Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
File: GKuuDh8hajIZc8zJxlN-xhl9qxg.mft (raw, json)
Hash identifier: zlteAf9aLI9M6BQhhmi+T9h45MFkeS77dvqH35vcuV4=
Subject key identifier: 37:52:76:EF:26:76:C2:E9:A7:DF:F0:7A:73:ED:19:99:91:31:3A:27
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 019848C06BEF52D3B7CF3BBD48EA9632B4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
Manifest number: 0DB1
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: GKuuDh8hajIZc8zJxlN-xhl9qxg.crl (hash: y+5HzJP+bwqR4ahJL/TUsejqfSpG7rIpBdAEGTpPlXw=)
2: UkbqnKEVQc19I4xiaGnllMIeIJM.roa (hash: +7BrsyTUNmPDpU5nT2WX5eEhmb2ft1eu3yDXg9IZfaQ=)
3: yPv21KR4O8eNyOEbMiFjKgHXJPE.roa (hash: nh6n6prnjR0qF3rMky/U2J4R3HUozhFWqJj9OsJoCp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6b:ef:52:d3:b7:cf:3b:bd:48:ea:96:32:b4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=375276ef2676c2e9a7dff07a73ed199991313a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:37:98:df:9e:a5:8a:9a:32:ed:6a:dd:d7:
dc:fd:0f:de:0b:7a:01:d8:af:c9:9a:b4:92:4b:ac:
9c:3b:6d:40:6f:11:42:60:2f:5b:41:4b:66:ed:c8:
cc:95:b0:c2:fe:56:7d:bd:58:90:7d:01:ca:87:3a:
1f:87:65:6e:d8:15:2f:b6:b0:b8:80:a6:7b:61:7c:
84:10:37:f2:f5:1c:a8:59:ee:53:8d:bb:67:16:3a:
c5:2a:6c:29:d0:7e:a8:3f:c0:78:49:9a:6d:ae:e4:
05:70:b1:77:58:64:98:93:3a:82:d9:5f:04:7f:7d:
c0:43:75:d2:f8:f2:28:84:71:e6:09:e8:4d:9f:9f:
05:2c:13:3d:cc:23:8f:2d:4b:a4:f5:be:50:bd:6d:
fd:68:34:3e:b8:7f:94:b8:95:48:7c:2e:ca:3b:92:
0e:0b:c4:e7:80:ca:33:05:51:57:ec:f9:47:1e:58:
ca:e0:f5:02:9d:9b:3b:d6:01:b0:62:cf:6f:67:ba:
02:d8:98:2a:38:e8:45:e6:c6:d2:b2:0e:4d:66:2f:
23:21:0b:6c:3f:48:8c:fd:b6:72:13:05:49:5e:35:
4e:80:91:1a:02:99:95:e9:2c:2c:9e:c6:e1:81:64:
3c:fe:9f:28:39:84:8a:8d:19:1c:03:a8:04:8f:a6:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:76:EF:26:76:C2:E9:A7:DF:F0:7A:73:ED:19:99:91:31:3A:27
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:59:13:0c:81:10:fe:c9:69:bf:45:86:af:6b:df:d5:86:
b9:44:76:85:63:31:d3:38:2b:5b:f4:83:0f:c2:1d:7c:75:86:
16:04:3f:2e:a3:94:c7:e0:a7:91:23:e6:ab:2c:f5:1d:02:41:
41:e8:c1:2e:38:49:f9:ff:a6:d3:ab:e2:93:be:1e:c8:b7:18:
71:13:65:15:60:02:8d:eb:67:50:a8:a7:a2:68:3c:c3:f6:a8:
87:8a:ea:62:0b:24:81:f4:9d:fb:04:f0:94:ea:11:95:ed:ef:
ca:14:49:cc:d9:3a:83:7b:73:48:8f:fd:ce:46:f0:17:23:ee:
58:70:d6:87:22:6e:1a:cd:4b:bf:98:45:86:63:b0:53:d2:ca:
7e:d8:5f:3e:bc:5a:c7:a3:22:ee:f6:f3:4e:34:c6:08:47:07:
84:6f:01:f5:ac:cd:a9:40:cc:06:fe:a3:6f:ed:6c:24:b1:0e:
38:02:e5:97:88:bc:dd:c7:32:77:4c:3e:f6:00:2c:ae:c9:de:
1e:cd:c7:b7:00:77:87:e9:e0:3d:ae:8f:ac:2b:8b:be:48:96:
1c:94:a9:24:4c:07:1a:e5:90:b1:76:63:f0:c6:cb:ea:2f:0c:
e1:36:97:45:05:30:06:d7:b7:a0:25:08:e3:4e:fc:be:4f:7f:
8d:35:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:15 2025 by rpki-client