Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
File: GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft (raw, json)
Hash identifier: WJ9ZJcvBcQ2q+NDlfBuK97HrIdWLfJqtrfwlWrLV178=
Subject key identifier: C9:98:0D:2D:0A:10:FB:1A:63:B6:76:55:C8:A3:8C:62:BD:1E:48:7C
Authority key identifier: 19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
Certificate issuer: /CN=19337ca56de7c3b977875369ecde53852515746f
Certificate serial: 019844E35C3C0648C13EAEF996A2EC5934D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
Manifest number: 114E
Signing time: Sat 26 Jul 2025 04:00:07 +0000
Manifest this update: Sat 26 Jul 2025 04:00:07 +0000
Manifest next update: Sun 27 Jul 2025 04:00:07 +0000
Files and hashes: 1: GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl (hash: WNmdjd/1ygezHI4KvWcsToUk5PCEsvVYz35DvwNms9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:5c:3c:06:48:c1:3e:ae:f9:96:a2:ec:59:34:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19337ca56de7c3b977875369ecde53852515746f
Validity
Not Before: Jul 26 04:00:07 2025 GMT
Not After : Jul 27 04:00:07 2025 GMT
Subject: CN=c9980d2d0a10fb1a63b67655c8a38c62bd1e487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:f0:21:bb:74:76:b7:f6:a7:8d:83:cb:f1:
ca:9c:f1:f6:a0:a4:41:0b:87:0c:b9:84:03:3d:3b:
95:5d:73:60:b8:64:7a:0d:ab:aa:a1:a6:74:6e:ea:
e7:97:32:d2:5f:11:15:f2:f1:04:98:58:99:b9:bd:
25:8a:89:98:70:2f:97:e6:fc:47:06:ca:87:20:9d:
18:74:20:7c:35:15:82:68:b2:f8:59:5a:97:bc:45:
e9:4e:e5:3a:df:5f:21:cc:3c:e5:20:d6:74:f6:b1:
d5:07:92:77:c4:77:42:0a:02:aa:85:68:a5:1d:c5:
73:2d:ca:19:25:46:25:92:47:52:c4:50:3b:12:7f:
56:ae:1e:c5:00:0d:b9:92:b7:cf:2e:05:d4:75:6c:
04:88:fd:66:e5:bc:c9:e8:29:f5:35:c9:6e:de:fd:
06:92:28:36:fa:4b:6b:c4:74:2d:f2:b3:d0:15:72:
dd:a4:e3:33:08:a4:4c:62:97:23:71:4a:48:9b:9f:
81:d1:54:22:d7:67:c2:9c:b7:fc:62:9a:9a:8d:13:
72:06:68:4b:3b:98:f6:45:cf:09:7f:a0:2d:16:ef:
ef:f8:98:36:06:28:57:a6:bd:e3:08:f6:dc:63:1d:
d8:e4:0e:89:eb:de:bc:34:32:83:43:dc:49:36:d2:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:0D:2D:0A:10:FB:1A:63:B6:76:55:C8:A3:8C:62:BD:1E:48:7C
X509v3 Authority Key Identifier:
keyid:19:33:7C:A5:6D:E7:C3:B9:77:87:53:69:EC:DE:53:85:25:15:74:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTN8pW3nw7l3h1Np7N5ThSUVdG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b8d833-f396-4b1f-a0e3-56b8811e4926/1/GTN8pW3nw7l3h1Np7N5ThSUVdG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dd:db:ce:43:2a:33:e6:26:bb:88:17:aa:45:37:05:be:75:
88:4b:88:fb:97:75:0e:26:99:10:18:87:69:5e:08:14:87:96:
54:59:46:83:92:73:e7:99:56:0c:4c:15:5b:a5:55:7f:33:40:
29:aa:c2:8a:ee:02:88:b2:ff:5a:5e:a4:d5:bc:eb:70:82:b2:
74:61:e1:9c:0d:51:02:c9:bf:4c:3c:a6:95:d0:b1:77:e7:d9:
90:9a:d0:5c:d8:f3:c3:b1:6e:16:a7:51:73:aa:c3:f4:60:38:
9b:d2:18:3e:79:51:4a:cd:0a:18:cf:c9:5a:b0:63:30:0a:e9:
04:11:dd:3f:d7:0b:47:72:79:fa:b8:06:32:5e:3e:76:8f:5d:
2b:60:5a:20:9f:10:d1:23:e9:41:c1:f3:cc:40:8b:d0:eb:56:
00:b0:b8:4b:f8:7f:c3:d8:13:62:1b:11:46:9e:a5:ee:e5:3c:
b3:58:e5:01:91:3c:d9:9a:c1:22:c0:46:f4:86:b1:d7:e5:bd:
e5:2f:91:30:d7:12:cb:66:91:12:27:34:96:7b:46:08:7d:f3:
e6:78:d9:48:0d:10:1a:bb:dc:1e:ce:3a:b2:c1:27:0b:9e:9a:
57:5c:24:c1:86:62:02:02:57:ba:da:f7:aa:ab:bd:9e:3f:43:
fc:73:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:45 2025 by rpki-client