Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File: gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier: dHmkKcDohL9tHQpGJeDAVGWzXY5tnefv5jxlWn7rNVM=
Subject key identifier: 95:CB:F3:F2:0E:63:50:05:17:91:FB:4C:D2:92:AF:EB:40:4A:30:E3
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer: /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial: 01988DD91A37AA8499904234E6C224E3074B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number: 045B
Signing time: Sat 09 Aug 2025 08:01:11 +0000
Manifest this update: Sat 09 Aug 2025 08:01:11 +0000
Manifest next update: Sun 10 Aug 2025 08:01:11 +0000
Files and hashes: 1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: JFkGGllifyfeA+NgdHo8Xl3BoSOnqGmTiDp0X8whR/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:1a:37:aa:84:99:90:42:34:e6:c2:24:e3:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Validity
Not Before: Aug 9 08:01:11 2025 GMT
Not After : Aug 10 08:01:11 2025 GMT
Subject: CN=95cbf3f20e6350051791fb4cd292afeb404a30e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:3b:7f:62:38:95:80:58:72:40:5d:16:7e:
85:51:20:15:00:d9:d6:03:ee:c0:aa:6e:28:00:1c:
3d:0f:18:91:9f:e7:87:22:14:a8:48:66:96:d8:51:
80:64:83:a8:b5:62:39:ef:cc:90:6e:95:d7:d1:eb:
4f:fd:ad:d0:aa:51:34:62:a3:52:e0:a8:4e:f0:d9:
8c:67:e6:0d:3a:8d:38:62:6c:1f:b2:cf:d2:33:df:
5b:90:59:e6:c0:1b:d7:47:e2:7a:66:2e:61:09:e8:
20:bc:ec:98:71:af:11:b4:e4:ba:a7:7a:17:90:e9:
39:b2:99:0a:30:75:e2:0d:2b:b5:b7:33:b0:3a:2b:
cd:d9:fc:9f:bf:f2:13:2c:5b:f5:e5:71:dd:b1:29:
1a:69:df:7c:ca:a8:2f:41:36:5f:24:b7:4f:ed:7d:
ab:4e:75:ee:df:36:fc:29:48:67:75:52:98:c6:7a:
d7:08:ba:c1:ed:9f:98:3e:9d:aa:64:eb:d9:fe:fb:
34:cd:c2:23:9e:81:37:5f:26:ea:da:ff:5d:56:de:
ef:c0:57:15:89:12:ed:6c:be:ca:cc:bd:67:4f:20:
5e:bb:b0:06:a5:bd:2c:77:24:eb:58:d8:76:f3:cb:
c1:43:f5:38:44:17:93:45:6e:2f:2c:e8:0e:3a:22:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:F3:F2:0E:63:50:05:17:91:FB:4C:D2:92:AF:EB:40:4A:30:E3
X509v3 Authority Key Identifier:
keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:43:9c:9c:d5:0e:55:b5:d1:ea:1f:30:e3:c7:f2:09:b5:43:
60:41:9f:e1:49:b0:ce:bc:6c:68:28:50:9d:b2:5d:39:91:30:
67:38:e7:02:c8:2f:9e:b8:b9:d2:52:57:02:66:10:04:78:4d:
a8:4c:4b:af:93:48:47:bd:80:c7:fa:46:f5:6d:2b:a1:00:89:
18:c9:9b:11:7c:a7:bb:ae:e5:5f:69:f2:ac:b4:ca:2d:ec:14:
55:8d:76:a5:0b:33:95:fd:a6:c3:1b:2a:1b:c7:5c:c0:ab:2b:
96:99:06:e5:f2:28:03:c6:e2:4a:40:bc:20:9e:da:76:13:a7:
48:45:0d:6b:f6:b3:94:57:5a:43:62:4b:f8:1b:c9:30:b1:8a:
92:24:82:1b:99:cf:6a:e9:cb:b6:cf:b1:1f:45:92:c5:72:b8:
92:22:1a:82:7e:b3:60:07:3e:70:fa:8f:d7:b1:54:db:58:21:
d4:75:31:f5:15:96:16:11:a1:d8:aa:21:65:62:cb:8d:b8:e1:
b7:10:af:a7:50:43:c1:3a:b6:86:9f:2a:83:be:79:e4:9c:5f:
19:e6:44:da:17:3b:66:08:98:37:48:0b:fc:a1:31:5c:94:38:
f1:90:bd:fb:9b:dd:44:24:0e:b2:77:8e:dd:a1:df:e9:24:2b:
b8:a8:83:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:50 2025 by rpki-client