Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier: VgakOsfIeThcNhUaMO9lkGJwQNzGS0mNiv7JJLg6qvQ=
Subject key identifier: 12:09:E2:53:08:3E:4C:44:2F:94:07:6A:5A:FE:3E:64:F0:63:CF:49
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 0198793F68EB2D1863C691ABDEF2C8ACC60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number: 099E
Signing time: Tue 05 Aug 2025 08:00:55 +0000
Manifest this update: Tue 05 Aug 2025 08:00:55 +0000
Manifest next update: Wed 06 Aug 2025 08:00:55 +0000
Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: wo6ZRzqI6il8angeQ6xEUPCh6llkMmJ9NabatAMHVlg=)
2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:3f:68:eb:2d:18:63:c6:91:ab:de:f2:c8:ac:c6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Aug 5 08:00:55 2025 GMT
Not After : Aug 6 08:00:55 2025 GMT
Subject: CN=1209e253083e4c442f94076a5afe3e64f063cf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:1b:39:0e:38:80:06:b1:78:0f:2b:9c:e1:
2b:fa:0e:ae:6a:0d:ce:e6:ff:b6:43:02:a2:d3:b7:
b6:21:4f:7c:dc:2b:42:90:e7:6d:dc:90:53:c1:34:
34:48:df:28:09:49:e5:d2:16:96:75:63:03:e5:83:
82:4d:1d:6c:54:a8:1d:d8:ed:ea:4c:ca:87:5d:a1:
cf:9a:62:82:07:ef:27:ea:35:9f:c7:97:e3:5b:34:
dc:02:e8:31:9f:e5:14:45:46:b6:c8:90:a8:d9:ba:
5a:fd:4d:b2:8e:6d:0b:c0:ba:77:6e:6e:3e:89:57:
d7:af:00:9a:cb:82:be:5c:2c:d4:72:59:49:1c:7c:
a5:9c:5a:a1:b8:73:6e:fc:e2:94:23:c1:41:f0:83:
13:91:f5:aa:24:1d:b1:0b:bc:1e:11:7c:ee:1b:f2:
74:ce:63:e5:77:58:14:8d:02:27:46:a7:02:3e:d3:
0b:13:24:54:fe:ee:99:c7:43:27:a5:0b:67:4c:40:
bc:b8:42:7b:f2:d3:4d:c5:77:fc:ea:ce:fd:a5:6e:
5c:e8:fa:f3:b4:0a:58:ab:0b:37:18:74:e5:16:5c:
f2:21:e6:04:3a:ba:23:f2:ac:c5:33:73:68:e8:ed:
c0:e4:23:f1:e9:4b:0a:2f:68:75:02:66:b2:68:45:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:09:E2:53:08:3E:4C:44:2F:94:07:6A:5A:FE:3E:64:F0:63:CF:49
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e7:4c:eb:37:d0:36:69:06:ce:b7:68:0d:cd:48:59:66:9c:
74:b1:b6:4a:24:17:a6:b0:6a:50:98:63:e3:cf:ce:e1:64:e5:
a8:ae:ae:21:f1:df:15:db:55:e4:d5:f4:18:74:ea:67:78:fb:
63:5e:11:ce:2e:53:a1:e5:7f:9b:fe:45:eb:54:0b:bf:28:fb:
1d:9a:fc:98:59:30:0f:e0:be:cf:b6:74:30:d8:4f:ce:2c:82:
f0:fc:75:b4:a5:d8:c1:ea:20:f9:d8:4b:67:98:ca:7a:e8:82:
54:93:ee:5a:2b:69:84:34:cd:a4:9f:0a:52:7b:e3:e1:30:26:
68:83:cf:bc:4b:ff:cc:72:33:7d:5b:90:a1:9c:a6:d0:67:c5:
fb:5f:de:8a:ad:b7:51:34:32:84:08:ce:53:b2:87:57:41:54:
12:fe:92:6f:76:33:b9:41:4c:8a:7e:a2:1d:4f:23:46:97:84:
5d:7c:02:19:59:9a:6e:68:3d:a8:9b:22:12:57:0b:a0:ca:83:
28:3c:27:12:c5:3f:71:36:3f:48:6f:8c:be:63:26:81:26:a2:
6d:ed:3b:8c:d1:7c:d7:9f:37:9a:0a:55:d7:d3:64:04:cd:42:
63:e5:36:fc:c9:c1:c3:cd:b1:55:c7:85:42:1f:0f:af:1a:4a:
ae:d7:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:38:24 2025 by rpki-client