Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: NzEUcuyrBaXURcrrcqiyiujlz8Mv7+EecSYWMux3Rqc=
Subject key identifier: 66:DD:A7:27:05:3E:40:43:00:16:7C:E0:EA:51:0B:94:80:FB:66:A2
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0198488937C542266197EB38B583462FAB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 21:00:08 +0000
Manifest this update: Sat 26 Jul 2025 21:00:08 +0000
Manifest next update: Sun 27 Jul 2025 21:00:08 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: HjVQj610Tx7Tsx8P13SxglCp2jxbqankEGhOb9MRVBw=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:37:c5:42:26:61:97:eb:38:b5:83:46:2f:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jul 26 21:00:08 2025 GMT
Not After : Jul 27 21:00:08 2025 GMT
Subject: CN=66dda727053e404300167ce0ea510b9480fb66a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:5c:ca:97:84:03:88:ff:a0:35:60:b6:c6:
ab:45:66:5e:03:ce:9b:84:22:0b:38:57:f3:8f:d3:
1c:6a:40:b4:d7:eb:57:11:79:9c:f9:8c:f3:18:2e:
ce:b4:28:41:bf:73:1a:82:bb:3f:5a:7e:24:93:db:
67:80:28:f4:7a:d9:82:2d:5c:af:70:0d:33:cc:90:
b2:fb:53:67:0a:aa:4c:5a:91:39:bc:d0:22:55:be:
8c:ef:23:55:46:7c:fc:8f:41:e7:34:e2:0a:17:3a:
f8:5c:51:a2:d7:c6:dc:b0:db:86:b8:7a:f9:a6:d4:
96:24:3d:70:ff:c7:fa:38:89:de:ba:14:5d:ad:fb:
23:c3:54:bb:31:0d:95:b3:55:ce:98:4d:8c:12:33:
fd:fe:e3:e2:69:7e:ff:ba:a4:96:de:7a:95:68:04:
ae:ff:cf:df:02:7a:52:31:ec:03:95:7a:7a:25:62:
df:d8:4e:f4:f6:40:7a:bf:5d:0f:19:3d:f1:50:96:
e3:d4:f4:23:11:d9:86:1a:b8:97:e1:c9:88:bd:2e:
8b:b1:df:73:4f:41:e8:a9:06:72:73:7d:7b:24:dd:
e3:99:2c:05:43:01:55:86:3b:55:74:6e:5f:34:e9:
2d:09:0e:43:66:a5:44:1b:c5:fa:59:46:a2:a3:7e:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:A7:27:05:3E:40:43:00:16:7C:E0:EA:51:0B:94:80:FB:66:A2
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:1e:4a:f2:62:1d:e3:9d:45:9c:a2:d1:94:a1:96:96:d9:
67:ef:75:75:84:a6:00:77:75:13:b5:76:45:18:f1:0d:6c:53:
77:bc:4e:25:34:7e:3d:1c:86:39:9d:28:67:56:b5:90:44:8a:
d1:14:15:45:f2:e5:9c:14:ef:a4:7d:41:3e:40:eb:43:4d:cb:
9d:75:fa:2c:13:21:7d:ee:31:b0:20:16:ce:51:d4:05:66:dd:
ff:78:51:be:1b:86:ae:28:94:2a:25:a6:63:db:34:f7:1e:5d:
7e:c8:03:02:14:82:1f:ef:71:6d:50:48:55:13:9b:31:58:2e:
bb:66:65:6f:d2:6c:32:eb:c7:8c:fc:5e:84:e4:de:a1:16:8c:
b3:99:b2:45:65:b2:e3:a5:13:5e:b6:ca:f9:79:fa:73:38:1c:
e6:f9:3e:70:d6:87:26:8a:c4:1c:22:83:0f:29:4f:35:ff:47:
5b:cd:f7:51:35:3a:88:2d:4e:d8:8b:51:ab:61:d8:9e:01:7b:
52:f5:c0:9f:28:d1:4d:32:3d:a5:0a:a0:16:7c:f1:3f:f7:c8:
9f:6b:4c:a4:4e:b5:bf:8a:76:ba:f4:dd:9e:f3:8c:19:69:ea:
32:a4:af:2d:63:78:ba:ac:ed:d0:ae:da:3e:8b:b4:a2:d0:74:
f3:a3:ee:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:39 2025 by rpki-client