Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File: GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier: glVybLjNumWUyGBz/6i7R9ANCM6S3mQtrRHjKMMtUTs=
Subject key identifier: 19:BE:8F:45:E4:6F:62:0B:9D:08:BA:50:8C:DA:E2:49:DE:33:11:1A
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer: /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial: 01984AAF2941A535DE0D34B6AC56EE001E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number: 0252
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: n6fxsDAz2hx/fRgyo/ZGWUdbXLulvkqihW3wZMsb7Pg=)
2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:29:41:a5:35:de:0d:34:b6:ac:56:ee:00:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=19be8f45e46f620b9d08ba508cdae249de33111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:0d:e4:90:70:76:88:21:d2:f6:75:df:2f:
db:0e:d4:ac:c6:04:40:77:3d:05:e3:1c:67:eb:89:
df:f6:d8:04:40:df:af:7d:98:c9:5f:38:3e:bd:66:
78:6e:d8:55:8a:af:45:6c:cc:81:a6:70:a0:0c:df:
30:b7:22:8d:11:0a:6c:7f:a3:f3:0c:46:cb:9f:96:
3b:5e:92:65:7e:f5:96:b5:aa:cd:8b:a9:eb:b4:80:
0b:3a:9a:b4:fe:ef:e8:ee:af:12:c6:e7:e0:34:0f:
ef:d3:04:9c:e2:5a:13:13:d7:5e:26:9e:76:77:ff:
df:99:da:e2:bf:aa:a1:61:18:6e:32:c1:76:25:06:
3c:b7:fd:a3:7c:f4:a9:d0:3a:ee:5c:2c:38:de:7f:
52:e5:93:81:fb:aa:8b:45:f5:3b:78:f4:61:17:46:
21:02:ef:6c:96:5e:d1:ee:58:3a:15:67:f9:e8:68:
f2:a1:6d:16:65:db:f0:c5:e4:35:6e:03:24:ce:16:
b4:cb:ef:8e:60:7d:b6:f1:6c:99:58:38:90:3a:55:
1f:31:bf:c5:c6:af:08:c3:00:ab:e7:95:dc:77:09:
9e:0b:74:ed:c7:c9:78:d4:4f:a9:58:a7:60:29:76:
67:64:1f:3c:00:17:a2:0d:b0:63:2a:ed:d9:e3:4e:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:8F:45:E4:6F:62:0B:9D:08:BA:50:8C:DA:E2:49:DE:33:11:1A
X509v3 Authority Key Identifier:
keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:52:45:a6:bf:65:49:be:03:44:42:c0:a0:f3:06:4a:73:
15:e8:01:34:89:c9:76:09:e3:0e:73:63:d1:24:66:89:20:66:
cb:47:60:de:ef:42:da:d0:40:c5:36:33:e9:66:80:d6:b8:10:
7f:30:e6:5b:0f:74:c3:af:40:bf:d1:9f:99:b9:0f:d6:0c:51:
c5:29:c3:92:cb:27:c9:48:30:c8:73:1d:dd:f0:8b:e9:80:40:
c9:5e:88:66:e8:50:87:bf:fb:00:1e:e7:22:aa:72:ed:40:ac:
cc:ed:6f:12:f4:1b:0a:73:cc:8d:02:46:ac:a4:25:81:4c:c8:
db:d4:26:31:28:e1:66:6b:63:48:09:06:b7:17:d9:e7:75:12:
9a:56:f5:e1:93:6f:4b:3c:fc:eb:0b:bd:a2:d4:1f:7d:0f:65:
9e:ea:a4:df:50:b5:13:d9:e0:e3:d7:d1:38:bb:68:d0:1a:09:
d3:c8:28:e8:3e:7c:12:41:c5:45:5a:b0:66:64:3a:94:1c:f0:
c8:71:81:74:2e:d0:d9:20:5c:71:26:f7:f7:30:28:a7:4c:17:
c9:9f:22:bc:41:14:29:c7:f6:ea:b9:6b:db:92:d0:49:a3:c4:
9b:bf:3d:b5:d2:9b:f3:15:64:ca:48:9a:e8:36:0b:aa:5b:3a:
8b:e5:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:19 2025 by rpki-client