Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: K3UqfWD+EKd01TtZRSA7bjD/FTdlTVJd/SUpoMg6FSw=
Subject key identifier: 4A:22:CE:2B:1C:85:0B:27:CB:7D:A7:0F:C9:14:59:E4:51:11:8E:C2
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 01984A40EDBD7CB5F40C2CB17EE7B1591717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:00:25 +0000
Manifest this update: Sun 27 Jul 2025 05:00:25 +0000
Manifest next update: Mon 28 Jul 2025 05:00:25 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: FMv4RIkud3XpgLd0vjmhMCdnIWIQoEuRlUbUUQNgZ/Q=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ed:bd:7c:b5:f4:0c:2c:b1:7e:e7:b1:59:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Jul 27 05:00:25 2025 GMT
Not After : Jul 28 05:00:25 2025 GMT
Subject: CN=4a22ce2b1c850b27cb7da70fc91459e451118ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:bd:9b:c0:7e:35:4b:e7:65:1d:53:3e:42:
15:b5:70:ee:8c:56:48:28:aa:fb:0c:fe:71:e0:50:
ef:d8:d5:cf:08:7f:91:17:f9:41:64:3e:18:63:21:
84:ee:63:3c:60:51:a3:1b:d4:26:b5:ab:7e:17:0b:
c0:94:1a:e7:06:af:98:fb:2a:e0:d4:8f:9a:3e:d7:
ae:39:68:36:ea:d1:f0:df:33:52:1f:fb:95:4d:63:
2f:2f:d8:a7:54:86:80:ae:df:04:41:e5:8f:fd:81:
58:bd:3e:bd:98:4e:32:67:50:f9:fc:b0:4f:9f:a6:
67:aa:48:cb:01:10:2c:9e:43:1d:6a:6f:de:c3:1d:
31:0a:83:f9:cb:1f:2c:8e:18:c9:ae:bd:7e:4f:14:
4b:e6:71:94:c8:0e:a9:d9:a8:8d:e7:c6:53:95:f7:
e5:96:63:54:e4:d3:37:47:d8:61:82:bd:c8:fd:a1:
12:46:94:2e:e6:37:b1:f6:d0:f4:19:4d:1d:e0:57:
07:23:1f:77:3f:d0:9b:1e:fb:08:a6:97:6b:9b:e5:
c6:bc:d1:65:1d:22:cf:91:dc:60:8a:f8:50:51:94:
a8:f5:4e:12:9d:b5:17:3d:6f:6f:3f:1f:01:dd:90:
51:36:a3:3f:f8:24:43:e7:7d:85:51:fa:e0:78:41:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:CE:2B:1C:85:0B:27:CB:7D:A7:0F:C9:14:59:E4:51:11:8E:C2
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e0:9c:f9:60:a6:94:74:6e:18:bb:17:58:ab:90:be:7b:bc:
69:a1:7c:cb:01:a1:55:6c:80:91:ef:62:e1:5c:ca:11:b5:28:
de:87:f3:35:d7:50:b1:70:2f:a9:2d:be:b2:be:a3:a6:17:79:
60:6d:05:19:78:2e:e0:95:35:4a:be:15:8c:21:04:04:da:6b:
9c:62:54:ba:72:c5:82:45:93:74:6d:af:b0:c0:ed:06:a9:95:
af:25:ec:13:01:e8:95:df:0c:ee:56:6c:b3:33:fe:0b:50:bc:
f5:0f:08:5a:6a:64:ae:48:7f:91:ac:5e:77:f5:ad:10:ba:d8:
36:39:d6:2f:54:fb:41:21:65:63:51:3e:0d:c3:36:3f:07:f2:
3f:d2:bc:e5:85:87:94:f3:e2:13:75:11:66:91:2b:f3:57:e4:
ae:5b:0c:1d:9f:78:b8:a4:68:6a:b9:b6:31:73:c9:65:3c:d7:
37:2e:88:3b:54:6f:ed:18:80:16:c2:5d:69:f8:51:be:a3:08:
eb:03:27:b1:5d:09:ae:be:b1:fd:14:83:56:e0:8b:69:96:8c:
32:62:7a:2b:7f:39:b6:58:74:39:45:89:2f:f6:c7:48:2e:86:
41:e2:ad:38:5e:60:62:df:dc:5c:48:4d:f3:06:f4:c8:5f:6d:
d4:40:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:44 2025 by rpki-client