Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: 5BDQrxHoW04HtkACPfcKatDQNdKgpBhXPPGCVE6NW/Y=
Subject key identifier: CE:1A:E0:E0:CE:49:9B:3E:C7:1E:01:ED:75:63:DC:6A:21:99:AB:C6
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019848F7929935945D43B98FE0047E8EDFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 01D8
Signing time: Sat 26 Jul 2025 23:00:41 +0000
Manifest this update: Sat 26 Jul 2025 23:00:41 +0000
Manifest next update: Sun 27 Jul 2025 23:00:41 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: 7om3w5BkhdZg2HwybVT/Sbx7tp+Bv8bgODUmhj9jqCM=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:92:99:35:94:5d:43:b9:8f:e0:04:7e:8e:df:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Jul 26 23:00:41 2025 GMT
Not After : Jul 27 23:00:41 2025 GMT
Subject: CN=ce1ae0e0ce499b3ec71e01ed7563dc6a2199abc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:86:22:f2:7c:41:f4:1a:a9:81:e9:31:7e:
2e:fa:39:f9:b6:7d:c9:c8:c2:aa:16:71:b1:ec:c7:
1f:e5:58:fa:9d:ed:61:bf:6c:14:67:2f:a4:d3:0f:
13:5c:99:2c:0f:a2:19:a3:66:79:19:26:0d:8f:fa:
38:b7:ed:2f:82:cd:b4:97:a0:53:c8:91:1d:da:39:
fa:ce:6e:db:0c:29:06:04:0f:37:9c:f4:8d:23:1d:
0a:a1:bc:f3:d1:d3:91:6c:aa:46:de:b3:eb:fe:fe:
22:36:19:82:27:c6:c5:ea:84:2b:20:cc:7f:c5:0c:
2a:65:b1:5b:63:0b:05:c3:b2:27:0c:8f:cf:5d:cb:
ac:a6:11:76:65:31:f3:56:16:d9:f1:7d:9e:bf:89:
e3:0e:e2:08:69:8e:76:4b:a2:e3:99:8a:dd:64:a9:
01:e6:10:ec:d1:18:70:59:49:de:50:d3:3f:0c:4a:
a1:89:b0:13:9b:d4:dc:1f:f6:39:49:51:fb:eb:c0:
19:67:6e:1a:47:e8:00:97:ef:d0:b0:9a:57:11:18:
72:f6:9f:0a:a6:cc:d5:de:95:b2:65:32:ec:0d:b8:
28:b1:31:87:be:dc:78:b5:49:48:a0:5f:23:42:3b:
c1:93:79:30:2f:11:84:3c:8a:68:12:f9:1b:0f:6c:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:E0:E0:CE:49:9B:3E:C7:1E:01:ED:75:63:DC:6A:21:99:AB:C6
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:95:97:72:0f:17:b8:6a:9d:39:1b:75:81:85:33:cc:48:
e4:e7:c5:06:a5:f1:93:33:fd:9b:16:90:e5:f0:ce:ab:7b:76:
a2:5d:4e:0b:3d:50:60:9f:2c:30:64:db:28:ff:21:80:30:d5:
dc:79:66:cf:71:ec:b4:e5:c8:33:d9:30:27:5d:9b:55:15:e9:
fb:49:78:9d:00:ee:2a:fd:4f:a9:00:31:ef:97:d4:3d:5a:85:
fc:01:cb:6a:87:a8:4e:31:af:18:3e:67:df:8f:c2:a8:e3:68:
81:33:15:eb:33:ef:74:05:29:82:4b:ff:b0:ed:d3:97:ee:d9:
b0:01:e1:36:69:ba:7b:c2:0d:90:3f:0a:d4:83:c4:8e:e1:3d:
65:fc:d9:8b:42:b0:d2:8c:17:8e:2d:39:ee:27:5a:46:0b:c1:
b4:59:9b:c2:35:1c:c6:d2:31:6a:20:64:07:e4:21:0a:56:d2:
50:0c:b5:78:ce:61:85:e8:ab:ed:5a:b7:a2:53:6b:a8:02:34:
22:04:b8:16:80:3e:a8:a0:c9:f8:1b:96:21:a6:4e:e3:7a:7e:
36:a9:7d:05:fa:ff:58:c2:8a:f2:f5:25:31:56:88:aa:94:f4:
1b:88:3c:0b:36:b5:b2:b6:7e:3c:7a:ea:a7:57:4a:6c:74:a7:
0d:00:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:07 2025 by rpki-client