Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: 05mxw20HExDkhMuauvsPYQZ01Z7iT9eGrInio7wJZ0U=
Subject key identifier: A1:8C:41:D6:11:4A:27:BB:F2:DA:41:0E:12:02:66:DD:FE:61:B9:8D
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 019856455A3FDF4193916A45D1A28EDBA358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 13:00:42 +0000
Manifest this update: Tue 29 Jul 2025 13:00:42 +0000
Manifest next update: Wed 30 Jul 2025 13:00:42 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: BpeDz4kgsHZAz0Uab22l2eLoDdidMjbLJ4Z5sa7xkhY=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:5a:3f:df:41:93:91:6a:45:d1:a2:8e:db:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jul 29 13:00:42 2025 GMT
Not After : Jul 30 13:00:42 2025 GMT
Subject: CN=a18c41d6114a27bbf2da410e120266ddfe61b98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:12:0b:48:c7:46:16:99:65:b6:df:13:53:
07:e5:1d:da:7c:2d:11:5c:68:73:6e:4b:78:69:2d:
0f:51:63:88:b4:e9:0f:c1:42:c9:8e:f6:92:20:1e:
3b:fd:fd:13:95:76:39:90:7e:63:67:b3:84:1a:1c:
fd:30:ef:87:6c:3b:6d:54:82:19:84:9e:d5:4d:26:
46:26:fd:ce:ec:cb:30:d5:27:34:96:27:be:22:04:
e6:db:c9:34:d1:13:f5:34:00:6c:35:df:8b:60:66:
f0:f8:59:e2:e8:01:c2:82:72:f0:df:bb:99:f9:05:
49:3b:f6:44:c1:2a:78:3a:cc:19:7d:5e:49:37:3e:
18:76:21:c4:7d:51:c2:59:70:0b:56:18:e4:6e:1b:
64:47:2f:d8:5a:7a:60:15:af:83:a2:47:e6:1d:53:
06:2a:4d:85:27:e8:9d:c4:4b:21:d4:da:4e:21:46:
e9:76:c1:02:e9:05:06:47:e6:88:04:ba:a0:1a:42:
55:d6:34:5f:bf:05:34:ca:24:21:0d:ed:b6:08:d8:
fe:39:2d:d1:5e:79:68:90:13:2a:41:df:6e:fa:d1:
04:21:72:32:ad:7c:aa:7d:9c:dc:fc:e0:6f:a5:07:
69:fb:ca:3b:ef:2c:02:db:d9:d1:b9:7d:5d:26:d7:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8C:41:D6:11:4A:27:BB:F2:DA:41:0E:12:02:66:DD:FE:61:B9:8D
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:03:72:c4:78:23:cb:13:4c:da:41:c0:03:ea:08:a2:2f:
63:a4:d3:6f:da:49:3e:b9:05:33:a7:fc:ac:ef:cd:a2:4a:1c:
de:b0:b5:4c:de:73:07:96:c5:be:22:eb:89:c4:4e:53:bf:bc:
de:1b:9f:24:d2:b1:a7:d3:cb:f3:47:da:1c:f1:d9:97:8c:e7:
6b:fb:c3:7b:96:53:8f:0d:ca:69:ef:1e:56:d8:aa:94:2b:4e:
ee:dd:d7:95:ee:29:00:70:c7:23:d7:21:2e:d2:51:d5:0a:c3:
84:02:6b:ee:98:e9:c2:1c:cc:72:86:aa:5f:58:cb:46:32:06:
ba:7a:07:a9:f6:08:74:77:38:aa:3e:82:82:1b:08:cd:a7:ab:
6f:56:e7:07:55:05:03:44:95:e2:5f:6d:32:0f:e3:b4:5b:db:
a1:58:12:d2:10:4e:a5:0e:f0:08:53:55:69:f5:b9:3a:6a:57:
69:ab:c0:8b:e7:de:4e:cd:06:14:14:65:10:54:59:81:5b:71:
91:b6:6c:e0:64:6d:3f:88:90:ba:01:e7:9f:ce:73:cf:a2:ca:
ae:fc:69:27:4f:ac:87:48:d0:06:e9:f4:d0:87:eb:c2:46:9d:
59:d8:f9:49:b5:be:73:59:6f:20:67:6e:76:23:4b:aa:cc:48:
c2:9d:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:02:17 2025 by rpki-client