Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File: GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier: bySJRgvOw5jmbObIZflJFGh37tmJotgtfcud3MhVJKQ=
Subject key identifier: FB:A9:5A:A2:3A:23:4A:FE:38:45:FB:9C:B4:72:D2:31:88:73:67:F9
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer: /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial: 01984AAE7ACDA69A8314DD61DA5D26B428C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number: 0AE4
Signing time: Sun 27 Jul 2025 07:00:05 +0000
Manifest this update: Sun 27 Jul 2025 07:00:05 +0000
Manifest next update: Mon 28 Jul 2025 07:00:05 +0000
Files and hashes: 1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: jjy84Z65AgPgREYOLcwsusmwnoLruF4jFV7poRVbeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:7a:cd:a6:9a:83:14:dd:61:da:5d:26:b4:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
Validity
Not Before: Jul 27 07:00:05 2025 GMT
Not After : Jul 28 07:00:05 2025 GMT
Subject: CN=fba95aa23a234afe3845fb9cb472d231887367f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:31:45:d8:e8:38:fd:85:a9:c0:8b:8e:a3:
0f:45:7d:50:07:db:b7:b5:af:36:82:9f:b1:ee:a4:
d4:2b:c9:f3:ea:9f:56:fe:cf:d8:08:c7:c4:1a:bf:
8e:b1:6d:13:57:17:d4:da:38:53:9d:89:e3:56:49:
f6:e8:94:b9:be:c4:33:d2:a2:c6:2c:24:80:91:e3:
f4:b7:f0:2a:32:ed:89:41:a5:4d:54:ac:e8:f9:f3:
29:b5:90:b7:0d:2f:87:04:ff:3e:e4:c5:9d:a1:53:
53:4b:3b:0e:9b:40:ae:d4:a7:d2:07:29:78:89:a5:
82:53:92:da:21:77:f8:6c:fb:fb:e6:07:4e:a4:bb:
04:8e:d6:ab:e2:79:be:e3:36:a4:4e:17:86:a7:6b:
58:46:48:96:c0:ca:3c:00:ff:f3:a0:23:bd:df:92:
ac:97:15:ec:e6:45:45:1f:64:76:9f:9a:c2:fb:40:
08:5f:3f:08:90:7e:3a:a1:6e:5a:a4:9e:2f:b6:e1:
4d:e8:b5:3d:33:6d:d1:0e:8e:ec:77:c8:5e:f1:02:
b4:98:df:e2:47:d2:3f:63:c4:1e:73:d2:2a:1a:9e:
68:df:6d:4c:01:7f:9b:78:ec:24:47:92:f2:6f:8a:
bc:f3:36:d9:91:19:db:7f:e1:44:d3:7a:ea:c8:62:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:5A:A2:3A:23:4A:FE:38:45:FB:9C:B4:72:D2:31:88:73:67:F9
X509v3 Authority Key Identifier:
keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:66:41:e5:36:a7:9b:75:d4:4e:fa:27:f1:61:e9:fa:5e:5a:
ac:2e:ec:24:d8:26:36:07:0c:34:aa:14:cc:47:01:ac:37:3c:
50:54:41:a1:c6:20:a7:87:05:9c:30:ec:68:48:8d:d1:dd:26:
09:4c:fa:47:4c:11:93:4c:fe:cf:e7:8e:90:b3:44:fb:38:4c:
f9:4f:37:f3:26:94:10:b9:69:8b:60:39:b8:3e:c2:95:f4:81:
86:18:3f:0e:ae:8c:5f:48:f3:2d:de:47:cf:fd:a1:e3:fc:bc:
9d:6d:ba:22:4c:85:c3:6c:35:32:4e:c1:04:d1:57:cd:c3:59:
7c:3b:d8:4f:6c:24:bb:81:b4:d1:2b:99:85:08:88:27:0f:26:
4c:36:16:af:76:b2:f8:05:7d:c4:de:6a:72:43:49:bf:70:3d:
2e:e8:3f:60:29:43:fc:ea:44:d3:52:87:c0:0a:f6:11:a4:4e:
7a:c3:21:5e:22:5b:16:36:31:f0:3e:0a:ec:fa:b1:98:51:86:
52:bb:28:5b:7e:53:19:88:17:a5:21:b5:ef:9e:11:b7:03:86:
93:68:67:94:09:82:b4:b8:46:14:2b:d7:9c:6b:1c:1c:af:56:
8f:85:5f:ad:88:fa:96:f1:da:b3:33:5e:ac:d6:e7:f4:b3:c9:
93:4e:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:03:13 2025 by rpki-client