Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: BL1ANISVjosY1/GbUfN2xPj6j+Nhp7P36xUUiTwk5P0=
Subject key identifier: 93:D3:02:BA:AA:8A:DC:A8:02:D8:2E:2D:C3:C1:84:26:0F:58:21:F1
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 019855A0A6F1BEFB1AE3DAD077B3C4C2EADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 10:00:48 +0000
Manifest this update: Tue 29 Jul 2025 10:00:48 +0000
Manifest next update: Wed 30 Jul 2025 10:00:48 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: LSm5FacRH/uof1rGf/CpCJGY/jzb4ys/CSFlZZQ0e9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:a6:f1:be:fb:1a:e3:da:d0:77:b3:c4:c2:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jul 29 10:00:48 2025 GMT
Not After : Jul 30 10:00:48 2025 GMT
Subject: CN=93d302baaa8adca802d82e2dc3c184260f5821f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:28:74:e7:af:9e:81:c0:84:a5:33:83:97:
0c:cc:36:8d:c3:92:df:b1:dd:bb:70:4e:30:8f:f7:
40:6c:82:bc:75:65:ff:e8:47:a4:c6:a4:16:3d:8e:
30:e7:95:46:07:97:2e:43:76:5f:80:8e:d4:40:00:
a6:13:f0:ec:59:43:c9:b9:62:44:c5:eb:64:7f:c9:
6b:21:37:59:54:a9:9c:18:7e:56:23:bd:e0:07:5b:
37:13:01:01:a4:6e:83:d6:04:6c:5f:db:3d:18:2c:
78:41:9d:91:3e:5c:ee:50:47:62:62:0d:6a:91:a9:
5c:c0:13:b2:cb:e2:0d:84:14:b9:3e:36:ec:dd:83:
95:48:d3:2e:ce:b2:1e:7a:8e:23:ff:79:78:d4:76:
40:94:f7:70:76:03:5d:37:19:70:8c:3d:14:e8:47:
61:d7:87:b6:c0:f1:f1:97:90:c6:62:d5:f2:77:bc:
e7:67:6e:82:0c:7d:2f:22:9b:97:87:33:ec:15:d3:
cb:33:be:27:d8:7f:6e:61:55:d0:0c:89:a6:91:84:
f2:bf:c1:2b:96:e0:53:04:d5:df:72:20:09:d6:0f:
df:2d:ee:6b:3f:5c:fa:37:46:05:98:e8:52:2f:7f:
28:94:12:4b:ae:e6:92:a9:dd:ed:67:fa:fc:a2:d2:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D3:02:BA:AA:8A:DC:A8:02:D8:2E:2D:C3:C1:84:26:0F:58:21:F1
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0e:44:19:3a:a1:c2:b0:05:af:7a:d2:6f:a9:20:56:af:52:
13:52:2e:73:ca:11:4a:51:74:a2:0b:bd:88:9d:08:1a:8a:e0:
fe:4b:c6:41:e0:5b:14:89:cc:e0:b3:d9:96:7f:a1:8c:3c:a6:
b1:79:2b:45:29:89:26:da:64:f7:4a:e4:5e:8a:3a:55:d7:4d:
85:d6:42:a4:57:af:f7:ff:94:b6:55:d3:eb:fc:f3:fe:3d:58:
c0:eb:e5:54:51:f1:5a:3e:1f:78:01:21:2e:e0:11:ca:60:20:
dc:ed:b7:9f:d8:84:d0:50:81:df:88:89:70:01:18:ea:ae:06:
46:61:b7:6c:aa:a7:26:ff:7f:f9:aa:cf:05:0e:c5:8b:1f:92:
9b:14:08:bc:f4:96:dc:2e:cc:9c:94:77:6a:80:fa:47:94:0e:
5c:4c:df:c0:3f:7a:18:de:d8:0c:eb:7e:7b:d7:4b:73:16:c1:
ac:6b:68:03:80:ce:6a:ab:4c:1e:37:3c:a2:a4:93:76:3a:2f:
a8:bb:f0:61:d4:29:dd:27:45:21:cb:c0:5b:b3:e2:f6:6d:92:
24:9e:67:8f:5e:36:b2:1c:51:b7:ba:78:a0:67:cb:4d:28:6a:
bf:3d:c2:2a:7c:b0:29:05:16:9b:e0:d0:63:73:bc:8a:ab:16:
e2:21:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:19:37 2025 by rpki-client