Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File: GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier: zaTJJtBJnw3T3/P3L4LzIkkFAtuEgA3VXxaFSv3gH7s=
Subject key identifier: C3:DE:47:3E:C0:2D:92:C2:53:10:8F:90:9D:E5:7F:4C:85:06:15:A6
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 0198941228A1C20CD8F4B7AC4B4F76859414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 13:01:14 +0000
Manifest this update: Sun 10 Aug 2025 13:01:14 +0000
Manifest next update: Mon 11 Aug 2025 13:01:14 +0000
Files and hashes: 1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: bDDg49Efqt4aMlaHGUrLY6k6fTLjTT+IbxWxXAKUCIk=)
3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:28:a1:c2:0c:d8:f4:b7:ac:4b:4f:76:85:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Aug 10 13:01:14 2025 GMT
Not After : Aug 11 13:01:14 2025 GMT
Subject: CN=c3de473ec02d92c253108f909de57f4c850615a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:1b:53:53:19:64:d3:e5:95:d8:12:1d:22:
f6:6b:7c:8e:b2:8f:69:44:eb:49:d7:4e:cd:71:71:
c7:ba:38:e8:ba:08:36:5d:6a:75:b6:0f:55:85:ab:
26:66:cc:38:92:a2:3c:dc:ed:67:8a:e4:6f:9e:2b:
5c:1f:52:8b:fb:b4:4b:26:69:20:67:ac:33:8c:00:
24:28:3d:71:16:47:83:34:8d:69:bd:06:94:91:4d:
cc:0c:ba:4b:dc:2c:3a:24:d0:b0:fd:c4:eb:d3:18:
0a:44:6c:e0:c3:91:d5:85:ef:33:a1:59:52:a3:c2:
5b:1a:38:fa:8d:7f:c9:46:59:bc:88:d1:f5:ed:04:
3b:0c:2b:dd:02:1a:d8:02:4a:7a:6d:e5:03:84:dd:
8b:ca:78:be:95:be:63:f8:5b:01:c2:1b:01:24:3d:
6b:02:48:60:01:39:83:c8:ed:8b:d7:71:73:ac:56:
c2:ee:47:5f:04:62:3d:a6:c3:50:b3:1e:a3:52:7b:
05:6c:06:d7:be:00:d2:b8:e3:e2:6d:2d:bf:fb:c8:
ac:a3:0e:b3:4c:16:1f:d8:f7:f8:6d:ba:c2:b7:83:
fe:67:f8:79:7c:8e:0c:f6:9c:da:cc:29:22:ce:4f:
a0:5c:16:1b:3b:35:80:92:dd:4e:ef:22:98:80:74:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:47:3E:C0:2D:92:C2:53:10:8F:90:9D:E5:7F:4C:85:06:15:A6
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b2:52:dd:7b:6e:c8:da:97:92:df:9e:d2:e1:bb:dc:39:82:
c7:8d:34:a4:2f:e9:b3:93:cb:9a:6d:51:55:16:05:3d:48:0c:
63:e0:32:e1:0a:25:db:64:34:ed:93:27:ab:b8:8a:a7:7a:e4:
e7:73:91:d0:a5:56:b7:95:a4:c1:9a:41:0b:78:83:22:c9:1d:
c7:b6:5a:8c:23:f7:e9:d8:1e:2f:c8:a2:c9:de:af:2e:72:72:
d7:33:e7:06:4d:74:a0:bb:62:87:2b:02:b6:e9:fe:a5:86:aa:
95:bd:10:07:f0:49:99:1e:b3:2a:0c:36:24:86:81:42:ea:b7:
98:e8:a6:61:2b:83:f9:39:77:eb:2c:76:64:a2:0e:73:a4:c0:
de:9a:c1:47:65:b8:42:7e:50:87:50:1c:5a:c1:f4:16:9a:14:
1a:8f:2c:c6:d8:35:44:94:ae:74:9d:ea:db:28:a9:09:3c:5f:
01:fd:89:07:04:d6:cb:56:e0:01:6d:b2:9b:05:1b:e7:cc:9f:
ff:93:ea:9a:db:20:e2:4a:ac:31:88:ee:03:47:6b:f1:79:42:
b0:f7:de:05:4c:be:37:2a:f8:6b:98:d7:09:9c:f4:97:0f:f5:
c2:1a:ae:56:de:3e:9e:1e:31:47:a8:6b:40:d1:9b:26:36:fe:
4a:7b:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:08 2025 by rpki-client