Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: MrJ261b45WFJQnQIHjBllLi4tJbJXiEWxXU+wDxyzfw=
Subject key identifier: 92:A7:A3:13:05:B5:00:3E:05:9B:B4:27:00:F5:0C:BB:3D:B0:70:50
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 019853B258EF3F88F362C15B95AB8AEF0CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 1598
Signing time: Tue 29 Jul 2025 01:00:53 +0000
Manifest this update: Tue 29 Jul 2025 01:00:53 +0000
Manifest next update: Wed 30 Jul 2025 01:00:53 +0000
Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: x6+5Jt2L6O0SDDyt8Wi3IHJrywUuDSUBMkl7GarrbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:58:ef:3f:88:f3:62:c1:5b:95:ab:8a:ef:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Jul 29 01:00:53 2025 GMT
Not After : Jul 30 01:00:53 2025 GMT
Subject: CN=92a7a31305b5003e059bb42700f50cbb3db07050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:1a:29:04:a8:06:7e:fd:03:f7:5c:94:7a:
29:ef:e9:0f:34:41:08:34:49:79:85:d8:7a:09:b8:
e7:b1:fd:6a:e1:c3:c6:e4:63:13:72:7c:6f:04:44:
a7:d6:71:56:39:03:fd:ed:75:c3:59:5f:f4:22:e2:
0d:ff:74:7f:e4:46:4a:2e:76:cc:6c:5c:46:f2:a3:
52:9b:3c:3c:0a:8a:9e:12:49:74:11:69:c0:3e:22:
3b:2d:66:ae:59:b2:9b:88:79:30:7c:fd:95:15:7c:
26:89:fd:42:e5:e0:9d:fd:2c:e5:59:6f:3b:e8:a2:
14:a9:46:6f:db:be:9f:2c:10:0c:bb:7e:3d:54:2d:
d1:fb:c4:35:39:6d:32:7f:c5:07:70:29:6a:f8:37:
41:3b:55:5b:4f:79:89:be:19:73:82:dd:dd:42:2a:
cb:ea:95:19:35:f6:56:60:b0:e8:66:dc:2c:3a:aa:
14:66:78:bb:dc:0c:aa:5e:8a:6d:2d:2a:da:ab:a2:
57:c7:0d:2a:c7:3c:f1:35:9e:b8:01:95:ea:81:e3:
c9:eb:4d:03:da:b7:a1:88:59:d7:b6:a4:fa:b0:8f:
55:2c:8b:5d:40:0a:25:c1:bf:23:d2:2b:c4:ba:29:
21:51:bc:f2:e8:6c:df:a5:fa:73:05:66:43:c6:e7:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:A3:13:05:B5:00:3E:05:9B:B4:27:00:F5:0C:BB:3D:B0:70:50
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:5e:4c:c0:93:45:39:34:01:4f:de:b8:d0:84:78:6c:01:
0c:a8:0a:37:84:87:57:0e:53:37:21:76:57:c3:fc:49:62:9b:
8b:d8:83:78:73:75:94:6f:3b:1b:9f:3d:b6:1a:3a:54:07:b4:
b7:81:53:9f:9f:34:41:cd:b8:7b:5e:9f:19:32:b9:1b:5d:40:
23:37:b7:04:40:9b:d1:2e:03:a1:85:5f:95:e6:a8:93:20:a4:
43:dc:99:19:5a:3b:87:7b:db:fd:74:f8:43:3b:7a:1a:d0:ad:
38:7a:45:03:78:8f:e3:5c:7b:46:58:b8:b5:96:9d:d3:4e:34:
48:02:83:c7:11:af:25:24:d9:bc:85:67:3d:30:82:1b:b8:8e:
bd:cc:a3:66:8d:2a:17:bd:8c:76:61:65:52:86:d4:27:85:5a:
bd:c6:a2:68:16:f8:fa:80:a8:fb:bd:7d:9c:af:95:73:06:66:
dd:c2:72:c6:aa:2c:68:a5:ad:d8:21:94:a0:cc:26:aa:da:53:
4d:7a:3d:48:f8:07:8f:76:7b:5e:30:83:93:41:47:80:7a:10:
d0:db:47:a0:a8:9a:12:85:81:bb:7b:19:1b:c0:9e:62:fd:ed:
26:f1:01:9b:46:46:f2:1d:b8:d0:ae:22:d4:84:82:70:d8:0d:
91:df:a1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:05:03 2025 by rpki-client