Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: bmTVCqrX1ogJ8QURLsXqYVz6d38/gujI4q02OoO/EdE=
Subject key identifier: 26:06:DF:E9:04:37:0A:DB:57:2B:EA:B0:89:AB:DA:57:EA:6F:F2:52
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 019922C38554FAD94BAB33CAAD05BE6346DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 06:01:02 +0000
Manifest this update: Sun 07 Sep 2025 06:01:02 +0000
Manifest next update: Mon 08 Sep 2025 06:01:02 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: nnIvEpJQjDxoSPVsnOPUlGmuOSSHYLyZRk3DFF73CMg=)
2: iYCONvh_-VwWy1qAcfbIbkJR5L0.roa (hash: Mqum/pcnON+fvDqDFxLCGm1Sd5nnM2fK5bauzDteg4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:85:54:fa:d9:4b:ab:33:ca:ad:05:be:63:46:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Sep 7 06:01:02 2025 GMT
Not After : Sep 8 06:01:02 2025 GMT
Subject: CN=2606dfe904370adb572beab089abda57ea6ff252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:90:6e:40:b3:e7:8a:1f:39:2c:be:b8:31:
58:1e:0e:11:f1:72:41:d6:d9:af:26:ff:cb:9e:e1:
99:69:17:5f:7e:b0:54:36:6a:08:31:9e:61:4a:64:
8d:e9:6c:c3:f2:f8:08:67:0f:c4:cf:39:4e:99:b5:
8a:ab:ff:c7:45:aa:c5:5f:36:84:82:bb:9c:81:f4:
28:1a:40:7f:43:a8:b2:2e:e2:73:53:68:55:53:31:
54:9d:78:c7:85:eb:4b:b1:1c:b0:0e:20:20:ee:15:
a1:79:52:cd:11:b0:61:29:15:58:72:46:b4:49:ac:
92:60:4e:c9:43:b6:7b:70:85:7d:27:04:cf:d2:d5:
94:78:06:42:49:72:46:e1:8f:a5:71:fc:0b:b6:d6:
11:32:7a:de:15:46:da:e8:1b:96:ab:7f:ef:b9:a7:
2b:89:bb:43:76:62:01:34:a2:ad:86:ad:01:c9:89:
16:00:66:5b:d1:9b:55:5b:90:87:01:51:6d:1e:31:
ad:0b:d8:fd:78:a8:00:15:96:6d:37:3e:73:fc:4c:
22:e8:3c:e6:89:47:28:37:59:34:6c:dd:d8:78:ac:
42:4c:66:28:20:9c:48:4f:b5:bb:e0:5e:89:ea:57:
6d:89:19:f2:59:69:4d:3f:4a:57:c5:dd:37:5a:b6:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:DF:E9:04:37:0A:DB:57:2B:EA:B0:89:AB:DA:57:EA:6F:F2:52
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:1a:15:4c:6a:15:9e:7d:40:b5:85:fb:d1:49:4c:05:d1:
14:34:4a:1b:10:07:d8:d1:ab:20:2e:a0:bd:5c:21:18:b4:c5:
ce:b1:0e:e8:82:af:bc:a1:ad:6a:eb:ef:6c:69:68:9c:d1:4e:
c5:21:73:75:a8:c7:f8:7d:8d:7b:d3:15:52:fa:94:bd:c5:56:
6b:12:b4:76:6e:f9:c2:a9:63:21:cc:b7:8b:a4:05:8a:30:82:
d2:4e:52:a6:2d:f4:89:84:23:51:ed:55:ba:6b:4a:8e:5b:3a:
6b:b3:e3:80:ce:7c:58:b3:eb:f7:fe:0b:db:ad:4b:50:b5:99:
11:ff:f5:2d:94:d7:da:3b:89:32:ae:a6:76:2b:ac:e1:df:62:
f5:ee:50:83:a5:ea:ab:69:9d:80:73:3a:f1:39:40:bd:f4:56:
9e:1b:1f:74:00:bd:de:d5:66:7b:b9:37:85:93:8b:ad:0d:70:
db:be:1a:eb:e4:3c:dd:53:41:52:e7:83:04:db:11:55:cc:f6:
dc:e1:6c:b1:de:bd:10:da:2e:4d:ba:95:7a:fe:e1:4f:98:06:
47:2c:34:3d:8c:b4:eb:9d:b1:10:7c:d1:4d:8d:bf:cd:92:3e:
a8:18:54:3f:17:92:74:92:aa:b0:3c:3d:c8:83:5e:2e:11:31:
4a:66:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:40 2025 by rpki-client