
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File: GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier: GOljEDAbjICJxqg4dVHLpQawLEBKEPxPnk9TqYZjXNs=
Subject key identifier: 3C:10:8D:63:F2:B4:7C:AA:FE:E7:83:5D:C8:7E:4D:5A:FA:1D:D2:E4
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer: /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial: 01992255B2D50CBE6BCAA9CAB703372E4C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number: 13B0
Signing time: Sun 07 Sep 2025 04:01:05 +0000
Manifest this update: Sun 07 Sep 2025 04:01:05 +0000
Manifest next update: Mon 08 Sep 2025 04:01:05 +0000
Files and hashes: 1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: BqjhvQ9Cx0qgZz07iLMykHVrws5SCsZuFfWizsbgyGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b2:d5:0c:be:6b:ca:a9:ca:b7:03:37:2e:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Validity
Not Before: Sep 7 04:01:05 2025 GMT
Not After : Sep 8 04:01:05 2025 GMT
Subject: CN=3c108d63f2b47caafee7835dc87e4d5afa1dd2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:c5:44:bd:4b:cd:00:fc:f9:4c:f4:31:dd:
39:85:6c:f9:b8:e0:0b:8a:0d:b8:55:c2:11:24:5b:
bb:39:97:d6:aa:a0:59:16:1a:9b:e5:06:b7:df:a4:
21:61:7b:8c:11:29:22:23:0a:0e:0c:bb:fb:f2:30:
fa:41:a4:ce:d8:fd:e0:c0:9d:11:7d:49:56:a9:4f:
c2:64:6d:4c:03:12:7d:a0:c7:d2:77:6f:de:77:0c:
23:c0:60:43:f3:15:47:1d:b0:53:96:d9:76:f9:06:
02:94:4f:30:b6:b4:bb:1a:32:21:55:d8:e9:99:f2:
13:aa:30:e0:d7:6c:33:4d:c8:bb:35:37:23:20:a0:
29:9f:2a:6c:23:aa:99:53:17:15:16:e1:00:db:cb:
67:65:16:aa:ce:9a:3a:17:1b:99:44:cb:ae:93:34:
c4:a0:c3:58:66:9b:30:00:b3:54:ea:bd:7f:4e:75:
2a:44:5b:b4:50:9c:41:f3:8d:26:eb:c6:29:78:f1:
a8:d1:6a:da:5b:78:01:17:09:ad:3e:26:c4:4e:d9:
13:fd:be:d3:9a:ef:ea:8b:3f:95:7d:67:46:93:42:
5a:69:02:de:8e:f4:e0:1f:3c:c4:3a:0d:30:4a:7c:
ab:c2:ee:52:63:f5:e0:a2:8a:0b:46:45:46:7f:15:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:10:8D:63:F2:B4:7C:AA:FE:E7:83:5D:C8:7E:4D:5A:FA:1D:D2:E4
X509v3 Authority Key Identifier:
keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fb:91:9c:6e:4f:da:bb:af:53:ea:c4:d3:77:5f:bf:24:00:
15:91:4d:92:8d:08:be:a9:e4:c9:57:7b:20:50:09:b9:1a:91:
ac:c8:79:b6:62:b5:05:ad:81:68:d2:51:85:12:71:32:95:a0:
71:f3:e8:9e:4f:22:9d:77:64:7d:36:6c:6a:9e:4a:a6:75:4b:
ff:fb:b9:d3:5f:55:73:3f:a0:a7:8a:05:27:bc:48:a5:07:a0:
92:92:8c:00:bb:18:7c:df:f7:49:ba:03:63:69:51:94:90:97:
15:08:cf:6d:8a:2f:2d:74:40:13:61:d3:9d:04:a9:de:f9:f7:
59:5a:c0:02:40:9a:d2:b8:d5:6a:59:d2:57:d7:ba:db:63:67:
d0:a2:b0:dd:92:e5:23:6d:08:69:7c:f8:56:57:60:ce:66:f0:
08:1e:c6:cd:46:fb:5e:57:49:27:4b:da:26:b5:3f:00:ce:f4:
64:04:51:fd:72:56:b3:ac:7d:5b:5c:fd:58:a4:b6:f4:33:ba:
d4:c4:8f:76:d2:c1:70:94:c4:1f:f8:bc:19:04:b6:1b:38:b5:
2a:6d:d5:4d:73:76:dd:f8:03:a3:b7:52:cd:7d:31:90:94:cf:
09:05:15:05:60:58:51:ff:f4:c7:94:b2:ac:90:57:33:00:b9:
e7:4a:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:31 2025 by rpki-client