Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: 58NwrOlvy4uHSo3ZDtRAxn6DO6weyZvLgWNnWCFsQcU=
Subject key identifier: CE:81:D6:9C:7B:06:90:D9:0B:FB:9B:1D:E5:E9:96:A5:04:29:8E:A5
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 01987D8ACDCC4E6E182E99134F775FB70F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0E63
Signing time: Wed 06 Aug 2025 04:01:45 +0000
Manifest this update: Wed 06 Aug 2025 04:01:45 +0000
Manifest next update: Thu 07 Aug 2025 04:01:45 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: Xgm/qh2D0SKk8N00HhLChevYNiFLol0Txr3jSxr3KLE=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:cd:cc:4e:6e:18:2e:99:13:4f:77:5f:b7:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Aug 6 04:01:45 2025 GMT
Not After : Aug 7 04:01:45 2025 GMT
Subject: CN=ce81d69c7b0690d90bfb9b1de5e996a504298ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:d6:58:c5:80:02:ea:85:28:0d:5f:3a:0b:
2a:a7:0e:d2:ba:d0:4f:1c:95:5f:93:13:3b:d5:3b:
74:f4:c1:da:11:e2:11:7d:5f:79:1f:ad:6b:ab:bd:
c4:14:87:02:02:72:eb:30:c1:81:4e:6c:78:b9:43:
5b:e6:72:de:d2:7d:12:b5:00:9b:5c:0d:d4:d1:f3:
1d:b7:e3:68:ab:f9:21:08:31:3d:4e:0c:7c:e2:24:
bb:4f:ad:c5:fa:0b:5f:dd:dd:f4:3d:34:1e:06:95:
b0:87:4c:74:5d:b1:e8:3d:a4:8f:d3:6a:8f:e9:1a:
3c:9e:54:66:da:cc:bd:4a:7b:49:20:f3:72:9c:42:
0e:b4:fc:81:fc:e9:63:68:f1:61:84:35:91:3e:7d:
e9:4b:80:ca:a7:8f:dc:c1:13:19:19:69:ae:73:37:
22:38:d6:4a:96:7e:de:1a:5e:de:8c:09:7f:34:42:
64:44:e3:8e:82:b0:27:6d:67:ba:23:19:2b:8e:80:
bc:a4:96:b3:9c:12:e5:dc:03:0f:9a:5c:8b:c3:e7:
c3:e4:f5:8a:c1:51:b6:2e:cf:08:f2:f8:e0:5b:0b:
a3:ff:63:ce:ef:f4:b2:02:80:6f:a8:e5:f1:e5:86:
fb:55:21:d2:43:16:7f:17:be:64:91:ee:1e:43:89:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:D6:9C:7B:06:90:D9:0B:FB:9B:1D:E5:E9:96:A5:04:29:8E:A5
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ad:e0:83:9e:7e:5a:3c:2b:92:02:12:a1:86:e4:09:be:30:
bd:99:84:bd:0b:71:b4:84:73:62:b7:6c:f6:99:a1:a6:f7:73:
c0:28:4d:5c:dc:10:82:b1:08:98:19:4c:b0:a9:f1:9c:57:9e:
e7:67:1d:f6:ce:57:fd:ce:d8:65:ed:de:44:3f:81:7f:3d:c4:
fc:20:a9:83:35:1f:85:72:a1:7f:36:67:f9:67:54:6e:6b:aa:
d2:f9:aa:df:f0:cb:0c:72:75:df:2b:68:ba:ce:cf:11:1f:34:
23:e4:ac:5d:4e:97:e1:71:7d:95:7d:b6:c7:58:ea:5d:5a:9a:
34:5d:38:cc:7e:6a:bf:a5:f9:b1:b1:96:10:93:0b:91:c8:41:
37:67:35:16:a0:32:ff:65:68:4a:67:a2:df:1d:46:b3:e4:02:
ea:b4:24:a8:07:dc:de:69:10:c4:af:0e:0c:33:2b:0e:c6:9d:
30:ce:07:d5:7c:06:2e:29:96:eb:cc:aa:76:b4:24:f6:6e:c8:
2f:b2:e0:33:3a:16:76:7d:45:67:7c:a1:1e:de:3f:a9:e2:e5:
be:d7:d5:48:d5:d7:40:38:76:eb:2d:d0:1a:74:b5:36:f0:1f:
3c:28:26:55:83:b7:f9:3e:8a:50:af:ab:26:97:e9:ad:65:6d:
51:2b:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 08:01:20 2025 by rpki-client