Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: 24rGiVMnjGS4fs50lK6Vx4Bp3Y4wfTJ4g4K9pwy6PXw=
Subject key identifier: 25:78:25:F0:F1:35:2B:62:0C:19:8D:74:1C:E2:B1:5E:25:6C:1F:B5
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 01984B5375A5D4B15C4B4E95C68B61CB3BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 0F24
Signing time: Sun 27 Jul 2025 10:00:17 +0000
Manifest this update: Sun 27 Jul 2025 10:00:17 +0000
Manifest next update: Mon 28 Jul 2025 10:00:17 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: 5P/jlr8e7voqQpzaeuvHioSL5gaFioN2lNL2lxtwAeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:75:a5:d4:b1:5c:4b:4e:95:c6:8b:61:cb:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Jul 27 10:00:17 2025 GMT
Not After : Jul 28 10:00:17 2025 GMT
Subject: CN=257825f0f1352b620c198d741ce2b15e256c1fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:93:d5:10:eb:4c:c3:b4:5e:74:1d:0f:b9:
74:eb:30:bd:9d:68:0e:03:ea:80:67:97:d7:78:6d:
2e:a0:f5:52:a7:1f:58:9b:94:eb:be:c5:e3:26:13:
22:79:c3:62:7d:7b:77:a7:31:34:41:0c:d2:79:e3:
f8:9f:2c:e1:c1:6b:75:c8:22:c2:a1:0d:cf:3f:34:
1e:21:ef:b8:79:e4:86:83:6a:91:08:90:cf:ab:5e:
5d:64:e5:7a:52:ba:dd:46:6d:d7:52:a5:38:dc:f2:
e6:4f:99:9f:ac:3c:1a:51:99:45:1c:44:6d:d9:3d:
fb:f0:00:00:0b:b9:81:e6:77:eb:6f:67:63:4b:87:
e2:0e:fe:bc:da:19:73:f7:f2:5d:91:8b:6f:9a:4a:
39:99:4e:b4:bb:1d:d7:68:97:5a:91:1f:98:fa:ab:
4e:10:80:1c:89:47:db:00:81:08:16:d8:16:d5:5a:
da:da:56:80:f1:cd:5d:81:32:ae:b2:4c:b8:d8:15:
a5:3c:33:61:e4:2c:d9:0c:8f:68:10:ee:a1:6e:9d:
22:78:78:e5:0c:40:70:a3:1a:38:05:a0:bd:e7:61:
85:e3:cd:a1:44:d4:b8:9d:aa:b1:e3:89:1b:bf:19:
4b:78:c3:34:47:eb:b5:ee:fb:e0:58:87:9c:b9:31:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:25:F0:F1:35:2B:62:0C:19:8D:74:1C:E2:B1:5E:25:6C:1F:B5
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1c:80:48:f3:08:6e:3c:a1:07:4a:85:7b:d8:cc:c9:8f:23:
78:38:ff:fb:b8:59:86:a1:04:64:bb:44:50:fd:45:f7:55:25:
76:f7:b0:4a:2e:99:28:ef:6f:99:17:09:13:f6:c9:72:a6:96:
28:0c:29:e0:22:8e:0a:31:87:30:3c:32:ee:67:b1:87:e5:ce:
df:7c:6b:98:62:84:19:23:1e:da:fe:e3:f6:64:8b:40:49:6f:
cf:a3:e3:14:62:98:fc:c8:a9:55:3d:fc:f9:40:2e:0c:39:2d:
c3:a1:65:69:5c:b4:66:a7:20:64:ab:54:c8:2b:e7:b3:c7:1e:
b0:c2:4e:25:9b:6e:56:dc:17:68:f2:97:f4:f3:c1:04:a8:10:
f9:8d:32:ba:5a:d7:ea:8c:b3:1f:cd:33:56:00:47:07:9e:dc:
f2:bc:0c:8f:6c:8c:b0:b9:fa:44:19:2b:3f:07:37:5c:12:cc:
a3:91:52:29:02:1a:b1:95:6e:69:9d:dc:1a:78:b9:18:f7:02:
a3:a3:c0:f7:72:c4:49:39:1c:78:05:8d:16:5c:d6:f8:18:ae:
f6:32:fb:57:10:02:84:29:70:f7:23:ae:ad:be:64:d4:51:75:
8b:3a:ea:92:0f:69:8d:dd:c9:4a:53:d9:7e:a6:9c:d3:9d:89:
3c:bd:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:07 2025 by rpki-client