Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
File: GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft (raw, json)
Hash identifier: x2imi6T2JSFgcN6hXYWsjekipRDY5ASodVRGpaFoB7o=
Subject key identifier: 22:9C:8E:DE:43:F2:71:BF:E4:1C:1B:D4:38:F4:50:68:B5:4A:FC:D3
Authority key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
Certificate issuer: /CN=1a66819ed62a71090cf437e4263012d4c035067d
Certificate serial: 019849D2ED3C2D8266D808DA1CE83A888575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 03:00:16 +0000
Manifest this update: Sun 27 Jul 2025 03:00:16 +0000
Manifest next update: Mon 28 Jul 2025 03:00:16 +0000
Files and hashes: 1: GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl (hash: Qpn7E6fNlBkEUUTssv1ixt00QN3/xaWme1MxgLqB2Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ed:3c:2d:82:66:d8:08:da:1c:e8:3a:88:85:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a66819ed62a71090cf437e4263012d4c035067d
Validity
Not Before: Jul 27 03:00:16 2025 GMT
Not After : Jul 28 03:00:16 2025 GMT
Subject: CN=229c8ede43f271bfe41c1bd438f45068b54afcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:1c:eb:ae:17:49:13:3a:f4:25:fc:0c:5a:
fb:76:ce:6e:c9:fd:fa:18:ff:4c:92:54:5f:cb:61:
02:f5:26:64:24:80:fa:46:76:65:be:93:47:d1:b3:
f3:ac:94:26:4a:89:ba:20:e0:26:d6:ef:e2:ec:17:
ed:6d:b6:c0:2d:3b:7a:b0:2d:92:f3:39:6f:ae:93:
c6:86:1a:84:5c:a2:b7:1a:9a:b1:08:20:3d:77:63:
46:0d:4f:ee:a7:70:d0:b2:f0:db:3b:c5:03:93:6a:
29:7c:52:c5:5b:ba:06:1f:f7:8b:d8:93:46:6b:02:
f4:80:50:41:f8:25:fb:aa:da:99:d9:0c:b0:08:16:
f9:0e:e0:d8:f1:2f:24:ff:42:c6:06:55:8b:3e:bd:
2f:46:07:93:22:86:0e:eb:82:00:7d:d6:f6:7a:a4:
54:3c:78:05:0f:86:bf:ee:df:18:3f:f4:64:d3:55:
94:e7:c1:28:ad:4f:86:65:d0:17:8a:d2:83:07:b3:
e2:47:68:1b:bd:f7:f8:3d:0b:df:6a:2b:73:9c:9d:
f8:9b:df:56:6f:c6:45:db:d4:1d:5a:7b:7e:6a:54:
89:5c:f8:b7:cf:1f:af:19:78:85:42:68:d6:72:22:
51:4e:43:3c:c0:72:51:51:cd:4d:94:80:d6:11:eb:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:8E:DE:43:F2:71:BF:E4:1C:1B:D4:38:F4:50:68:B5:4A:FC:D3
X509v3 Authority Key Identifier:
keyid:1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:e9:f0:d7:fe:a8:42:b6:68:50:8c:dd:6d:72:58:03:98:
83:81:80:8c:0e:d5:ca:54:b1:40:1b:e0:50:0f:9e:8e:c0:73:
6d:2d:92:ee:d6:af:61:28:8a:fd:80:11:91:0d:e7:06:51:83:
49:58:52:0f:2f:e6:75:8f:df:c3:55:f1:da:45:96:ed:95:a6:
89:c5:7e:a3:1e:62:8c:9f:6d:84:45:78:aa:32:8b:9a:6c:4d:
27:fb:59:e1:0b:21:a4:ed:a8:6a:c6:ae:24:9e:31:b6:10:43:
6a:e5:04:9b:98:6d:1d:4e:19:cd:92:7e:74:16:34:82:28:ed:
64:0b:79:c3:e5:7f:39:13:a0:6d:54:1d:49:e7:1a:c7:73:d6:
50:09:6b:4e:50:3c:55:73:ee:86:c9:82:82:a6:4a:64:93:d2:
7b:91:2b:aa:ea:68:d9:8a:08:70:57:62:a9:79:cf:70:96:87:
d4:dd:a9:fa:29:dc:63:c7:28:8d:51:7e:ee:74:db:27:3e:9f:
be:6b:0e:40:ee:e8:6f:f6:99:d8:04:55:3d:4e:b4:9a:78:d2:
57:93:26:3d:8c:0c:1c:5f:23:02:fd:e7:f4:49:40:31:5d:d5:
31:79:ba:06:94:d9:28:b4:35:4f:ab:65:42:34:ff:f0:11:bb:
a9:d1:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:18:28 2025 by rpki-client