Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: oBN/EU0ucIw5XcpRCSeg+Xw3+idO0/YeqGaaO7t9nNA=
Subject key identifier: 6A:55:C5:DD:F6:67:67:C9:8C:99:7D:C3:80:76:9C:48:01:0C:DB:77
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 019872D009344729BEB6C2F07941B78429C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:01:33 +0000
Manifest this update: Mon 04 Aug 2025 02:01:33 +0000
Manifest next update: Tue 05 Aug 2025 02:01:33 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: yCNlDNpU9tf9DewqFKoxEwfygAeSEnl6NLTJVM/ijKM=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:09:34:47:29:be:b6:c2:f0:79:41:b7:84:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Aug 4 02:01:33 2025 GMT
Not After : Aug 5 02:01:33 2025 GMT
Subject: CN=6a55c5ddf66767c98c997dc380769c48010cdb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:8c:de:4d:38:86:dd:0b:a7:4a:09:6c:b3:
4d:a7:f6:27:2c:09:88:9e:c0:a7:bf:55:83:eb:97:
97:65:a1:5b:6e:85:38:9e:75:23:f1:78:9b:c2:32:
c2:ed:9c:94:18:04:6b:4d:69:08:51:c3:dd:48:a0:
bb:5c:52:85:27:f2:33:03:89:74:11:9d:66:99:98:
e4:c8:8f:8b:63:d3:12:4e:0f:68:92:a5:3c:3f:fa:
3b:9d:a9:c6:47:3f:e2:a0:d7:a1:0f:a8:b4:d5:90:
aa:1d:c0:fa:2b:3e:b9:37:d2:33:46:d4:f3:ef:97:
28:2d:ab:e1:d4:c6:97:de:53:55:d6:04:6a:f6:da:
20:a9:6e:dd:82:b9:61:f4:61:6a:6e:fd:d3:ff:17:
bd:62:ce:d0:4f:db:c0:ac:28:0c:a1:68:99:7d:f8:
13:7e:5f:54:b7:2d:e4:a2:5a:9c:9c:b5:62:ba:e9:
2d:9e:9b:0d:fe:f9:97:e1:75:b8:81:f8:ca:62:15:
7a:c5:bd:cd:10:0b:6e:de:29:a0:3a:13:82:d1:e7:
6f:0d:99:17:90:8a:08:23:cd:5b:5c:36:19:02:f1:
4f:82:87:bf:68:b6:d6:fa:2d:a5:a8:2f:4c:36:32:
7d:b4:54:6d:d1:15:b3:f7:04:db:73:a8:a1:67:f1:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:C5:DD:F6:67:67:C9:8C:99:7D:C3:80:76:9C:48:01:0C:DB:77
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dc:66:53:36:56:dc:bf:f1:c1:98:d8:f7:f2:42:a3:ad:eb:
62:75:4e:32:29:e5:bb:b8:de:18:f0:bc:98:8d:3d:70:ae:d2:
5c:bd:f5:e8:95:e8:55:e4:9a:a1:91:42:d0:d1:15:98:c0:bb:
dc:12:4f:97:2c:6e:1b:6a:a8:36:8c:ba:8b:68:6b:cb:65:11:
bf:7d:13:0a:3c:da:65:2f:c4:1f:dc:a3:69:a9:ec:f9:7d:ab:
74:c8:3f:a6:b8:01:6d:9e:26:59:1c:b2:fa:32:35:c5:52:75:
54:dd:2f:cb:55:9a:d6:b4:99:d9:0b:e0:e9:71:42:62:31:3b:
77:dc:c0:0b:35:4f:d7:fe:6a:59:14:55:0d:56:2b:15:71:ec:
dc:21:d2:75:71:a7:8e:e6:83:c8:d6:7e:ed:f6:97:21:05:db:
ff:15:d9:7f:0d:09:b5:26:b6:bc:bf:be:a8:66:92:6c:67:ab:
49:63:10:98:b2:2d:b6:48:1c:0f:7d:94:18:66:8f:92:46:0d:
a9:a8:d8:11:d3:06:37:25:6e:e5:cd:93:51:ed:10:2c:38:03:
f6:28:ad:8d:12:a3:2e:ac:3a:b9:26:c8:85:08:44:f1:49:32:
a5:21:e9:72:57:4b:c4:c5:5e:02:a4:75:62:ff:71:1c:c1:9c:
47:24:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:51 2025 by rpki-client