Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: KAMePjhmtw86blxhKNNfBAR/5JvKwDPdLFdITQXWQNk=
Subject key identifier: 45:F6:02:27:F7:FF:8B:80:C9:95:B0:CF:22:27:11:E5:E5:07:58:41
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 019848C0D57593F010443E3F95EDA82DB3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 22:00:53 +0000
Manifest this update: Sat 26 Jul 2025 22:00:53 +0000
Manifest next update: Sun 27 Jul 2025 22:00:53 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: Kbe/3gCVs6DGph/f738SA9Zn69/Wo0vV68vWQS5Qm9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:d5:75:93:f0:10:44:3e:3f:95:ed:a8:2d:b3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Jul 26 22:00:53 2025 GMT
Not After : Jul 27 22:00:53 2025 GMT
Subject: CN=45f60227f7ff8b80c995b0cf222711e5e5075841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:60:85:94:7d:ce:29:eb:40:83:ea:a5:c7:
36:d8:8d:a4:bf:a4:06:0d:21:39:22:d8:30:76:63:
40:16:30:40:26:50:dc:dd:e2:fb:51:c4:c9:40:ca:
0e:03:85:aa:b7:de:9b:ea:3a:09:0e:b4:83:0b:e3:
af:70:76:51:2c:a5:5d:fd:91:29:75:1a:3e:80:4e:
7c:73:ca:c5:a7:66:86:69:9f:cd:0f:24:34:1e:89:
ca:8b:08:8c:ab:b9:60:a1:d2:96:88:8b:35:8d:4a:
3e:5c:ec:4d:9d:da:14:4c:f9:2c:a9:72:51:e0:3a:
da:54:8f:09:a8:e9:17:b6:0d:ee:ab:09:37:82:1e:
c2:7f:1f:bb:cf:4a:51:91:fd:ce:cf:d9:8c:1a:2e:
d9:e2:fd:2e:28:63:6a:be:b6:bd:05:93:09:80:c4:
5e:ac:fe:bc:a9:85:4f:df:b3:fc:25:a2:a3:0a:bb:
2e:64:fd:b8:54:c2:5c:bf:43:2e:2a:ff:00:5d:9e:
22:1d:ab:16:e7:d7:b1:4d:3a:45:d3:69:6a:ef:75:
c6:b0:a5:ac:94:c7:df:fa:b9:67:2d:bf:04:1d:d5:
1c:90:94:0f:58:89:16:75:6f:c7:a1:48:78:5e:7b:
91:87:8d:b9:d6:0f:46:35:e0:5f:2b:70:b2:73:3b:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:02:27:F7:FF:8B:80:C9:95:B0:CF:22:27:11:E5:E5:07:58:41
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:a7:d1:8f:c7:38:a9:6e:4b:b2:30:a3:aa:4d:4a:ee:b0:
03:13:ed:fd:52:99:e2:61:79:6c:25:cb:90:52:d7:95:67:a9:
b6:54:4a:b9:92:63:16:69:21:79:a1:84:85:83:0c:1e:e3:60:
01:a5:e1:3e:f7:ad:74:3b:9a:02:d8:e6:7d:35:0c:d2:7b:06:
ed:12:4e:a7:05:ea:31:26:6e:a9:66:5d:15:d4:bb:f5:9b:59:
33:6d:a0:93:2e:7a:e8:32:d2:33:57:de:07:25:30:c5:a0:49:
56:81:5e:ed:dd:8a:f4:8c:c7:9b:59:f1:c0:76:4e:25:f9:33:
57:bb:6f:a6:da:10:e7:c3:e6:a4:db:15:50:ce:f0:90:8b:1e:
a9:3b:0a:5a:f5:05:5a:ed:1a:eb:ce:b6:d0:fd:37:7f:a7:35:
28:69:18:19:cb:71:cb:f9:4d:d6:91:f3:fa:fc:88:96:2a:64:
eb:24:08:5e:72:bd:36:ae:48:ff:e2:f8:07:14:6a:5b:59:a5:
f8:54:d9:67:e0:9b:7e:38:fd:23:09:68:c0:7c:da:59:17:a2:
43:db:90:71:08:83:4f:fb:d1:64:73:d6:b7:ee:00:c9:81:e9:
c1:9b:40:6f:1c:4a:a2:b1:d5:48:65:99:82:88:83:d1:a2:04:
f2:2a:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:09 2025 by rpki-client