Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: dKvI0tsvG3sY6MZblRri9I+19b1N6og2Uqqu6euyhbw=
Subject key identifier: 1D:D7:AC:14:06:8C:95:6A:BC:8A:CE:DF:58:CD:52:17:6D:63:94:A3
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 0199288E3B3430A56B104A4BF442B6AFF58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 097A
Signing time: Mon 08 Sep 2025 09:00:33 +0000
Manifest this update: Mon 08 Sep 2025 09:00:33 +0000
Manifest next update: Tue 09 Sep 2025 09:00:33 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: NqKSDHjrurd7p6dr/0G5Px663vYj09/QlPMpgj82vQ4=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:3b:34:30:a5:6b:10:4a:4b:f4:42:b6:af:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Sep 8 09:00:33 2025 GMT
Not After : Sep 9 09:00:33 2025 GMT
Subject: CN=1dd7ac14068c956abc8acedf58cd52176d6394a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:3c:40:3e:9d:04:0f:25:e7:cf:2d:d9:61:
46:dd:af:bb:d3:3e:d4:5e:89:cb:4d:5b:64:7c:25:
57:4e:2f:3d:82:fd:8d:11:a3:7f:39:70:ff:bb:42:
b7:9d:ae:3a:6a:7a:07:88:77:05:e5:cc:ba:c3:9f:
6d:8a:56:34:6b:5e:c9:f3:54:c9:f0:e2:7a:c9:8d:
b7:35:e9:d1:40:5b:cd:65:92:d9:fc:8a:3c:d1:40:
a6:fb:c2:2e:da:9f:31:b3:76:40:cd:41:8c:23:83:
f4:ed:e2:d4:5b:e0:98:bb:f5:29:5c:62:ec:15:97:
6c:33:8b:01:37:9c:32:3c:a8:1d:0f:92:d0:e2:79:
e4:70:d8:62:f0:b6:d3:a9:86:6c:be:34:8a:ad:b0:
73:fb:79:e8:52:a9:17:d0:3c:74:59:fe:57:d2:62:
f7:81:28:44:e2:11:fc:45:d5:25:55:8f:d3:8f:ac:
90:df:b7:7b:57:ae:08:56:24:64:96:99:7b:04:91:
43:35:04:e9:8e:04:16:a5:d0:8e:6d:c2:68:16:2e:
a3:70:cb:a4:e9:06:07:42:4b:a0:9a:cc:65:71:cf:
d6:a7:d9:a8:54:41:c1:99:20:a9:ed:79:ce:a2:bd:
b4:eb:04:62:4b:4a:83:a7:6d:68:ac:96:e2:59:23:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:AC:14:06:8C:95:6A:BC:8A:CE:DF:58:CD:52:17:6D:63:94:A3
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:eb:b0:c7:de:da:f9:51:c5:53:e3:55:8d:e1:2a:33:9f:
67:f8:4f:b6:34:30:c9:25:78:88:cc:69:a6:0c:4a:15:4f:ba:
a4:47:05:6d:ef:90:52:0a:1d:66:e3:10:e8:f9:c6:a7:b1:f4:
62:e1:02:e6:31:8f:5b:6c:a5:63:52:dc:67:fe:e6:b0:f2:c2:
06:82:b8:4b:2d:cc:1d:f7:99:7e:20:a6:36:cd:39:5f:eb:a3:
9d:84:c6:a4:f3:c9:5e:b7:3c:99:e8:9f:6c:31:37:c3:3e:81:
02:10:22:45:cb:2c:34:c6:9b:1a:f1:d9:6a:e2:23:10:a3:d8:
e4:2d:f0:82:9a:c6:ac:36:fd:39:ab:bc:24:01:ff:74:b9:76:
dc:56:6c:5f:6b:20:09:fb:bb:77:a7:b2:0b:fc:8c:a0:06:46:
52:fd:b2:1e:97:d8:60:b3:44:da:98:c6:36:a8:17:c1:7a:b6:
34:d8:6c:31:a8:13:2d:bc:39:7b:c9:12:bd:7d:07:9e:83:15:
c1:28:b9:fa:ae:0a:eb:18:41:82:47:d3:47:9c:7b:d0:5e:49:
b9:11:c6:34:04:49:34:e7:24:2f:ac:d1:db:65:54:d6:8f:13:
65:0e:8b:61:86:8d:ba:1d:6d:ee:3a:8c:a5:85:8f:87:1f:f3:
61:69:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:34:37 2025 by rpki-client