Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: ReU2gMtySCJGCACRZQaV2qtVK727qVKDphe1GEYWJ5I=
Subject key identifier: E8:B0:E3:CE:C9:46:FD:7C:9D:B7:88:23:A9:AC:59:9D:E8:57:24:38
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019873E3C170C17817EFD61F398310D8EFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:42 +0000
Manifest this update: Mon 04 Aug 2025 07:02:42 +0000
Manifest next update: Tue 05 Aug 2025 07:02:42 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: 6iWtGoKokDXRPCz9pLj/8zJfp27xhhym8b7fI1beGE0=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c1:70:c1:78:17:ef:d6:1f:39:83:10:d8:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Aug 4 07:02:42 2025 GMT
Not After : Aug 5 07:02:42 2025 GMT
Subject: CN=e8b0e3cec946fd7c9db78823a9ac599de8572438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:f5:ff:da:3f:8e:a5:be:cf:e1:ad:24:63:
6e:71:23:af:a2:8e:62:46:d9:48:fa:a5:3c:5c:cd:
88:3f:f0:3b:d2:51:ff:dd:0f:ff:20:8e:f8:ae:c3:
e5:c5:8b:7c:b0:4c:85:12:5e:07:d9:2d:4c:fb:12:
e4:47:1f:dc:b5:6f:88:b0:8b:e5:d5:85:e0:4e:78:
b0:07:28:59:0a:25:d6:7c:44:04:1b:52:82:ce:fe:
7e:a4:64:af:1b:25:4a:42:25:12:05:cf:b0:f7:ef:
49:0b:a4:a7:d1:60:64:16:0f:e7:ab:34:1f:34:cb:
c1:47:c8:6c:4e:07:de:56:9b:1a:9d:84:54:a7:bc:
a0:dd:57:a3:26:31:be:5e:e1:97:08:3d:cc:a3:70:
9e:0c:b5:90:ff:74:49:e6:70:bd:93:3d:f1:14:2c:
9b:7b:0e:60:19:1d:3b:03:95:61:fc:16:bf:a4:8c:
8f:68:3f:1c:15:4f:76:8e:c3:ad:bc:c0:4e:4a:09:
43:fb:06:b3:21:16:11:0a:3b:b1:97:90:f3:c9:b8:
9e:86:5f:c2:84:28:da:b5:45:b8:c7:5e:74:9d:90:
88:39:59:85:58:17:8a:0e:36:ce:38:fc:28:b7:8d:
45:fb:94:1c:f0:ac:e5:63:c7:4e:9a:6a:df:b5:39:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:E3:CE:C9:46:FD:7C:9D:B7:88:23:A9:AC:59:9D:E8:57:24:38
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bf:a8:9d:ca:94:70:f4:66:84:26:a7:55:f4:ef:8b:7e:6b:
30:64:23:3c:90:c9:ba:63:98:8d:ad:6d:65:97:40:31:3c:c6:
67:8a:5d:49:cb:1a:96:8b:59:9e:13:96:9a:5e:3d:7b:df:82:
e7:20:a1:90:00:d6:3d:5b:5b:4d:c5:50:76:44:4a:de:e4:61:
ef:89:24:44:c2:c4:62:99:25:53:d0:bf:a1:5c:74:ae:58:3b:
63:a6:d3:96:08:33:5a:ff:03:c7:f7:42:7d:ad:95:b8:60:b9:
fd:9a:a0:ba:20:58:d5:97:af:7e:ae:96:76:d0:9b:17:ff:39:
ff:19:3d:35:f5:9a:58:33:d7:2a:5e:a0:08:8f:99:70:ac:20:
60:8c:f2:e5:5b:c4:fb:05:31:6e:7a:47:b2:8a:4e:2a:98:e3:
ae:ed:c9:aa:74:90:1e:d4:ee:2b:ea:2e:0f:e1:67:a2:80:2d:
5c:6d:35:e2:d0:06:76:4d:27:fc:65:35:77:36:6d:7b:c2:25:
8c:7d:ce:83:18:d9:cc:7f:65:7c:ff:5e:a5:57:58:72:e3:3e:
e3:ff:c9:7a:29:2b:cc:f4:1d:90:d5:a3:51:fe:20:f3:cb:70:
a3:ba:c5:cf:2e:ef:69:bc:41:b3:26:c7:5f:9a:c4:a3:1d:ea:
85:a3:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:33 2025 by rpki-client