Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: W2ovdMIDs9ebXURrs8Y48MqgOodB7riboYlC4igY+Eo=
Subject key identifier: 19:F1:45:81:D7:4D:50:23:1B:08:13:D9:05:E8:39:72:D2:4A:7C:81
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0198530EB985410387D8C19664375CB4C97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 22:02:10 +0000
Manifest this update: Mon 28 Jul 2025 22:02:10 +0000
Manifest next update: Tue 29 Jul 2025 22:02:10 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: sPzapPbDw9ILzVzPITqZgb3h2uNmWixYhdS9eX4yVJQ=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:b9:85:41:03:87:d8:c1:96:64:37:5c:b4:c9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jul 28 22:02:10 2025 GMT
Not After : Jul 29 22:02:10 2025 GMT
Subject: CN=19f14581d74d50231b0813d905e83972d24a7c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:09:90:66:66:a3:d3:06:3e:5c:52:f3:82:
46:c9:b1:b7:9d:19:1c:15:6f:e6:64:df:a9:69:0b:
e1:8a:e7:7f:68:87:6f:15:76:bf:e6:eb:7f:a3:00:
fe:3d:96:01:b5:da:1b:c9:11:31:43:6d:38:6b:ab:
e0:5f:cd:9a:c4:d8:5d:cb:2a:52:db:2e:f0:10:9e:
41:42:35:03:a6:de:ef:cf:41:43:c9:c8:56:74:4a:
80:40:fe:02:27:42:84:01:49:23:ca:6c:a1:32:fb:
d9:96:66:de:63:18:b8:73:b9:fc:6a:7e:d9:8e:d1:
12:f3:9a:51:2f:b9:21:f7:b4:2b:0d:55:ad:f5:e8:
b9:84:14:e1:4c:a3:2a:9e:5d:a1:f3:c7:07:a2:3f:
85:79:9d:39:2e:25:5c:50:20:2b:90:24:b8:02:1b:
0c:b0:52:a3:07:d8:98:1e:90:f3:aa:74:bb:34:08:
fe:e0:fe:17:b2:9c:87:ad:10:ea:ac:b9:48:94:9d:
ac:16:fb:5f:b1:00:aa:d4:92:e6:55:aa:16:6c:67:
52:f4:1f:ce:0e:18:39:42:81:72:45:68:66:ac:bf:
9e:d6:5f:0c:e7:87:ff:92:3a:73:3e:bf:aa:8a:17:
6c:cb:83:dd:59:e2:c9:66:fe:c5:e3:0a:f6:a5:4b:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:45:81:D7:4D:50:23:1B:08:13:D9:05:E8:39:72:D2:4A:7C:81
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:68:b5:b9:27:c3:77:cf:5e:59:c6:92:a2:42:b5:61:0f:
48:f2:68:64:5c:a4:18:3c:a2:b0:cc:55:ac:44:77:6d:0f:3a:
bd:e6:d9:05:2e:2c:c8:60:8c:2a:b3:9c:97:a6:54:00:55:4e:
38:82:cf:b5:0c:7b:af:b5:86:d3:b6:70:79:b0:9a:08:29:0d:
10:f2:89:c5:81:a5:c3:38:5e:11:06:17:20:c0:20:42:f6:46:
9c:5f:32:c0:93:17:39:90:4c:ae:03:3f:67:d3:9e:8c:60:18:
e5:7a:62:94:0b:04:ed:4f:ba:2d:82:5c:b3:f2:97:d7:3f:54:
79:88:20:9f:d0:1c:81:c5:b1:0e:54:8d:50:ac:a3:1e:95:dd:
96:4b:7a:12:d4:f6:09:2f:7d:b4:66:e6:e1:e9:7f:66:31:e1:
38:ca:14:5a:91:c1:14:63:34:ea:21:dc:7f:e9:b5:2e:bf:30:
0f:a0:8b:27:76:47:70:59:a3:91:0c:f4:4d:1d:9b:70:62:49:
e3:54:f7:b0:fb:f5:a9:31:d5:04:91:e5:f5:0e:3c:bd:eb:36:
a2:f1:d8:ce:d1:6b:5b:44:95:c6:67:33:38:a8:49:04:c2:f7:
e2:32:a4:ab:e6:31:cf:03:19:2a:b3:1a:07:7e:31:6e:19:4f:
ff:61:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:11 2025 by rpki-client