Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
File: GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json)
Hash identifier: YCEJJIUrp1n7s+X169/4uO9u9ipcx4McnKVwtwKFHJs=
Subject key identifier: 2D:F9:5C:F1:58:9A:80:2C:4E:F5:04:B9:E9:8A:E5:F0:BC:37:CD:ED
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Certificate issuer: /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial: 0199239EE6C45B9FCFA8DF6D006AA2B960BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
Manifest number: 155E
Signing time: Sun 07 Sep 2025 10:00:40 +0000
Manifest this update: Sun 07 Sep 2025 10:00:40 +0000
Manifest next update: Mon 08 Sep 2025 10:00:40 +0000
Files and hashes: 1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: lEs/lhL8t9BhHr+GcJ6XmFgxwfhkjhKqL44ZkSuB0yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e6:c4:5b:9f:cf:a8:df:6d:00:6a:a2:b9:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Validity
Not Before: Sep 7 10:00:40 2025 GMT
Not After : Sep 8 10:00:40 2025 GMT
Subject: CN=2df95cf1589a802c4ef504b9e98ae5f0bc37cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:d8:cd:e5:56:97:fa:0d:fc:fb:87:ee:c1:
e3:ac:99:c9:07:34:bc:e4:59:4e:83:1f:3c:9f:34:
56:67:1d:da:19:f4:df:a0:1d:81:0e:8b:92:06:fe:
b6:56:3c:e1:a4:cb:80:d9:45:55:32:3b:df:2a:8c:
0f:f2:6f:3a:ed:1d:1e:2c:dd:54:40:5c:b8:57:84:
a3:a1:d9:e6:7a:bb:aa:48:af:db:b2:43:57:45:02:
34:d5:c4:19:83:5b:0c:45:f3:d7:c2:de:af:d4:90:
fe:0b:c4:1c:23:18:de:49:e0:0a:0b:d0:ad:e2:0a:
b4:a3:90:96:33:30:1d:aa:c5:0a:79:10:ce:81:ea:
ef:18:68:82:7b:8c:ef:d6:22:3b:3c:c3:d0:b8:ce:
e5:ba:dc:71:ea:75:7e:f2:a6:b9:a4:cf:76:56:a6:
68:09:0f:63:fe:a0:23:08:f8:1b:64:2b:56:75:68:
b1:d8:37:fc:e2:87:94:6d:f7:1e:ae:9f:20:21:bc:
ed:0c:d5:87:af:ef:8f:15:6d:e8:82:3b:ff:cc:de:
d7:28:f6:ee:bb:3a:0a:08:b4:d1:71:a8:50:9b:b8:
cd:03:a8:e1:de:4e:1e:ef:82:e9:5c:01:28:fa:17:
3a:23:55:80:31:d1:38:2f:c1:76:48:84:83:2e:32:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:5C:F1:58:9A:80:2C:4E:F5:04:B9:E9:8A:E5:F0:BC:37:CD:ED
X509v3 Authority Key Identifier:
keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:45:aa:9b:d9:06:af:18:27:de:f7:9b:01:5e:76:9b:73:38:
4c:04:4e:e3:57:fc:cd:0f:87:46:c3:40:c8:d2:4a:b0:e5:5e:
45:5b:13:cb:3a:04:cb:91:e0:15:a3:67:1b:50:71:0a:a7:e0:
df:a6:cd:1c:20:ca:28:e7:26:8a:bb:85:ae:64:9e:ce:ef:67:
a8:fc:28:c5:4b:b5:4a:92:4b:a4:13:2b:74:a2:17:9e:3e:26:
aa:7e:ca:79:65:1f:67:b7:03:cf:3d:d0:f1:b5:82:04:22:21:
2f:a4:0c:8b:86:77:c5:a7:13:5b:7b:55:01:55:17:e1:90:de:
d3:bc:7b:a8:fe:d8:a1:f5:1e:da:85:a6:ab:8e:6a:4b:8b:c5:
2f:1c:d0:cb:23:d4:92:af:87:1f:79:6e:2e:20:60:6a:d6:ed:
86:b1:72:b5:e0:8c:1c:69:f8:a0:f0:de:80:87:34:aa:fa:c8:
8a:79:c2:8a:8d:66:d3:b8:ce:07:ce:60:37:a4:e2:a7:c1:8c:
d6:30:f9:5c:b7:43:b0:90:29:13:4d:59:12:65:98:85:19:46:
cd:1a:bc:d1:45:7a:81:cc:59:f5:ac:6d:bf:a4:cc:ff:9c:c1:
48:8a:f8:ec:66:d1:4d:fa:5b:2f:a4:0d:52:8f:b0:ac:73:ef:
2b:6e:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:11 2025 by rpki-client