Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File: GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier: Hqx/U/R4pfo2TItpLuILOAT28LPZZsw+5mj5r8oU/Xk=
Subject key identifier: A4:14:E6:86:47:49:D5:6C:CF:CB:A2:38:D3:7C:E1:C4:E1:3C:9C:69
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer: /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial: 0198537B0254AFE91C6AB0AFFD1D5F84A175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number: 08ED
Signing time: Tue 29 Jul 2025 00:00:27 +0000
Manifest this update: Tue 29 Jul 2025 00:00:27 +0000
Manifest next update: Wed 30 Jul 2025 00:00:27 +0000
Files and hashes: 1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: eXUU7uYHw7XYSmpLS0+lts/x205aNH+/3O7BxmygGns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:02:54:af:e9:1c:6a:b0:af:fd:1d:5f:84:a1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
Validity
Not Before: Jul 29 00:00:27 2025 GMT
Not After : Jul 30 00:00:27 2025 GMT
Subject: CN=a414e6864749d56ccfcba238d37ce1c4e13c9c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:26:34:be:86:65:34:2d:dc:0c:88:c7:3a:
73:61:18:31:83:89:f9:2d:91:c9:a0:b6:66:7f:47:
19:0d:a2:29:1e:28:b3:c3:9c:2d:4b:d1:cd:95:71:
67:e5:92:cd:0d:4f:5a:46:02:3a:43:a8:67:1f:c6:
c9:e1:1a:e7:97:a5:94:09:ef:4c:64:75:5d:a0:26:
3a:ab:a6:3e:b2:13:38:28:d3:fe:25:d1:11:3a:43:
03:a4:da:40:71:74:43:86:aa:6c:2b:88:68:fb:50:
97:56:a2:31:c9:2f:7b:45:7e:93:b7:f3:02:17:99:
e5:5d:24:ae:e6:06:99:dd:fc:8a:70:e9:aa:37:bd:
bf:ac:71:3c:f7:e9:94:0f:d1:9d:33:ac:d6:b1:12:
57:48:6a:81:f1:63:ee:60:9f:b1:9b:d4:30:6c:b4:
c0:a0:d0:f4:81:20:54:77:94:27:fe:32:66:17:e7:
f9:9e:d7:a6:a1:38:3f:ce:4c:38:3b:dc:62:95:eb:
6b:1e:f2:0c:e2:26:50:1d:97:71:db:3c:95:4d:9f:
ab:de:1c:00:24:bd:19:b5:92:05:62:fb:28:24:42:
a7:aa:e6:46:70:3f:1f:9a:67:0e:ef:21:d2:4a:5b:
2b:1f:0f:49:57:72:4b:74:e7:03:ed:bd:4e:fd:4b:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:E6:86:47:49:D5:6C:CF:CB:A2:38:D3:7C:E1:C4:E1:3C:9C:69
X509v3 Authority Key Identifier:
keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:23:ff:95:94:78:af:d8:e5:d3:58:d4:59:81:c4:97:7b:
e3:90:fb:85:68:5f:60:9c:a1:6b:da:41:9f:40:d0:e5:59:b6:
09:99:f3:c0:02:6e:a8:89:57:7b:db:85:98:fc:11:69:65:fa:
06:40:ed:f0:de:5e:ff:ee:c8:83:d7:46:49:8f:b6:22:0a:cb:
5f:15:de:a4:f2:65:81:c7:2b:a3:63:d7:e0:b6:ef:37:dc:b0:
7e:53:6e:df:ed:a5:0e:74:74:c3:ab:6e:c4:69:fd:e4:e9:24:
03:83:ab:da:b0:70:e9:41:a4:e7:87:de:71:e9:b6:5b:95:79:
60:1b:77:90:b4:8d:13:dc:45:ba:69:01:24:72:23:6b:2c:f4:
6b:98:30:68:9a:5d:e9:c6:75:41:8b:55:dd:e8:28:be:80:12:
96:42:4a:f5:e4:38:37:a6:06:a3:80:ca:ff:ff:a7:23:57:42:
35:a6:7c:f2:76:3c:b6:69:0b:0a:18:4e:e1:71:f4:3c:c3:05:
a5:ca:64:57:98:e7:71:8e:d0:b7:64:48:1e:00:75:29:63:fd:
7e:36:97:0d:52:4f:82:ed:b2:b9:81:06:d0:39:bc:78:88:2e:
ac:6a:22:10:52:6c:bf:26:44:73:e1:4d:c9:7c:61:e7:44:3f:
b7:fa:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:25:27 2025 by rpki-client