Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: xXTnmJlCC3lpbAsndi6SEZuMtDXocv6G539RwYCFjC4=
Subject key identifier: DD:A0:01:FC:8C:A6:E3:F2:65:FA:22:C4:39:E8:5A:63:0D:95:A1:DA
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 01988C58868BAAAF42E57E6D7831D00B27AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 1636
Signing time: Sat 09 Aug 2025 01:01:08 +0000
Manifest this update: Sat 09 Aug 2025 01:01:08 +0000
Manifest next update: Sun 10 Aug 2025 01:01:08 +0000
Files and hashes: 1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: x+0gUcq1+Qu+YQV2u0Q7iAX/jLLj9Hs0eK/cQ/EJI8w=)
2: _I_bzFBtom7oEcOiwkR5XiNwRqU.roa (hash: amQyWNDHTJkNJ6KscXkirJi5wKu8j7itmXKbu1HYmZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:86:8b:aa:af:42:e5:7e:6d:78:31:d0:0b:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Aug 9 01:01:08 2025 GMT
Not After : Aug 10 01:01:08 2025 GMT
Subject: CN=dda001fc8ca6e3f265fa22c439e85a630d95a1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:66:9e:c6:52:b9:75:5a:75:16:60:07:2a:
0d:05:48:c2:b9:8b:94:44:54:f4:60:54:00:fc:af:
b3:e2:7b:58:58:b5:10:21:e6:e3:8b:bb:e3:9a:b6:
44:a1:55:38:57:8f:f4:f2:7c:5c:72:f3:c0:30:b6:
69:b8:ce:c8:f0:97:bf:72:c8:e6:3f:ed:98:c5:92:
18:19:b9:a2:1f:60:94:fd:76:8b:db:03:7f:b6:01:
66:28:dd:60:19:70:3f:9d:10:fe:3b:85:ea:51:f0:
ed:b7:45:e7:f7:a4:00:e6:b9:7c:a1:19:ac:f0:4c:
e0:fb:d3:52:c8:ba:d4:bb:35:f7:5c:97:b4:d1:d5:
8b:41:ff:51:56:14:7d:0f:47:db:28:61:01:af:c7:
d7:cf:1b:6d:96:73:6b:22:97:51:90:41:a0:60:73:
9f:27:7c:12:71:0f:e6:f0:38:17:bf:66:fc:bc:e1:
f7:a2:5e:f4:ce:62:02:9f:6a:f2:72:62:34:5b:1e:
52:c6:30:4d:d9:39:48:3d:ca:97:5b:d2:7d:08:96:
f1:cc:de:83:aa:26:09:11:f3:31:03:b1:fb:ad:1b:
75:6c:6b:f5:4a:e9:6d:68:a6:ec:df:90:e7:ac:3e:
e5:e2:e1:fe:cb:b4:51:a6:ec:21:7f:d5:d8:b0:43:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:01:FC:8C:A6:E3:F2:65:FA:22:C4:39:E8:5A:63:0D:95:A1:DA
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a4:34:bf:f9:b6:f3:e3:03:3a:7d:d6:db:46:50:54:96:1b:
02:3b:b3:86:b2:6c:89:35:13:1d:e0:7c:92:6e:e7:0d:36:a5:
bb:69:74:90:26:71:97:3f:63:89:82:4d:7d:a4:b8:3b:c7:2a:
da:ad:2f:da:52:34:b0:99:32:14:33:51:d6:72:1a:f5:a0:d8:
30:69:38:07:0d:96:ae:9f:77:41:bf:12:96:e2:96:3e:d4:f5:
6a:f9:83:c8:21:da:91:57:40:b9:2b:f0:ad:b8:8e:66:e6:9a:
6e:9e:84:b8:62:e0:75:01:4e:1e:32:c6:70:72:c9:4b:4b:90:
e1:da:eb:35:2d:bb:1a:fd:97:df:3e:15:3b:cd:98:17:39:a3:
2c:16:99:13:37:65:18:a1:98:56:3e:55:8c:ba:e9:e6:d0:85:
46:94:eb:15:b0:84:1a:0c:11:4b:d9:62:7b:84:06:11:5f:09:
1f:69:79:2b:14:35:71:97:b6:ba:dd:47:ff:e4:57:f5:cb:33:
47:48:1a:47:98:90:2f:c2:23:e9:f7:7e:97:87:84:ab:d6:02:
dd:3b:ec:65:0d:bf:aa:76:39:94:56:4e:da:e7:9d:15:04:24:
62:b5:e5:a2:7b:1b:96:6f:56:9d:09:cf:8d:05:4c:cd:f3:a6:
90:0f:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:03 2025 by rpki-client