Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json)
Hash identifier: KD9U8zHFsMZODHEST9GPzcCuOPuAVFJypVps5UpShzk=
Subject key identifier: A3:FF:16:E3:CD:C4:BD:AF:B9:8C:0E:2C:D2:99:47:21:E8:38:A1:D7
Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Certificate serial: 019923A0A7CF536C819B4845B14EE72F9446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
Manifest number: 91
Signing time: Sun 07 Sep 2025 10:02:35 +0000
Manifest this update: Sun 07 Sep 2025 10:02:35 +0000
Manifest next update: Mon 08 Sep 2025 10:02:35 +0000
Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: kDWaXb5f7ksFIFzKO0RAVKj0rx9p4wP3l1pgeUeqMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a7:cf:53:6c:81:9b:48:45:b1:4e:e7:2f:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Validity
Not Before: Sep 7 10:02:35 2025 GMT
Not After : Sep 8 10:02:35 2025 GMT
Subject: CN=a3ff16e3cdc4bdafb98c0e2cd2994721e838a1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:6d:c5:e9:24:2a:57:1b:ea:ce:b3:f3:91:
97:ef:69:4e:ff:98:65:a3:bc:66:9d:db:2e:34:37:
e6:c7:39:45:3f:c4:7b:2f:66:f8:ea:42:cd:fd:c8:
68:87:0e:55:5c:fd:1d:d8:7e:a6:8d:3c:fe:ff:64:
80:00:6f:d7:f3:7f:e1:d1:85:90:b5:e2:0e:bd:c0:
70:f6:f4:56:d2:3d:8d:be:b9:24:0a:94:fe:8c:eb:
07:2a:ae:00:30:ee:38:ce:01:97:10:6c:b4:42:07:
18:9c:d2:3c:3c:25:d3:d5:43:d1:19:4f:bf:f1:bd:
7e:bb:ce:ff:f2:a7:64:0f:f7:f6:91:d7:95:03:5a:
31:82:f1:5a:10:2c:e5:0e:0e:e4:fb:27:ad:f6:a9:
66:ba:dc:19:a1:1c:2c:fd:c4:1d:16:4c:1e:e5:27:
a1:9f:67:1b:ca:78:5b:b8:a5:a9:19:8c:c2:3f:b9:
73:7f:ff:b0:c8:13:41:83:36:16:38:d7:c6:6f:8a:
bb:8c:54:99:d2:49:7b:39:21:b2:c4:a2:0e:52:c3:
3a:32:d1:a9:ca:e2:5c:07:f7:4b:9f:02:5a:23:2b:
2a:57:6e:28:d8:04:28:2c:e4:dc:28:1b:2e:97:0a:
06:88:a7:78:6b:50:8c:bb:24:37:45:14:80:66:f7:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FF:16:E3:CD:C4:BD:AF:B9:8C:0E:2C:D2:99:47:21:E8:38:A1:D7
X509v3 Authority Key Identifier:
keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7f:71:8f:d3:f6:c8:0a:99:f8:07:64:3c:91:74:96:1f:96:
10:18:c8:4c:2c:a1:a9:7e:c1:ed:fe:72:f4:d6:67:15:25:6c:
2c:53:df:c3:e7:d6:80:7e:ea:cb:3f:e5:39:9f:7d:f0:64:e2:
31:df:75:20:c4:0d:05:e7:21:82:93:95:b5:07:fb:45:15:eb:
30:bc:51:90:ac:2f:0f:de:73:41:35:69:91:de:17:5a:4c:05:
9e:ac:5b:af:98:09:47:a4:b0:15:7b:de:aa:d5:6d:e3:78:1b:
16:df:f3:51:b3:a3:9f:ba:75:16:48:da:a8:32:ae:5c:d3:e6:
34:46:88:f6:f5:53:9f:35:af:65:2b:90:7c:65:a6:ef:1d:67:
8d:37:a5:40:a2:15:29:2a:de:57:56:ac:cf:2c:f5:2d:50:13:
bb:d4:4f:29:dc:d0:e3:c3:44:31:f0:d5:b4:bd:bc:6b:2f:b8:
49:cc:9c:80:7d:94:41:2c:21:62:34:4c:a3:e0:d0:8a:cf:9e:
ab:fa:ca:17:47:b3:6a:8b:8e:86:96:4a:d4:96:21:cf:77:f2:
4b:75:f5:1d:bb:84:a9:1d:ff:b8:7e:f9:c8:36:7d:77:6c:a3:
3f:bc:01:26:77:8b:e2:12:f1:03:39:e0:b6:a3:55:ac:f1:45:
88:74:d6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:14 2025 by rpki-client