Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: L2wDCAdCELAkF+EdwH8zuwDBFKlEMzaGg83Rnd8rVRw=
Subject key identifier: C3:0F:D1:D0:EF:91:2A:7B:88:F4:CF:E4:64:1D:12:71:C3:BB:31:F8
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 01987E2ED0B5DB44C1076501D77D488E5F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 01BC
Signing time: Wed 06 Aug 2025 07:00:53 +0000
Manifest this update: Wed 06 Aug 2025 07:00:53 +0000
Manifest next update: Thu 07 Aug 2025 07:00:53 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: FFZNHboKLC6wb8JXyDeDPm+JkTyX0lkrzvlT1o7169A=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d0:b5:db:44:c1:07:65:01:d7:7d:48:8e:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Aug 6 07:00:53 2025 GMT
Not After : Aug 7 07:00:53 2025 GMT
Subject: CN=c30fd1d0ef912a7b88f4cfe4641d1271c3bb31f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:ff:d1:c6:55:a7:cb:e1:11:e4:35:b3:ef:
a1:b0:b0:71:20:7b:13:85:06:d6:b9:07:b7:0d:14:
18:6e:d0:ba:d1:bf:08:27:b7:d7:06:dc:1f:0c:17:
e8:c7:bc:0c:10:ec:97:2d:65:b3:f5:34:9a:89:23:
8d:7f:e6:80:80:3c:9f:2a:71:5b:35:6f:b5:ae:02:
ee:c8:62:08:97:55:cf:3b:5c:5a:22:8d:c7:00:ee:
94:dd:c9:17:b3:fa:92:a6:3f:d5:13:a2:53:79:9d:
b9:35:72:ba:81:42:7a:30:38:33:11:b2:27:d4:af:
f9:8d:2f:69:07:e2:2c:2c:e1:5a:2f:f7:11:75:92:
e9:e7:98:e0:6b:52:f2:92:f4:bf:cb:1b:90:3c:22:
d8:d4:2e:34:3b:cc:5f:b9:62:cd:28:e9:62:46:e9:
fd:78:23:79:1a:e6:12:e7:e5:13:d8:e2:f2:ea:11:
75:e8:8d:9d:18:ae:d4:46:69:82:4d:7b:7b:a7:4f:
e5:31:75:d0:0e:b1:73:7f:e0:fb:b0:f3:17:68:ab:
dd:69:b1:51:a8:fb:40:13:0a:5b:45:f2:b6:a6:2b:
de:d7:58:27:f3:fb:2e:3a:6c:18:01:76:9e:c1:54:
3b:c5:c7:f8:ea:69:85:ab:f2:78:ae:87:21:8a:76:
4d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:D1:D0:EF:91:2A:7B:88:F4:CF:E4:64:1D:12:71:C3:BB:31:F8
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:52:39:31:e4:8c:f2:3b:28:e2:cd:d5:07:21:f4:8f:e2:
b0:3c:93:26:b4:25:64:8b:12:fb:35:2a:2b:8e:57:a0:a8:64:
d8:d6:be:1a:28:72:36:36:73:cf:68:b1:1a:a4:cc:68:5d:91:
d6:03:f2:d0:d6:08:1b:dd:2e:3d:c7:73:c6:11:27:4a:38:6c:
19:37:a0:32:f9:73:87:7e:dd:4e:ca:fc:a1:17:da:1d:d4:ce:
73:a9:7f:93:83:69:59:c2:1d:36:61:ab:f2:6a:6e:3a:67:dc:
83:b6:2c:b7:7a:97:a2:2b:03:0d:a7:f8:cf:c0:b7:1e:4a:99:
38:ef:43:db:0e:64:fd:96:e0:35:a5:d4:84:e5:2a:0f:59:c4:
c6:8f:03:60:b0:ec:b2:d6:81:e4:5e:a2:46:9c:80:c3:7d:fc:
ad:b2:01:a8:48:e8:be:c5:ae:67:87:8e:64:ef:f4:24:1a:fd:
75:ef:99:2d:12:17:1d:c0:11:52:a7:dd:07:4a:c2:5e:a6:ae:
64:ef:c2:e3:a0:bb:e9:e8:45:93:2d:f5:9c:69:d8:c6:40:e9:
e1:a3:1b:7c:54:bd:91:28:95:8c:c0:6a:f0:c4:69:59:8e:e3:
f6:ea:9f:67:ab:0f:9b:b1:54:a3:cf:7c:fb:3e:20:62:03:2a:
db:b7:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:35 2025 by rpki-client