Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File: GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier: PoykRK+tmO6OON7ncmCLB3MLEQErYfdt8459eClaTPs=
Subject key identifier: A2:D1:1D:4B:4C:2F:D2:35:B2:69:CF:DA:F0:D1:13:EA:28:17:DA:DB
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial: 0198383A9AD689F06B0FDDA67633A4DA6C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number: 15FA
Signing time: Wed 23 Jul 2025 17:00:21 +0000
Manifest this update: Wed 23 Jul 2025 17:00:21 +0000
Manifest next update: Thu 24 Jul 2025 17:00:21 +0000
Files and hashes: 1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: mEtePnmDihuwjBJ456i2GzcmBhy3+mdiWWSuxz2F1vk=)
2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:9a:d6:89:f0:6b:0f:dd:a6:76:33:a4:da:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
Validity
Not Before: Jul 23 17:00:21 2025 GMT
Not After : Jul 24 17:00:21 2025 GMT
Subject: CN=a2d11d4b4c2fd235b269cfdaf0d113ea2817dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:77:98:67:32:d7:cd:5d:0d:89:80:f1:8a:
83:65:1c:7e:fa:06:aa:dc:88:8f:01:b1:33:93:b1:
97:c0:4f:54:79:31:2f:93:58:71:96:b3:e2:2b:1e:
4c:d1:19:32:3b:d0:52:21:d9:0a:36:ae:08:32:44:
a7:9b:08:86:26:5d:f1:8d:db:b2:ce:ef:ef:0a:a6:
93:0b:28:4a:8d:f4:f0:7c:38:0b:01:23:c0:98:2c:
ce:b0:89:0f:36:9d:10:22:82:82:69:fb:fa:97:2a:
d9:1b:c7:36:b2:80:e8:5f:3e:3f:41:90:df:1d:8d:
29:e7:dc:90:ce:e6:18:33:f5:77:a2:4e:79:a8:0f:
1d:bf:9c:2c:57:0b:10:8c:c8:dd:c4:a6:8c:e7:dc:
56:d1:8e:a7:30:94:d8:5d:3d:aa:27:96:84:a7:1e:
c8:53:ff:48:c3:90:43:c1:f3:98:48:a1:46:e1:02:
12:52:06:06:7d:50:34:7a:e9:29:b2:d1:cf:4d:33:
76:af:46:69:9e:d6:2b:35:20:b2:e8:03:ce:a9:6b:
f6:a4:c7:bf:11:9f:56:9e:2a:d2:0a:98:22:ab:68:
d8:18:77:b4:49:53:df:c9:dc:f8:98:42:9d:34:a4:
94:28:ed:c0:e3:ea:d8:52:d5:d4:78:07:87:a2:20:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D1:1D:4B:4C:2F:D2:35:B2:69:CF:DA:F0:D1:13:EA:28:17:DA:DB
X509v3 Authority Key Identifier:
keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:47:b9:ec:f3:99:7f:f5:da:51:11:5a:85:65:18:1c:9a:
47:6b:0e:89:54:bb:67:59:97:61:ec:f0:99:f0:e3:4e:3b:20:
38:53:c8:c7:53:48:72:fd:98:fa:b5:0b:41:a0:f1:21:23:3c:
31:8e:8b:8f:66:01:68:24:30:c0:13:88:1a:d9:8e:d5:12:d0:
81:82:3a:e1:9e:f0:f2:d2:94:b9:6d:cb:11:df:7a:6b:0e:9a:
45:f0:be:e2:42:96:0e:f3:8f:b4:cd:f9:4e:60:5a:1c:63:fd:
1e:5c:de:30:1d:4c:5e:0d:ec:e7:e3:b5:b5:b9:13:c1:40:ce:
40:f4:cf:02:a8:47:e9:75:7d:04:da:53:c1:38:71:8e:9b:fb:
c6:48:31:f7:79:30:9a:f8:07:9a:0f:f5:4f:a9:59:19:af:7d:
15:08:fc:59:d3:ec:ef:f7:d7:63:48:a8:1b:d5:1e:7f:f2:6e:
49:a6:91:cf:d3:59:70:17:a0:46:cd:20:fc:df:0a:36:2b:63:
9b:ad:bf:2c:2c:c0:5b:e5:56:a3:07:91:5d:58:47:dc:80:86:
54:25:00:3a:7b:fb:e5:4f:dd:2b:ac:d9:76:4d:75:a9:e3:97:
92:15:57:b5:5e:f9:0d:84:4f:f4:54:7f:a6:9a:ec:30:91:6b:
39:20:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:46:19 2025 by rpki-client