Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: 4CeazO0y9U5xVFXcODiJqsAPCKjauqJYKP05ji7u7Vg=
Subject key identifier: 18:AE:E0:FC:2A:FA:5E:4A:8E:50:78:70:A3:B6:4F:3E:B0:32:03:00
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 019847AD98185A6838DEC6BA7DFF3626098B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 0794
Signing time: Sat 26 Jul 2025 17:00:15 +0000
Manifest this update: Sat 26 Jul 2025 17:00:15 +0000
Manifest next update: Sun 27 Jul 2025 17:00:15 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: eQo7uHRRhnMp52cEm/CWBXyuHvGlkbQSUSu8pKov6Pc=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:98:18:5a:68:38:de:c6:ba:7d:ff:36:26:09:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jul 26 17:00:15 2025 GMT
Not After : Jul 27 17:00:15 2025 GMT
Subject: CN=18aee0fc2afa5e4a8e507870a3b64f3eb0320300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:89:9b:78:08:aa:21:de:9e:cd:ba:3f:da:
87:46:20:16:fa:38:39:fe:de:10:80:fd:8d:7a:7e:
56:d8:cf:09:75:a2:80:df:b0:d7:40:d1:85:0d:10:
d2:aa:ea:ef:1d:58:65:a2:ac:78:d9:57:62:21:4f:
7f:12:b2:c2:42:6a:ba:fc:0d:69:24:d2:82:75:bd:
1a:aa:a4:96:00:57:b0:c1:00:61:a1:77:7a:5e:a2:
5b:e7:8e:fa:28:9c:90:16:a8:d8:4e:ad:48:79:36:
67:1c:17:de:56:04:d6:a5:4b:f7:4b:1e:36:90:22:
cd:00:72:a4:6c:c7:7f:21:c8:08:bf:4d:ed:02:23:
48:ef:7e:7a:a2:70:e4:92:50:83:0f:c6:8c:c3:c5:
ea:f9:0e:ca:aa:e2:7a:5a:d0:6e:6f:73:db:18:7f:
90:d7:98:54:c5:c5:35:3b:7a:c6:e9:41:98:f6:fb:
b0:12:56:62:77:58:36:47:4d:93:ec:32:65:35:81:
e2:64:8f:38:a6:79:c9:dd:8e:29:ca:42:12:7b:05:
c8:83:be:cf:d1:74:1f:c5:6f:76:6c:6a:5e:da:f7:
c8:65:83:9f:39:4c:fc:47:b0:b4:59:04:ce:36:4e:
ab:33:70:ac:1c:b4:1a:47:27:96:30:e0:39:96:1b:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:E0:FC:2A:FA:5E:4A:8E:50:78:70:A3:B6:4F:3E:B0:32:03:00
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:35:57:c9:6e:41:ab:3e:78:0a:7c:93:43:d0:5a:c4:54:
c4:98:af:dc:e5:8a:50:bf:1b:b3:d5:d2:c3:5f:da:9d:9e:50:
30:67:59:a8:95:27:96:8b:ef:b7:07:df:54:6f:81:18:9a:55:
34:b4:ef:63:39:55:66:92:52:97:94:e7:39:1a:38:cb:d8:09:
c9:16:7d:57:55:c9:a3:5d:22:3e:4f:20:ef:3a:3c:09:81:09:
71:62:a6:20:aa:f2:61:81:56:07:54:2f:5e:7c:2d:93:90:e7:
45:43:0a:6d:91:e9:f3:91:6f:1c:0f:0b:6f:fc:d7:0e:43:2b:
90:99:f9:76:df:3c:ec:36:07:31:27:62:84:8d:c8:07:6d:08:
58:da:2f:17:61:91:b2:5b:dc:d7:47:92:7d:79:a8:68:74:c8:
dd:00:9f:70:4d:7b:ac:bb:14:83:b8:3a:0d:11:bf:3b:95:6d:
c8:12:73:50:43:c7:a2:91:b8:57:b1:d9:b0:82:3d:e2:8b:47:
df:65:25:10:08:80:8b:68:db:e4:23:e3:07:6b:b7:34:59:e4:
d3:9c:8a:d1:9f:e7:f5:f5:35:5a:03:48:32:a9:26:20:8e:8e:
68:df:87:c0:ab:d4:7a:b2:e6:37:fd:f6:0a:79:1c:7e:21:11:
b2:f6:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:16 2025 by rpki-client