Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File: GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier: JBSQ46Lh+Ke96L30DEXL3azBPy+2/pxOzTG44J/P7Oc=
Subject key identifier: 3F:95:43:75:92:E5:E7:D3:5E:13:37:D0:3E:BC:ED:B1:19:E2:5B:29
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer: /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial: 0199221EC1D8EA084DFA68BFE18197D45A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number: 6C
Signing time: Sun 07 Sep 2025 03:01:05 +0000
Manifest this update: Sun 07 Sep 2025 03:01:05 +0000
Manifest next update: Mon 08 Sep 2025 03:01:05 +0000
Files and hashes: 1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: B7WGxQDGRvgxPqn18OyMgcO9F9lbIuhty01DT9jfdQs=)
2: XD5kSDYeMfY8LIHhbfnJvruSBPc.roa (hash: 7oUWV+LyugwjeCoSmfoHPMTejsb+0njHiDkg9kgwwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c1:d8:ea:08:4d:fa:68:bf:e1:81:97:d4:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Validity
Not Before: Sep 7 03:01:05 2025 GMT
Not After : Sep 8 03:01:05 2025 GMT
Subject: CN=3f95437592e5e7d35e1337d03ebcedb119e25b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:c9:6c:da:91:1e:99:ed:cf:ec:66:b9:1d:
2f:d8:bd:48:55:cb:86:f1:59:10:ec:6a:b3:6d:85:
89:a9:68:e1:24:33:1d:96:ec:79:34:24:bd:22:e8:
bc:8d:07:17:b2:31:48:65:e9:77:ba:f2:2b:13:c7:
00:32:97:89:23:12:3e:f1:1c:f8:5f:b2:1b:3c:72:
e3:d7:ad:bc:e0:5f:b1:ca:b4:77:2e:54:b9:a1:77:
fa:3a:75:91:f8:70:34:b4:c1:61:70:7f:b4:84:1e:
8e:6e:cd:98:68:16:d9:5f:a3:f5:b3:f9:a0:56:1b:
82:82:6c:9b:11:6d:79:b9:57:64:5b:08:fd:05:c8:
1f:b8:a0:73:8e:61:93:84:15:4a:f6:5e:68:ce:75:
3b:de:c0:ff:ad:b5:d3:17:78:ab:c8:fa:a3:06:b0:
66:92:86:c5:84:22:6f:7b:47:07:40:76:d2:6d:0b:
c2:15:28:f5:58:85:a3:2e:88:a4:2b:ee:48:88:ff:
f2:4d:53:8e:5c:f2:b7:cd:3c:0e:59:97:94:3f:09:
b2:de:8d:55:76:af:4d:69:2b:1b:1d:fb:9d:3f:65:
73:48:d4:99:11:e2:72:5f:ea:74:f5:ab:16:66:28:
33:f5:53:f2:51:32:9a:0a:f6:ff:11:a6:95:2e:ff:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:43:75:92:E5:E7:D3:5E:13:37:D0:3E:BC:ED:B1:19:E2:5B:29
X509v3 Authority Key Identifier:
keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:91:9b:40:99:44:82:29:6c:8c:f4:fb:66:e3:9f:d4:f4:
7f:ce:3c:3f:31:9f:c1:7a:a1:5a:cb:99:3a:50:c5:51:23:db:
0a:4e:4c:f9:5b:14:5c:bc:93:dc:b1:8c:26:c3:91:0a:e6:b3:
50:dd:fe:a8:d1:52:cf:17:cd:ab:a4:f0:0b:89:ad:13:06:82:
82:59:ee:cc:cc:51:66:6a:61:bb:f8:01:e1:60:30:b2:6e:c9:
07:51:80:d3:32:00:ae:31:5b:83:3a:4e:ea:1d:36:77:b7:59:
b9:c3:d7:2a:98:a6:92:9d:ce:55:23:93:98:d4:de:8a:f6:bd:
e1:00:5e:fe:8e:63:21:fc:32:74:3f:70:2c:4e:8b:6a:d6:da:
02:6f:57:cf:73:a9:ec:24:29:9b:b1:de:08:3f:2f:65:69:56:
35:d0:8a:a3:e4:a8:ed:6f:40:6d:0a:3e:23:a2:2f:64:1e:5a:
8a:74:4a:42:a4:a2:11:20:0c:5b:85:16:07:ef:e4:8f:0a:2c:
5c:00:29:99:8f:14:08:76:a6:c0:ac:7c:5f:ea:bf:6c:a0:e1:
bc:10:7e:a2:50:2c:de:65:31:f2:f9:43:92:35:ad:d1:9a:52:
21:45:ea:3b:fe:24:58:57:6a:05:e9:c8:c7:5d:76:67:c7:56:
b3:77:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:16 2025 by rpki-client