Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: xsLMBJi+YWtJNg7tHHHl/TaCmKVd+kPPO+9UO9qWXcE=
Subject key identifier: A1:4F:56:5D:9D:E0:05:FA:80:6B:E6:15:64:D8:7B:5A:D4:36:A9:A3
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 01988A332DDCEE42A7215EEC844D2720FEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 15:01:06 +0000
Manifest this update: Fri 08 Aug 2025 15:01:06 +0000
Manifest next update: Sat 09 Aug 2025 15:01:06 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: KAEcQtvyiMn8eiXLnEGyEPZg8unz/BkYU3pUaGps7Jo=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:2d:dc:ee:42:a7:21:5e:ec:84:4d:27:20:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Aug 8 15:01:06 2025 GMT
Not After : Aug 9 15:01:06 2025 GMT
Subject: CN=a14f565d9de005fa806be61564d87b5ad436a9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:ca:03:8f:56:1f:03:b5:4d:2e:7c:74:93:
c8:f4:bc:26:12:52:d5:3b:5e:06:ed:3f:b9:54:0d:
9c:8d:62:35:10:c5:de:f3:23:29:f9:aa:3e:e0:5e:
b2:08:32:2f:c7:72:3f:27:c8:5f:b3:3b:6a:45:62:
b1:b0:66:1a:ac:8b:04:1a:07:b7:6c:32:b1:f0:ba:
1b:b8:95:38:6a:6e:d7:74:0c:1e:b2:b5:0f:e0:1a:
a3:27:c5:0c:2b:b7:56:2e:33:ee:69:bd:e7:4c:35:
79:12:42:2b:38:d0:92:c7:7c:bc:02:88:2f:99:02:
3c:f2:b1:ae:b2:9a:34:ab:3c:39:d8:4d:39:00:79:
17:2b:7e:2a:0b:05:22:ba:23:b4:74:4f:94:b8:3a:
8d:30:05:43:d0:74:68:20:f4:76:c6:15:04:18:21:
74:11:c5:22:6d:6a:51:93:8d:e0:42:23:96:e3:09:
11:43:49:5e:c8:a1:be:3c:a0:57:cd:6c:ed:f0:34:
a9:9d:45:c0:0b:26:29:41:31:ce:8f:5d:07:e2:de:
9e:cd:f2:b0:8e:4e:28:bf:2c:c3:59:cb:b8:9d:d8:
81:e8:19:0c:50:fa:c9:55:c4:d8:65:da:78:14:f1:
b4:7b:61:9a:19:7e:4b:3d:43:21:43:5c:2a:2a:d4:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:56:5D:9D:E0:05:FA:80:6B:E6:15:64:D8:7B:5A:D4:36:A9:A3
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:ad:28:7d:c5:8a:63:11:b3:8c:b9:2b:9b:e8:22:2b:36:
37:ee:e1:42:bd:78:11:b9:2c:c8:c9:b5:6f:13:28:b4:ac:d4:
95:96:0d:b8:73:52:4f:6c:63:05:25:0a:19:9f:ad:64:25:dc:
d8:1b:0a:af:bf:67:4b:ea:4a:3a:11:6f:9f:31:26:a9:d7:f1:
87:fc:55:d5:ed:fc:85:5d:ee:55:2c:be:05:20:ff:8d:d1:34:
e6:76:4a:c4:1c:c3:08:76:62:84:59:84:91:7e:30:be:f0:79:
a5:ab:45:cf:a2:b2:4f:9c:2e:f6:07:d0:47:53:c1:fc:61:2a:
70:61:8e:3d:b0:5c:76:3a:6a:8e:f9:93:de:48:d9:17:d9:f3:
cf:5c:ed:5f:c2:6f:1d:b5:bf:13:38:9c:7a:87:b4:65:c1:3d:
13:81:ef:04:87:45:28:7f:cb:db:9f:0a:59:b3:6d:74:dc:17:
8a:b7:9e:0a:5c:d9:1f:f5:72:a6:c8:1d:cf:80:58:8a:ba:8d:
24:f9:4f:9d:99:3f:0d:cd:91:25:57:b9:2e:97:f4:8f:29:34:
ed:63:c2:b2:0f:09:c2:f1:4e:ab:b3:ed:4b:9e:53:37:a5:e9:
94:08:54:be:f5:1b:e4:a2:12:f0:88:48:66:a8:65:36:a3:9b:
86:78:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:03 2025 by rpki-client