
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
File: GPe8sFBdSWl9bFFzJBWGc257DXA.mft (raw, json)
Hash identifier: E9tG/3yo8+yNSRERadEZW6U63rhZTJY9lHrpyrecxog=
Subject key identifier: FB:8A:9F:09:AA:7F:A3:D9:95:F2:5F:C3:A5:77:C1:AC:15:DE:91:2C
Authority key identifier: 18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
Certificate issuer: /CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Certificate serial: 019922FAC338D24C2E9C34E24BB9BE1609D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:01:23 +0000
Manifest this update: Sun 07 Sep 2025 07:01:23 +0000
Manifest next update: Mon 08 Sep 2025 07:01:23 +0000
Files and hashes: 1: GPe8sFBdSWl9bFFzJBWGc257DXA.crl (hash: CliYnKkkN1edpZGmCS3JeTXQqhubkdTVW3yEtDN+oio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c3:38:d2:4c:2e:9c:34:e2:4b:b9:be:16:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f7bcb0505d49697d6c5173241586736e7b0d70
Validity
Not Before: Sep 7 07:01:23 2025 GMT
Not After : Sep 8 07:01:23 2025 GMT
Subject: CN=fb8a9f09aa7fa3d995f25fc3a577c1ac15de912c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:b9:c8:81:da:7a:08:5e:87:18:d8:ae:5e:
85:56:e3:e0:45:84:68:79:dd:f2:69:27:2c:40:96:
e3:6f:b5:04:f9:eb:36:a3:9b:b1:69:4a:3b:72:cc:
93:fb:b2:cc:00:50:de:d7:a6:99:ef:56:9b:a9:79:
d7:93:9f:a6:04:a3:f3:e3:a9:f5:19:a8:c6:98:b2:
eb:e7:a3:86:47:9d:6c:f2:e0:d3:23:63:e6:da:8f:
46:c1:b9:bc:71:34:a5:22:47:19:1f:c8:28:42:6c:
b0:6f:d3:d0:15:69:0f:82:1f:86:5e:8c:05:4a:d9:
6b:6d:1a:97:6d:eb:55:7d:3b:15:6c:be:56:92:94:
04:b6:6a:87:eb:60:8c:54:b9:30:37:f4:1a:9f:37:
ca:86:38:0c:22:0b:c1:b5:de:2e:55:b7:d3:61:2f:
c0:75:0f:9b:b8:62:f8:db:be:69:3c:76:ad:67:cb:
aa:9a:84:dd:eb:77:db:3b:00:05:9c:2f:24:53:af:
3e:6d:45:87:a9:32:a7:45:24:a4:29:34:8e:b8:ec:
a0:5a:ae:f5:ac:58:ba:1e:73:db:1f:aa:04:e2:59:
4c:ff:fd:85:98:55:12:3d:82:12:25:a9:f1:aa:c7:
99:ee:22:03:3f:52:aa:d2:d0:05:cb:d1:60:97:fa:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:9F:09:AA:7F:A3:D9:95:F2:5F:C3:A5:77:C1:AC:15:DE:91:2C
X509v3 Authority Key Identifier:
keyid:18:F7:BC:B0:50:5D:49:69:7D:6C:51:73:24:15:86:73:6E:7B:0D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPe8sFBdSWl9bFFzJBWGc257DXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f262b0-5cd0-4f41-9f77-e584d9e48022/1/GPe8sFBdSWl9bFFzJBWGc257DXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6b:8c:c4:a0:6c:00:b7:32:c0:d7:ea:5a:70:5d:a6:e1:a5:
04:f7:f2:12:4e:ff:b4:3d:2a:c4:37:03:a0:ee:90:a9:ba:43:
ff:0b:29:1b:90:fe:30:75:5c:7f:8f:27:ff:5e:17:b1:13:2a:
77:88:79:ec:d3:b4:26:a8:64:54:7d:e6:34:c7:78:c4:2d:22:
64:df:9d:2f:cf:f4:8f:6c:40:99:ab:ba:f0:5d:83:bb:80:ea:
50:16:f0:16:fa:e0:7b:a1:bb:be:b8:8d:f9:54:fd:a9:4e:7c:
d1:82:4b:0d:18:fd:e3:a4:85:bd:d9:c0:b0:74:30:28:c5:6a:
7c:d5:89:55:40:79:7f:fd:6e:9a:84:bd:6d:d8:29:62:a8:ba:
91:48:4e:7e:d0:1c:e0:79:a0:b8:8e:f8:a2:d4:50:04:7b:18:
5f:51:b2:c2:87:de:4b:d8:c4:b2:d7:0e:04:96:5d:06:61:79:
98:80:33:57:5b:a1:a9:3f:cb:0d:c9:ef:f2:d1:23:28:51:b9:
10:de:78:ef:14:53:cc:d7:f8:da:3f:9d:a3:00:87:93:67:19:
7e:5a:08:f2:11:ae:9f:34:3c:1c:63:37:7a:b7:f6:42:b3:8b:
dd:66:35:82:cc:a5:fb:68:e0:de:8a:57:c7:f2:5d:07:ae:ca:
2f:c8:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client