Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: 32hkpCQRrdLDUfk4wRG/B1tS/MmTfWOfvoPySZt9c5Y=
Subject key identifier: 14:3C:E8:31:BD:2E:DD:65:F9:5F:45:CF:B3:BF:BF:79:66:0E:1B:A4
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 019853E8996D5A7C7ECAF59D8B7687DB2851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 02:00:09 +0000
Manifest this update: Tue 29 Jul 2025 02:00:09 +0000
Manifest next update: Wed 30 Jul 2025 02:00:09 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: ft9dw9kJXY8eCcLEJC2eetA3mesi9s9E6uFr2pRVVx0=)
2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:99:6d:5a:7c:7e:ca:f5:9d:8b:76:87:db:28:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Jul 29 02:00:09 2025 GMT
Not After : Jul 30 02:00:09 2025 GMT
Subject: CN=143ce831bd2edd65f95f45cfb3bfbf79660e1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:c0:29:58:c8:01:46:5e:56:59:42:b5:16:
0a:85:5b:26:3f:0e:77:a8:98:2e:38:21:e1:70:29:
73:ea:dd:36:a8:94:89:19:f4:06:0d:36:75:b3:49:
69:c8:70:ce:7b:6e:6b:26:ec:96:09:ef:99:e7:76:
69:2c:73:60:a7:95:2b:b5:ab:f5:47:2e:0d:f0:de:
42:79:97:6c:56:9a:84:ec:11:7b:b9:8f:b7:51:2b:
78:7d:a6:02:c4:36:6a:de:7f:31:5c:06:4f:f2:84:
61:a6:75:47:f7:b9:6f:bc:f0:79:2b:26:12:cd:d8:
1a:c1:77:69:74:7a:16:ca:d6:de:e6:bc:0e:fb:e0:
54:dd:e5:7c:90:0e:53:af:2e:25:e0:0c:44:e2:ae:
03:a0:93:98:89:de:e0:88:e1:a4:b2:d0:15:66:28:
48:9b:e5:32:84:a6:66:00:db:78:80:e6:92:e3:2d:
ba:7c:51:3e:60:03:d0:4c:ad:2a:42:17:95:27:fe:
76:5d:76:15:50:f4:aa:d9:7d:0b:5e:e7:b8:34:1a:
46:d9:b3:f1:7e:4c:a7:bb:a3:1d:e8:a2:f2:21:67:
29:9c:8e:d3:95:0b:e3:68:c2:72:e5:5e:6f:7c:d3:
23:49:70:f9:86:51:a3:83:23:3c:8e:b6:d2:63:10:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:E8:31:BD:2E:DD:65:F9:5F:45:CF:B3:BF:BF:79:66:0E:1B:A4
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fd:78:a5:00:a8:ac:f8:08:a7:62:88:e6:7a:a0:07:4e:37:
30:69:75:40:31:c6:ab:4e:34:b3:dc:fd:7b:de:a7:38:c1:96:
2c:2e:15:b5:52:fa:35:21:64:17:08:38:b3:3e:50:28:2d:93:
b9:53:33:f0:8a:45:0a:16:77:fb:f5:78:8f:8c:4c:27:da:f0:
93:cd:5a:72:3f:d5:b2:8e:6a:40:4d:ee:1b:ce:cd:f6:1c:5f:
a9:8f:f8:03:31:89:39:68:32:27:ba:fa:a2:06:cc:63:a7:cb:
61:64:e2:54:85:20:78:8a:dc:1d:4f:ea:51:08:2f:d3:dd:5b:
01:3c:69:e1:0f:a9:34:f5:f4:26:47:c9:19:2b:ee:8a:2d:4b:
2a:bf:38:b8:68:d6:d0:1c:6a:46:24:9a:e3:e4:b1:81:b4:cb:
3d:db:ad:f4:55:05:6e:de:74:fa:03:86:ec:cf:79:b5:d8:d0:
f2:fa:2c:76:20:0d:86:df:c4:98:91:18:d0:24:11:68:ec:f8:
ff:37:7c:37:3e:55:70:0a:9f:b4:01:67:1a:cb:c6:60:03:86:
0e:e1:f2:70:0c:ba:00:c1:77:3e:cb:9e:c0:0e:94:39:7c:18:
c3:ac:cf:ff:f9:5a:03:0e:07:fa:13:f9:53:bc:9e:e9:60:60:
b8:1e:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:22:49 2025 by rpki-client