Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: xieC0b8k4WYC500yRFVVdrv5r1zXzUDX6N77mwByw08=
Subject key identifier: 3A:99:93:6E:94:B9:79:A9:66:6A:77:CB:D9:5C:9A:64:F6:82:8F:3A
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 01984DE689703AB5EE6AEC1686E28A5069DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 10D0
Signing time: Sun 27 Jul 2025 22:00:10 +0000
Manifest this update: Sun 27 Jul 2025 22:00:10 +0000
Manifest next update: Mon 28 Jul 2025 22:00:10 +0000
Files and hashes: 1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: PMFUG0N/ZrYQW3xFp8ylJ45NvW4iTKH4xAUoMbcuOts=)
2: fhVodD3Al80st-44wh_3zJPa9hw.roa (hash: fjogseqmXaDswGCqZQtmESnsh5NfjXgWetNNokS6YuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:89:70:3a:b5:ee:6a:ec:16:86:e2:8a:50:69:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Jul 27 22:00:10 2025 GMT
Not After : Jul 28 22:00:10 2025 GMT
Subject: CN=3a99936e94b979a9666a77cbd95c9a64f6828f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:e9:29:15:1b:fc:16:19:e8:f4:3d:17:d6:
09:33:dc:10:97:21:dd:4a:c7:e8:34:b7:ad:85:79:
4d:b5:ab:7a:71:5f:d1:69:7b:4f:bd:0a:37:2b:af:
a3:ea:01:7f:25:9f:15:bd:6f:79:4a:89:27:ac:45:
ba:84:e0:4a:e3:ac:c5:5c:96:69:35:49:2c:87:b6:
3f:55:ec:7d:d8:09:8b:a5:8b:0d:a2:46:9a:18:31:
60:7d:02:68:f8:b6:de:e0:9a:47:9b:a4:c3:e5:1d:
71:0e:75:ef:0e:85:62:90:fd:13:c5:4e:af:49:a9:
a8:63:bc:4f:d9:20:44:20:f1:18:14:85:d6:c3:98:
ec:55:60:67:b3:cf:04:e4:92:ae:4b:ba:1c:c2:13:
c0:ef:09:a2:28:49:29:7e:74:84:01:dd:07:62:0f:
3d:db:73:7b:a5:04:13:7f:3a:24:32:05:f8:50:b0:
e0:36:5e:32:4d:ff:12:d6:e4:c0:6b:af:bc:9b:38:
71:73:b5:99:e1:ac:ae:55:43:3c:3c:43:8d:ad:08:
f5:c2:5f:53:4c:ea:19:40:ff:eb:49:c7:f2:5c:0f:
31:8b:38:f9:09:06:1b:09:46:aa:66:ae:9b:ff:32:
6d:14:e9:40:2a:6a:91:50:4c:f3:04:9d:f9:5b:70:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:93:6E:94:B9:79:A9:66:6A:77:CB:D9:5C:9A:64:F6:82:8F:3A
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:3f:9b:e0:47:54:31:51:d9:38:31:87:42:55:bb:2e:3a:
44:05:45:3e:9d:1c:00:ae:2c:05:17:d2:b5:35:38:65:1e:05:
05:1e:52:58:9a:91:5c:05:44:55:60:c0:f6:98:c5:b5:16:bb:
bc:64:d3:53:1d:cd:3d:25:e9:db:7d:e1:cb:db:c6:fc:6e:d6:
ac:08:d4:e5:28:40:ef:43:aa:cb:15:cc:6e:3d:74:b5:8a:8e:
73:e3:9e:b9:db:ba:aa:02:87:52:9f:c6:19:62:5a:c8:db:07:
14:d3:36:57:f0:dc:68:43:13:9e:91:d8:ac:a7:a7:89:26:54:
59:9f:5a:89:60:4c:78:a5:78:e6:c8:0d:2c:94:2c:73:c9:54:
d8:1f:6b:22:07:84:0d:ce:2c:7a:80:2b:29:1d:94:5e:82:50:
5f:31:ba:fe:94:2b:4e:19:6c:3b:06:87:3b:9d:55:3c:8d:79:
dd:16:90:f3:0c:95:cd:c7:2c:1b:eb:95:81:7f:41:bb:85:69:
22:e3:d2:24:02:d3:26:5d:38:ab:1d:f0:96:62:dc:c4:dd:d3:
fc:83:6e:a9:83:40:1e:cf:46:14:6c:d7:a3:d3:05:87:84:d4:
3e:3d:81:b2:56:d4:9b:cf:39:1a:c5:fb:c7:50:d5:e9:7e:bd:
34:70:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:23:14 2025 by rpki-client