Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
File: GmoUE8yJZe6SQWtgWfkLGHeMizg.mft (raw, json)
Hash identifier: A9BtGVbvsfWobFwI/GN9TwNkdfTMzhpCQzBlX8bsEOk=
Subject key identifier: 92:DF:C4:44:CE:7F:BD:6E:54:80:1F:27:1E:9B:A4:43:23:67:1F:AD
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 0199228C9F289D03BF83F75E651B89779509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
Manifest number: 0FCF
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: GmoUE8yJZe6SQWtgWfkLGHeMizg.crl (hash: 71dylLO6lH9X8RpYuBvv7qoFyuLYqI2tz91qbd4ICEU=)
2: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (hash: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=)
3: q6mDakXCczwOucfjGR_MCayBN00.roa (hash: WHAyxlbQLqyJ/G0nYhz0U1oY3c2QkU4OXH4il3FpXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9f:28:9d:03:bf:83:f7:5e:65:1b:89:77:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=92dfc444ce7fbd6e54801f271e9ba44323671fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:06:3b:ae:1c:05:43:82:c5:a9:72:4d:4a:
9f:c8:02:05:83:0b:d5:0b:b6:b5:c6:9d:64:e7:72:
46:bc:f8:df:06:7e:8a:6a:53:38:ad:dc:ce:e6:38:
b9:9e:eb:00:54:39:5a:1c:6b:67:9b:1d:1e:60:04:
d4:77:01:24:19:d9:5c:a8:f2:35:c2:c7:00:28:f8:
ab:ed:95:2e:0c:2e:1b:46:19:b9:32:ff:40:a1:bf:
a1:6c:5f:da:1b:a5:8b:44:c9:10:cb:8a:ee:d8:91:
36:9b:b9:4a:40:c8:dc:09:98:16:56:ba:7f:49:80:
e4:17:62:45:9c:e8:40:b2:46:99:c2:99:34:bd:03:
13:e3:01:56:29:77:a8:2f:8c:68:1d:3f:d7:7f:0e:
cf:14:23:fb:a6:2c:68:21:7c:5d:90:4d:f9:e2:9e:
01:c9:f0:a4:ec:a6:e9:83:7f:18:19:7d:9a:ab:20:
7b:48:6e:a8:5e:d1:47:da:5e:c1:fe:0b:bf:7e:bf:
0a:43:ca:15:19:99:8d:3d:f3:ad:e5:ad:b7:c0:1e:
f2:74:1a:b0:b2:97:ac:84:57:68:14:d6:dc:e1:d4:
c6:14:7b:64:ae:28:d4:32:f3:b1:36:42:40:c8:f7:
ac:12:d5:b5:19:b3:c8:59:27:77:4e:b1:71:37:05:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DF:C4:44:CE:7F:BD:6E:54:80:1F:27:1E:9B:A4:43:23:67:1F:AD
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:90:32:2e:40:3c:f7:34:31:7d:ce:87:a5:c5:fc:da:9a:14:
4d:72:c2:7f:16:1f:ba:03:7d:46:1f:12:49:84:26:76:18:e4:
39:d5:81:5a:91:00:40:e4:8d:55:4f:eb:ed:2d:36:3f:02:f7:
0b:45:23:fd:39:f3:75:9e:5c:e6:06:99:02:d5:4e:c0:6c:a1:
8f:47:63:4b:cf:29:71:15:b5:3f:0e:49:2e:5f:bc:ae:d6:b5:
47:d3:7f:ed:c8:a7:73:98:77:22:08:4a:7c:de:cc:c3:85:72:
80:ea:0f:40:c6:a9:1d:45:a6:04:1f:b7:bc:52:6b:a2:58:7c:
cf:06:b5:55:8d:89:ed:82:23:11:01:da:c2:6e:57:56:13:c6:
e4:4e:cd:c2:f6:2c:03:cc:96:d0:43:01:dd:85:54:00:46:fa:
96:b2:0b:dd:0d:f2:08:50:15:ab:13:01:a0:5e:56:4e:1d:75:
ba:6b:ad:ad:e0:7f:66:db:b0:39:49:ba:19:52:97:8f:43:e0:
5b:b8:ae:36:74:9f:3e:6b:60:f2:de:3e:ce:bf:1b:40:86:f6:
6f:0f:ce:2f:a4:7b:82:5c:21:d2:37:14:14:f6:fa:fa:4e:7c:
4b:5a:98:e7:05:71:3c:de:66:3b:be:9f:4a:ed:c4:18:4a:15:
4b:27:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:31 2025 by rpki-client