
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: eOpqrdjhI+jenERGZIdjsS4pN/d6ZG9h+acxKUfbwXg=
Subject key identifier: 43:E2:D5:F0:15:A3:99:E9:81:D3:1C:F2:D2:D0:19:9B:F1:A0:C1:CC
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 01987BD297F6C4AF9A58A41D6B6A5228C5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 20:00:55 +0000
Manifest this update: Tue 05 Aug 2025 20:00:55 +0000
Manifest next update: Wed 06 Aug 2025 20:00:55 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: 3IyisT4EgMGoE82nCg4D9aN1YmBjLgNoVjuD/7R+qsE=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:97:f6:c4:af:9a:58:a4:1d:6b:6a:52:28:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Aug 5 20:00:55 2025 GMT
Not After : Aug 6 20:00:55 2025 GMT
Subject: CN=43e2d5f015a399e981d31cf2d2d0199bf1a0c1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:34:b3:56:5b:23:c8:92:37:8a:e8:41:a9:
fe:7a:8e:fe:7d:87:f2:17:27:ac:eb:55:87:e8:b0:
e9:30:cb:ff:d4:fa:58:54:77:9f:73:83:05:e3:b9:
88:74:a8:c8:ef:79:45:6f:b0:f1:45:37:67:2b:7d:
c6:40:42:60:7e:84:b8:7f:e2:4f:37:ea:e9:63:9c:
fd:56:f0:02:b9:99:ca:9b:37:71:52:34:6d:7b:4d:
c1:1f:a9:03:8b:3f:64:7c:94:cb:54:c8:f3:21:93:
00:55:fc:13:b5:6b:03:bf:bc:54:03:c1:5d:17:f6:
f5:11:dd:53:1e:83:36:59:5f:d4:0a:71:bc:94:7b:
f1:ea:6f:3b:c4:f3:1e:8f:d2:8d:d4:12:32:bb:12:
f9:0a:5f:4d:78:10:02:74:88:32:95:82:3f:85:d0:
d5:f8:9c:b1:88:26:3d:b1:03:93:6e:eb:d2:6d:e0:
58:78:56:58:33:e9:f7:1c:6b:7a:f0:30:01:02:93:
21:4c:f2:e3:99:a2:97:f0:24:5f:2a:37:bf:cf:a0:
60:4a:be:df:a7:9c:8b:59:78:48:7d:1e:1e:37:18:
c4:92:18:2f:6e:e5:15:66:1f:88:e8:6f:a1:1f:51:
26:13:5e:22:7b:e2:e3:45:f6:9a:55:eb:dc:27:3c:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:D5:F0:15:A3:99:E9:81:D3:1C:F2:D2:D0:19:9B:F1:A0:C1:CC
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:55:1a:db:ba:ce:bf:9f:af:1d:f7:70:c0:ca:23:3b:ef:c0:
5d:d5:66:f1:ed:b9:c9:30:8b:0a:f0:f7:a6:a0:93:ae:4a:b9:
28:8d:7e:a0:54:58:f4:a0:d3:19:ab:df:63:00:79:0d:b7:c1:
4c:dc:aa:88:14:51:9c:75:1c:3b:e1:40:e3:ce:66:36:4e:1e:
85:1a:97:56:f5:97:68:56:f4:f8:b0:5a:bb:16:7f:b7:87:2e:
95:a7:4f:f9:b2:de:84:dd:df:78:9d:de:d4:b4:36:7c:1f:1f:
41:dd:7b:59:36:8e:1d:b8:03:60:73:f6:58:1a:08:6e:5b:b3:
c1:4f:54:57:58:af:08:03:5c:67:bf:8e:12:97:8a:6d:f8:d9:
1a:a6:7c:21:41:fd:99:f0:c8:92:a7:a7:bd:40:68:bf:31:79:
91:88:48:36:c0:6c:b0:40:d1:1d:4e:d3:fc:ed:7c:54:f0:5d:
38:93:55:73:c0:27:b0:e4:06:32:8a:bc:35:43:0a:0a:44:ca:
5d:3b:58:88:ae:ed:df:8a:a5:d2:0a:b1:a5:33:d9:6d:4f:78:
42:c4:67:ed:46:d4:91:c5:89:8b:a0:15:2c:17:7b:2c:1a:0c:
81:58:83:f9:b6:b1:e3:2d:bf:df:1d:a9:f9:ba:4a:7b:34:c7:
6c:fd:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:03 2025 by rpki-client