3:8c:f4:6b:1f:13:11:2c:13:76:be:f4:d4:fa:
25:ee:52:9d:8e:b7:71:f0:d1:8e:3c:9a:be:40:9b:
a9:72:ae:0f:44:84:28:f2:fd:71:5d:70:51:14:69:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E6:47:8E:DC:89:54:80:92:43:5F:F9:08:77:20:36:AD:64:C6:1D
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:be:be:66:c2:ba:f0:5d:56:bc:91:4b:42:10:9c:a4:ac:1a:
c6:6e:d8:70:9a:1c:42:7e:81:83:80:b5:1c:52:3e:98:1b:98:
c9:fb:9f:f1:ec:22:5c:25:9c:1e:e8:53:89:69:b0:b5:b3:f6:
68:96:99:03:af:8c:e6:75:34:72:63:eb:b3:eb:96:88:77:7b:
44:a2:48:b2:5c:1b:9a:99:a5:aa:7d:2b:04:eb:b9:a7:40:60:
e6:ad:c8:62:e5:31:a0:75:b5:80:cd:ef:93:90:1f:27:82:32:
68:4b:ac:aa:87:48:b9:99:31:fc:77:c0:df:f5:ca:e3:b2:5b:
47:93:0e:80:70:13:a1:81:5d:5c:70:96:40:39:10:42:97:c3:
da:a1:86:74:e9:a3:03:53:1f:31:cb:a7:05:96:6d:86:9c:b6:
b1:10:47:9e:55:36:51:ab:cd:7e:46:65:b9:11:32:0d:b0:0d:
e9:54:19:af:4a:b9:30:62:eb:16:4d:53:34:31:c6:d5:13:6c:
c9:71:34:1a:5d:6e:2e:67:d9:55:d1:bb:47:27:1f:5f:13:71:
52:92:b0:51:37:9f:4b:69:29:28:d6:5f:0f:34:c9:ad:7a:48:
8b:9c:f9:c3:18:63:9b:fc:de:52:0c:12:2a:a8:18:fd:eb:6d:
9b:18:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:44:57 2025 by rpki-client