Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
File: gxtyb8yYIAzzkDTflY6P6LPHnDc.mft (raw, json)
Hash identifier: O5x0UlnGnas5wakfFyeDDepa6t94KxRnVYNXyTiLQ20=
Subject key identifier: 06:0A:07:55:AB:1A:3E:26:4F:8B:3F:9D:9A:E0:B7:AF:68:F9:6C:D1
Authority key identifier: 83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
Certificate issuer: /CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Certificate serial: 01984A09DC88E2360196419475B24376B43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
Manifest number: 0518
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: gxtyb8yYIAzzkDTflY6P6LPHnDc.crl (hash: 0ekmq7+CUbbKixXRWq8jOx7ldSz/IjwTSrvYgX4WXEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:dc:88:e2:36:01:96:41:94:75:b2:43:76:b4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=831b726fcc98200cf39034df958e8fe8b3c79c37
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=060a0755ab1a3e264f8b3f9d9ae0b7af68f96cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:a9:56:a7:e8:92:71:e1:19:61:c1:a6:6c:
20:d0:c9:a4:cf:c8:b4:f3:e0:52:3a:fe:b8:6b:e1:
c9:17:7b:9e:0c:04:09:da:e0:c1:b1:82:0c:c5:ee:
63:16:63:9c:ed:a1:1d:0a:27:bb:e3:2c:59:fe:7d:
24:57:44:6d:9f:4a:2c:a4:a5:b1:10:ae:f5:8d:00:
3a:4d:04:df:3d:1b:b0:7d:4f:f5:1f:17:9e:28:05:
5c:1d:3d:02:37:d0:d3:37:71:aa:61:d6:4a:7d:ec:
95:a0:c6:1f:b9:32:14:00:de:24:62:16:80:85:3e:
86:04:e7:77:52:71:ff:16:26:2d:05:2a:3b:de:fe:
91:bd:52:0c:7f:b0:2e:4e:0b:57:da:ad:d5:63:8c:
4e:fb:69:5d:b3:50:be:6d:a5:9a:c5:4c:ab:4b:91:
49:b5:01:a6:32:0e:c2:23:69:0f:26:2c:3a:d4:f1:
78:5f:21:99:6f:b4:24:2d:35:2b:51:11:fe:d2:ef:
cb:97:01:1a:85:3e:54:19:19:ad:a4:5a:2b:9b:d2:
b3:08:c0:ed:8f:d7:20:e2:7f:0f:18:a8:4f:b8:95:
11:f2:ae:3d:7e:1d:91:5d:c0:fe:ee:8c:b1:c6:e7:
d3:ff:64:92:a3:31:71:41:0b:da:e6:36:97:25:19:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:07:55:AB:1A:3E:26:4F:8B:3F:9D:9A:E0:B7:AF:68:F9:6C:D1
X509v3 Authority Key Identifier:
keyid:83:1B:72:6F:CC:98:20:0C:F3:90:34:DF:95:8E:8F:E8:B3:C7:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxtyb8yYIAzzkDTflY6P6LPHnDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/05143f-c3c9-4357-847e-3c34363684e6/1/gxtyb8yYIAzzkDTflY6P6LPHnDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:95:0f:0a:34:5c:30:ed:0e:74:33:61:b7:cb:96:5e:85:5c:
95:b3:9f:05:54:ab:95:18:c9:f0:e9:c5:99:eb:da:50:23:33:
c7:24:bf:e6:b0:8d:e6:6f:0d:6b:85:72:0a:f2:d1:57:cc:24:
a0:1b:62:e2:d4:53:6d:f3:b6:3c:4b:d6:c3:6e:25:8f:9e:31:
5c:d9:d1:9e:a8:fb:3d:c3:eb:4a:8d:35:c4:bf:bb:35:7e:27:
7c:ac:9b:c9:e8:f2:9c:3b:d3:7b:df:c4:e4:15:f5:30:db:b1:
50:52:bb:86:67:3f:1c:6e:e9:44:bd:a9:fc:35:17:5b:8e:52:
4e:d0:a2:b7:3c:99:25:c3:be:d5:ee:15:24:5d:3f:18:de:fd:
65:86:e2:58:83:b2:01:7d:47:1c:ca:9d:27:f8:77:b8:c2:44:
48:9f:8f:4e:26:9f:ed:e2:9b:8a:e5:99:00:f8:7e:a1:af:92:
c2:29:25:b3:3a:ac:5b:51:66:06:79:1b:c0:d9:59:f2:69:52:
a1:a6:1d:c5:73:6a:54:88:ac:2a:78:03:db:83:a3:7f:cb:df:
50:3b:5d:9e:02:a7:ce:15:9e:f5:dd:59:a8:d0:e6:f9:b5:42:
ec:d5:a4:17:7e:68:c1:a4:f6:b2:bb:65:62:d5:4c:ba:ba:6f:
51:6b:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:27 2025 by rpki-client