Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: rcBkVD4KlanlfRwHcOzve7mQdCA9NVLmJ7ZkzKs+X9g=
Subject key identifier: 9A:62:4E:DB:3E:4D:74:79:DA:F7:05:7C:4C:74:5E:F2:2E:68:85:63
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 01987B9CC837074EA24968A8E8FF59535151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:02:09 +0000
Manifest this update: Tue 05 Aug 2025 19:02:09 +0000
Manifest next update: Wed 06 Aug 2025 19:02:09 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: dIbIFR3VL9EJ75Q/A6yS6mHCSFL4r2TgaVj1MWL/CVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:c8:37:07:4e:a2:49:68:a8:e8:ff:59:53:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Aug 5 19:02:09 2025 GMT
Not After : Aug 6 19:02:09 2025 GMT
Subject: CN=9a624edb3e4d7479daf7057c4c745ef22e688563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:48:b4:e2:07:21:67:1d:ee:13:99:b7:31:
e8:5c:14:d7:38:9b:81:98:e1:a3:25:14:3c:f9:49:
b4:48:61:8a:21:6b:af:8f:a9:07:99:07:d9:8f:38:
bb:1a:ee:fd:5e:6e:6b:d6:3f:31:6f:2f:4d:d8:a1:
15:e6:7c:0b:d4:92:be:f6:e4:64:f0:09:10:7e:48:
51:65:b8:17:dc:f8:a5:10:e8:4d:87:36:27:8e:9d:
15:56:20:a6:ab:94:8d:98:7c:6a:cd:4a:06:1a:f7:
c8:f3:05:e6:d5:f5:2e:37:e3:f7:b9:63:ae:52:e5:
e8:25:18:f5:af:0d:27:fb:34:1a:7a:1e:27:cf:a5:
4a:c1:d9:e3:fb:54:a7:d2:37:6b:2a:99:af:51:d4:
29:69:fc:eb:1f:d5:b4:fb:69:da:fb:33:e6:9c:52:
81:f9:d9:4f:bc:0c:6a:f8:ce:90:83:78:5a:08:2a:
32:6c:95:82:3f:ec:b4:f1:d2:dd:d6:a8:02:2f:79:
1b:cc:d2:a3:98:ca:3e:1a:8f:ee:01:70:2f:ff:0c:
17:b5:a6:2d:a8:2a:d9:2e:6e:5d:33:51:7c:34:33:
31:30:92:fe:95:6e:e8:2a:db:0d:79:85:6f:75:3c:
d7:22:fb:e7:84:6c:c1:d8:ac:16:fc:13:5a:c3:67:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:4E:DB:3E:4D:74:79:DA:F7:05:7C:4C:74:5E:F2:2E:68:85:63
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:b1:d1:e7:20:a1:ce:da:a4:02:b1:56:9b:2e:8a:82:01:
0c:78:e0:78:f4:6a:24:c1:01:8e:a7:6f:63:2a:fb:41:94:31:
40:b7:51:fe:ae:6c:61:3a:cc:68:62:f7:4e:10:dd:9b:dd:fb:
98:57:78:90:08:02:77:f6:ec:9b:cf:92:d2:23:1e:8c:c2:81:
f6:0b:3b:e4:55:f1:56:9c:19:f4:f5:d8:19:3e:72:75:af:2b:
cb:5c:97:74:c1:33:e0:90:96:78:23:06:8c:41:6b:30:dc:9e:
47:c2:e3:d5:f2:4b:38:65:0d:be:bf:fd:95:57:e1:0f:25:4b:
c8:77:0d:5b:82:18:be:d4:63:a0:48:39:f9:91:26:01:69:c3:
79:f3:51:47:e2:27:4c:c4:a8:c4:84:43:25:e4:e4:0b:b3:29:
6c:47:11:d4:e3:ed:43:fe:c8:74:94:af:25:94:5c:1c:c9:67:
48:bd:1c:93:f5:8e:7a:da:95:7d:a4:80:f9:9e:d6:fa:a3:cb:
92:9c:d3:6d:63:6f:fd:43:c1:01:c6:aa:e0:0c:82:b7:84:87:
f9:99:18:a2:8f:88:b9:89:1a:0c:d7:6b:1c:2e:12:d4:38:11:
69:33:c7:b6:4e:67:54:75:ea:e4:b2:f9:55:c0:06:2b:bc:a3:
52:31:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:33 2025 by rpki-client