Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File: GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier: qGigIsYTG67g25prTsgblCXGVnCf/Go2o6gAMrNF+HI=
Subject key identifier: 4A:C1:27:F0:ED:AB:5E:42:CE:B3:77:EB:88:04:BE:35:93:DF:23:BB
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 0199380283225657337CAC150E5F4269E8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number: 1193
Signing time: Thu 11 Sep 2025 09:01:52 +0000
Manifest this update: Thu 11 Sep 2025 09:01:52 +0000
Manifest next update: Fri 12 Sep 2025 09:01:52 +0000
Files and hashes: 1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: 5r81BqRCnWetnf7TT9Rfr1vJ9+derk6uwPUN5M38psY=)
3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:83:22:56:57:33:7c:ac:15:0e:5f:42:69:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Sep 11 09:01:52 2025 GMT
Not After : Sep 12 09:01:52 2025 GMT
Subject: CN=4ac127f0edab5e42ceb377eb8804be3593df23bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:6b:64:cf:9f:7f:41:05:63:dc:ce:7a:9e:
0b:86:fe:b0:e8:4e:ce:4d:25:40:db:91:ec:a7:f1:
34:52:4c:e1:ea:23:23:ee:c4:65:00:07:0b:c2:6e:
38:f8:82:81:80:89:8f:dc:b3:06:e9:65:eb:19:9d:
c0:6c:de:3d:62:58:b2:47:05:38:b0:f7:31:a4:a8:
ac:a4:70:de:d9:d2:18:4f:61:ee:48:10:18:98:d6:
85:d8:fd:87:29:07:e6:13:14:f4:b6:f3:57:34:4f:
56:55:c0:14:ff:21:c8:f5:3a:3f:12:b1:bf:14:a1:
d1:fd:02:a2:34:ba:13:d4:6b:d8:46:13:59:8e:8d:
ac:ef:7d:37:46:2a:59:51:1b:08:b3:59:51:58:45:
3c:3d:6c:6a:b0:dc:f7:8d:49:89:d6:07:84:d6:79:
1a:31:7d:f6:db:66:cf:49:64:c2:87:e6:13:83:72:
d2:20:b7:57:cf:25:46:ae:8b:19:08:a1:84:7c:bf:
99:48:35:cc:7b:97:76:ad:36:b2:f1:0f:01:16:e8:
ec:18:00:0d:9c:d0:a0:a8:cc:d7:c5:53:b3:12:20:
61:15:73:51:37:02:79:d6:7c:a0:98:86:16:e5:5b:
1c:5b:61:10:e0:c3:5a:95:02:dc:13:b6:c2:b1:c3:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:27:F0:ED:AB:5E:42:CE:B3:77:EB:88:04:BE:35:93:DF:23:BB
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:d9:69:62:a5:03:c4:80:c4:21:a5:d8:d0:58:e9:42:c5:
32:9d:3a:12:3e:c8:da:8e:98:e6:e5:91:e1:af:0c:2a:9e:ba:
e1:a3:31:f1:aa:54:a2:31:c1:01:3d:cd:01:a2:96:1c:04:63:
8c:79:a9:9b:4b:d5:31:72:61:86:51:27:d7:d5:d3:89:4d:0a:
d0:5f:56:e2:76:a3:db:f0:ab:88:63:05:a5:71:2a:90:bc:a7:
50:2b:8b:8b:06:d8:81:f6:d3:67:58:6a:e5:f0:c3:52:bc:0c:
d0:12:c2:1b:89:ff:f3:92:c8:e7:ce:c7:6c:ae:2d:23:3a:20:
54:1c:60:67:34:68:ac:bc:cf:d6:2e:fc:95:35:92:15:c7:9a:
df:2a:ac:e9:88:40:dd:ee:7d:e5:5d:c6:4d:9b:2f:30:e4:f3:
c5:5d:6e:4f:c0:ed:fb:75:61:3f:bb:ae:4c:0e:d4:47:76:c9:
fc:0b:c4:cf:ee:72:cb:91:62:1d:38:4b:ae:2a:56:13:89:13:
d0:9e:91:b9:17:d5:ae:17:e4:9c:04:14:19:44:00:11:d3:6e:
e3:b0:79:4e:1f:69:f5:63:8e:e4:ed:67:5e:fb:3d:74:db:4c:
92:8d:55:e1:85:c1:ec:63:66:e7:a4:be:08:05:9e:ba:62:59:
56:b1:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:32:20 2025 by rpki-client