Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: GuyQaijUW8WqddB+VXgzBl4mh3+ChPLsQ18CyFub7Ak=
Subject key identifier: 2E:61:B9:E9:56:B2:59:87:07:18:67:D1:79:3C:EB:30:C9:83:A8:4E
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 019872D01BC9185DCB7C6D08A04F33A4BD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 02:01:37 +0000
Manifest this update: Mon 04 Aug 2025 02:01:37 +0000
Manifest next update: Tue 05 Aug 2025 02:01:37 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: fpL1Dy2y5jk2xeG5X+Lcbg/ECRBjzegBM16znENH6cQ=)
2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:1b:c9:18:5d:cb:7c:6d:08:a0:4f:33:a4:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Aug 4 02:01:37 2025 GMT
Not After : Aug 5 02:01:37 2025 GMT
Subject: CN=2e61b9e956b25987071867d1793ceb30c983a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:2f:22:65:86:7d:24:0a:e3:cf:8f:28:3f:
74:6a:10:82:35:01:56:25:d1:0b:11:0d:82:56:d7:
dd:40:10:e2:ea:7b:89:0f:fb:f0:91:44:95:4a:8c:
f4:32:9d:f2:db:88:38:4f:84:89:2c:ab:a7:57:ed:
e3:4b:04:f0:b2:ff:f5:8e:f8:f7:b5:ba:28:75:b5:
47:a2:eb:73:1a:eb:03:b5:7e:05:15:a5:6a:7c:89:
74:dd:ad:4e:8d:96:79:bc:f6:d0:60:c4:6c:6d:84:
2b:aa:08:63:8b:5f:a6:1f:52:4a:86:71:23:8d:43:
23:4d:36:d2:92:b3:9d:e2:5f:03:bc:a4:15:37:f0:
4b:02:03:06:8e:d1:97:28:c0:2d:07:63:80:a6:a1:
6d:2d:dc:f7:8c:8c:05:0d:6d:bf:45:79:c3:25:0b:
1f:23:65:59:9d:d3:08:af:77:68:54:09:9b:74:23:
06:2a:47:0a:f0:53:da:3e:ce:79:d6:fc:a2:ba:d6:
48:54:39:87:bc:04:82:83:fe:93:f5:11:22:4a:06:
38:6f:47:40:6e:80:cb:9e:66:24:66:8a:9a:9c:33:
c6:81:66:a8:9e:1b:66:ae:32:b1:6a:e5:89:11:f9:
27:55:a9:70:b6:79:2b:b9:39:ab:32:ed:47:fe:06:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:B9:E9:56:B2:59:87:07:18:67:D1:79:3C:EB:30:C9:83:A8:4E
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:21:81:a4:36:f0:0d:41:28:fe:8e:2a:d9:a6:d3:a8:b4:
97:c9:4a:97:f7:71:72:45:ef:42:70:8c:08:d9:f6:b2:3b:85:
c9:67:36:4a:a3:c9:36:87:b7:a4:56:af:db:26:8f:d5:29:48:
f3:96:d8:e0:4c:1c:8a:23:2c:b9:ba:35:89:12:1e:14:e9:74:
f6:87:bb:40:fd:b2:e3:19:ee:c3:a1:d6:60:99:c1:22:f6:65:
f9:f7:83:77:f5:e5:0f:d5:aa:bf:47:8e:ef:aa:44:b3:20:de:
be:13:5a:b7:83:36:c6:f7:2a:0f:c8:80:5b:1b:c5:0f:fd:3e:
c9:8d:75:ae:c4:d9:c1:d8:a0:ad:37:e9:59:19:7c:f5:79:6f:
74:fa:79:a6:1d:22:21:9a:51:76:db:f1:2b:c6:87:5b:4c:35:
74:4e:a6:70:e9:b6:a0:8e:6f:d2:29:c6:7b:c0:0b:ca:e2:6e:
bf:be:6f:aa:20:cd:64:a1:21:0a:15:5f:26:06:f9:fa:4f:14:
71:ac:d5:79:31:53:16:9f:7f:e2:23:05:62:8e:49:56:63:d9:
0c:d4:5b:7c:6a:29:2d:ab:b5:4f:7e:fd:27:5e:38:0b:71:fd:
0a:05:1c:6b:bc:cc:32:f4:79:c3:ea:de:ad:79:d1:9b:56:8d:
f0:c6:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:47 2025 by rpki-client