Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: Il1bTZtcY50Faj2w5CbyKbgyOG2bAsmwkPUZRZoS/a8=
Subject key identifier: FB:B4:9E:26:49:67:74:E3:67:88:D0:67:DB:40:02:DB:4C:B1:DC:A7
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 01991A9C0B6AC166BF0721AD47B7DE37BD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0195
Signing time: Fri 05 Sep 2025 16:00:58 +0000
Manifest this update: Fri 05 Sep 2025 16:00:58 +0000
Manifest next update: Sat 06 Sep 2025 16:00:58 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: TPgYUpzFO4O1Np9tF5g22nhcW5p8Lq5k5qIv2Dlmh/8=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:9c:0b:6a:c1:66:bf:07:21:ad:47:b7:de:37:bd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Sep 5 16:00:58 2025 GMT
Not After : Sep 6 16:00:58 2025 GMT
Subject: CN=fbb49e26496774e36788d067db4002db4cb1dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:8d:a5:b0:92:65:7c:28:24:26:fd:db:6a:
ca:0d:5b:46:55:3b:d2:b1:c7:98:55:00:98:d3:17:
fb:55:60:da:a6:08:d0:5f:3c:29:77:7b:9e:31:58:
3f:f4:7c:9e:8e:09:2a:84:16:e6:04:47:fd:86:65:
d0:2a:85:76:b5:6c:93:26:bf:bf:e7:3d:7e:c8:74:
72:1f:47:93:89:33:c9:e4:b4:c3:f2:35:a0:76:a2:
c7:ea:8e:f0:c4:e6:62:e5:c6:85:aa:07:30:81:e1:
59:1d:6f:64:f8:8e:ba:32:fa:24:6f:26:75:a9:cc:
1f:4e:1d:12:04:a7:89:9f:3d:9f:4d:8f:73:21:82:
2f:53:e4:6a:be:2b:f8:d8:4f:0d:43:b0:d7:08:6b:
55:e9:fd:8d:e6:6b:0c:da:2f:9f:3b:02:39:bf:2a:
e8:61:fc:ce:b4:6b:d2:5e:c2:15:93:70:3d:50:0c:
12:48:f8:4e:2d:b0:18:4a:a1:bf:fa:b4:f5:c8:2b:
aa:23:3f:52:85:b4:74:cd:9a:89:54:5b:34:ad:e2:
27:46:e8:a3:e5:62:0c:0d:4a:12:79:5f:dc:b7:0f:
7c:e8:a8:2c:89:31:b0:0b:3a:51:ad:0a:86:7b:68:
bd:e1:0c:a6:90:f3:c8:9e:24:99:2d:04:fe:88:65:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:9E:26:49:67:74:E3:67:88:D0:67:DB:40:02:DB:4C:B1:DC:A7
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:32:35:9d:20:ab:31:b6:2a:6d:11:eb:f0:d6:61:50:8d:a3:
9a:5e:b2:dd:cf:20:18:2f:3e:8c:49:e4:e7:e6:02:fd:b6:0d:
09:98:1e:66:6b:3f:14:13:b2:a6:80:92:f1:81:c7:f4:49:40:
b6:7d:69:e0:f2:bd:28:dc:e1:ad:34:60:89:e5:7f:07:92:51:
1f:bc:35:45:8c:73:dc:8c:a3:e0:61:1d:87:8c:e8:13:69:4a:
20:f3:60:b6:6b:ef:00:0e:7c:9a:74:8e:b2:24:3f:00:58:59:
2d:c8:d9:fa:eb:10:3e:fd:64:f4:e4:4e:48:a7:d3:c0:86:a3:
e5:45:bb:b9:5f:18:79:f5:74:67:16:25:dc:74:3c:b4:46:89:
07:95:52:c6:99:37:43:ee:be:83:6d:0d:c3:f1:a1:f5:1e:1b:
49:f5:72:78:a7:91:83:6f:92:3f:70:85:a9:08:d3:47:a2:25:
4c:11:a6:78:41:d7:c7:ad:fc:32:24:34:75:89:27:5c:e9:80:
b9:a2:d1:42:7c:4f:97:8d:14:0f:17:1e:08:4a:5b:8b:11:54:
b4:09:1c:e5:08:78:6d:7e:d7:e2:c9:e1:d5:91:8f:57:b6:8a:
51:5f:e6:90:7f:ee:42:77:8a:53:ef:5f:d1:60:3c:e6:9c:f6:
fd:ad:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 18:53:08 2025 by rpki-client