Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: HIj7mX3A4i85TWbhXBwvodk8Yprb1QFNN4RHXQGkvzc=
Subject key identifier: D0:CD:C2:85:C8:F2:4F:3B:49:78:CD:59:F1:0A:82:49:41:D5:96:68
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01987CE535B75C6BC8EEFE9086290B947D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0DCC
Signing time: Wed 06 Aug 2025 01:00:52 +0000
Manifest this update: Wed 06 Aug 2025 01:00:52 +0000
Manifest next update: Thu 07 Aug 2025 01:00:52 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: 0eP00oNtznb7MwgY4kb0lChvnkImfnNulI2B/FLTcH4=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:35:b7:5c:6b:c8:ee:fe:90:86:29:0b:94:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Aug 6 01:00:52 2025 GMT
Not After : Aug 7 01:00:52 2025 GMT
Subject: CN=d0cdc285c8f24f3b4978cd59f10a824941d59668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:ab:70:ac:6d:d4:2a:9e:bb:a3:97:2d:d1:
17:a3:b5:62:9b:6a:78:87:52:20:d0:a5:c1:05:52:
8a:db:6f:b3:02:0a:ea:db:bb:67:78:aa:57:31:80:
28:9f:c2:dd:31:b7:ad:1f:98:00:64:c9:f7:37:03:
f6:75:eb:3a:b6:f1:10:94:59:98:41:23:19:e1:2f:
72:77:0f:fd:45:dd:60:17:eb:e4:bf:1e:be:36:8a:
3a:68:cb:84:15:74:52:6d:74:4a:c0:b5:c5:18:55:
08:9b:b9:ef:6b:e5:2a:11:3c:91:ba:27:44:ed:d5:
f8:d6:42:dc:19:9c:a0:4c:bc:6a:51:95:2f:bf:29:
a7:4c:39:97:ee:d9:11:e6:e3:01:1b:30:2a:2a:81:
55:d2:f5:51:e7:02:f5:91:d8:75:df:1d:11:8f:fb:
b8:c8:21:14:7f:8a:bc:8e:b9:cd:e3:ad:52:04:9d:
d4:bb:2c:85:f2:87:a3:28:3b:06:57:9e:d6:61:26:
40:86:b4:63:c3:25:b2:7b:f0:37:9d:68:14:1d:72:
7a:c2:0e:d3:42:f7:36:26:36:16:c7:3e:01:6b:a4:
0b:89:91:7e:59:95:5b:30:b7:76:e6:ed:db:09:7d:
a1:2f:28:3d:96:0b:73:8d:c5:c9:7b:61:a5:71:1e:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:C2:85:C8:F2:4F:3B:49:78:CD:59:F1:0A:82:49:41:D5:96:68
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:b5:34:af:c8:d2:ff:35:9b:f6:2f:c7:83:51:ab:ae:ca:
41:8c:cb:dd:be:fc:88:40:bd:50:2b:08:e2:67:3d:40:4d:c1:
b7:3a:de:de:d8:d5:11:fa:4f:54:7e:c8:44:3a:b3:aa:26:10:
ff:ca:17:d4:23:f8:9c:ba:a9:34:c5:40:02:26:bb:1b:06:67:
18:64:38:58:90:c4:bb:47:b1:dc:56:4c:6a:66:92:8f:72:b6:
0a:3e:2e:a7:45:4a:b2:09:a8:f6:19:86:6f:75:66:11:08:46:
e7:99:bb:32:5b:0a:9f:31:ae:aa:e4:73:c9:7a:20:db:86:1f:
9c:c3:ef:dd:56:b3:9a:24:a5:0b:ba:fc:25:95:84:e4:80:ef:
d9:47:b1:4b:6b:c3:46:3e:b9:7e:38:33:61:81:bc:62:84:86:
ad:2d:f1:cb:e8:f7:87:84:7c:22:a0:1d:1f:6a:58:d5:11:7b:
13:88:ec:d3:d1:1f:3f:35:7c:8f:1d:82:02:bf:7a:9e:3f:a9:
ac:c4:8e:14:74:db:ce:cd:4f:61:7f:06:c2:90:fc:a0:ea:c5:
4f:b9:3a:03:81:40:67:0f:44:56:0a:c5:19:aa:94:48:72:9a:
43:9c:44:60:90:7e:b4:80:2c:54:15:94:41:ec:1d:1c:9c:b8:
8e:c1:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:00 2025 by rpki-client