Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: JCe2GK9V4EpwoUd+0h6wpOCbqhqP9VwRFUiMH5d3hQA=
Subject key identifier: 30:EA:5A:4B:A0:62:26:34:BA:CC:AF:66:65:FD:86:A5:72:A5:AD:20
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019873740C2598AFAAAAD8EFE019D03ECD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0151
Signing time: Mon 04 Aug 2025 05:00:41 +0000
Manifest this update: Mon 04 Aug 2025 05:00:41 +0000
Manifest next update: Tue 05 Aug 2025 05:00:41 +0000
Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: pvXge/bMq1JVnQVss0pbqDQgX1eFOL6OSp7XTELyCkQ=)
2: vvdAJvoqdhRnHyNRnR9QwCmshOA.roa (hash: yno5bMF5UsFhgiWOHsRLetn5+9bEbKawwZrFBu7TWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:0c:25:98:af:aa:aa:d8:ef:e0:19:d0:3e:cd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Aug 4 05:00:41 2025 GMT
Not After : Aug 5 05:00:41 2025 GMT
Subject: CN=30ea5a4ba0622634baccaf6665fd86a572a5ad20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:b1:09:e3:79:6e:b7:86:e0:d0:e5:6f:18:
70:a8:a9:68:ff:d6:d8:ac:f8:2e:19:00:9b:72:32:
7d:48:36:23:7c:b3:94:39:56:9e:ee:6b:11:6a:51:
42:60:e6:0d:e8:70:f1:0f:ea:1f:1a:8f:fa:a3:45:
b3:eb:63:5f:33:3f:32:b7:4c:4c:53:4e:f9:7c:53:
62:79:12:08:a9:bf:ee:6d:ca:75:ac:e7:2f:28:cc:
a3:a3:dc:db:70:70:6d:af:00:70:e3:9c:a8:05:ae:
81:e0:1f:15:25:5e:fa:ca:7c:19:a9:04:1d:fc:65:
b0:8d:e3:fd:f5:48:07:32:0a:0b:a9:cd:02:b7:93:
07:30:25:8b:6d:4d:82:1d:cc:15:44:7f:bc:72:8b:
29:d4:ed:1f:00:e5:2f:b1:0a:06:0d:ee:2d:89:d3:
25:af:97:7a:28:b3:c8:b1:6d:f1:f6:db:6e:7b:d6:
99:c5:e2:5b:db:0c:94:a2:b1:aa:bc:36:5a:71:39:
58:1f:60:e2:b3:ca:ef:84:30:9b:14:1d:46:45:34:
a8:91:9f:6b:db:dc:19:30:08:53:e5:f4:f8:48:9c:
df:05:27:d6:2e:f2:ff:b2:50:82:57:2a:bf:d5:54:
46:ae:57:fa:ae:b1:2b:3d:98:61:22:d0:eb:61:e8:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EA:5A:4B:A0:62:26:34:BA:CC:AF:66:65:FD:86:A5:72:A5:AD:20
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:8d:1f:57:09:88:36:85:a9:b6:a1:69:f4:1e:f9:5f:6b:
6e:52:48:c5:4f:a0:4a:96:08:72:b7:3f:8e:41:91:45:d0:ac:
3e:39:45:16:f9:81:e0:cb:0c:d2:48:5d:87:f7:4a:d5:ea:e8:
97:2c:2c:3e:1e:d8:26:9d:c1:8c:e9:f9:42:1d:5c:a4:17:0e:
bd:8c:48:ba:47:08:da:55:0b:43:01:a7:aa:e9:8c:45:7a:5c:
1e:a0:4e:2a:ba:92:ec:5b:50:60:f3:24:6f:0a:0f:87:3e:36:
61:08:a6:be:2e:86:fa:0b:d1:5e:49:80:fa:fd:be:24:a6:b4:
61:48:1f:b5:5e:56:13:b9:7a:ff:db:8a:f8:a5:81:21:24:83:
69:67:90:8e:ae:d7:4c:74:67:c1:e9:f7:82:76:d2:ad:83:ec:
a8:4e:40:31:6b:79:e8:49:ed:6e:7b:7c:fd:88:26:3c:44:56:
dc:d4:57:3b:3f:9a:18:03:8b:bb:b4:3e:b3:b9:eb:d2:f0:ae:
e6:a7:34:bb:6b:e9:03:77:48:ab:32:02:8f:07:17:37:8e:4b:
cf:dc:ac:f7:5b:3d:5b:00:e6:e5:22:86:24:7f:0a:07:93:ae:
32:dd:22:00:57:f3:d2:04:dd:67:cb:79:d8:c4:e5:43:af:8e:
75:d4:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:33 2025 by rpki-client