Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
File: GBcXXqrhCxakFTtwpc_XaMe1GZA.mft (raw, json)
Hash identifier: sPCL+64f6G0imsGacf0YJlXjx3iymtjMq+D1T8JJteQ=
Subject key identifier: 5E:12:AE:45:B1:0C:50:99:CC:B1:94:D4:C3:D7:4B:B5:32:87:6E:16
Authority key identifier: 18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
Certificate issuer: /CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Certificate serial: 019923A07796C8ED5E4CE3A6E0D000F60604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
Manifest number: 12A1
Signing time: Sun 07 Sep 2025 10:02:22 +0000
Manifest this update: Sun 07 Sep 2025 10:02:22 +0000
Manifest next update: Mon 08 Sep 2025 10:02:22 +0000
Files and hashes: 1: GBcXXqrhCxakFTtwpc_XaMe1GZA.crl (hash: aoGLnyMUTVuAkf0Hyg0szZBcp2C/r3Xde+O68xvgwBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:77:96:c8:ed:5e:4c:e3:a6:e0:d0:00:f6:06:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817175eaae10b16a4153b70a5cfd768c7b51990
Validity
Not Before: Sep 7 10:02:22 2025 GMT
Not After : Sep 8 10:02:22 2025 GMT
Subject: CN=5e12ae45b10c5099ccb194d4c3d74bb532876e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:5f:30:ab:7f:67:2e:7e:13:2d:bd:0d:18:
18:38:f9:3f:49:d1:ae:08:2a:09:1b:ef:e9:85:5f:
92:be:4e:95:ec:05:13:b0:18:37:00:44:17:11:ca:
1a:f6:29:8c:cf:a5:89:38:20:f5:3d:c5:11:38:30:
dc:86:8b:3c:fd:d9:24:07:58:2c:3e:14:1a:4b:ed:
0b:96:44:83:82:d8:e4:91:5d:46:8d:82:67:de:d6:
95:83:2c:e7:66:e8:1d:e2:ac:e7:7e:df:0c:c2:67:
03:8f:80:88:b3:86:cb:d0:32:5f:3e:a7:16:4d:5c:
c3:a7:e1:a0:e8:48:1f:ee:54:2c:4b:50:ea:78:01:
92:87:f8:c7:79:ad:48:7b:f1:76:bb:31:74:a3:98:
3b:fa:7d:67:09:55:ae:2d:db:19:19:a5:bd:0b:92:
5a:ee:b6:dd:03:83:fe:c0:98:c6:1b:62:b4:9f:22:
de:77:6a:1d:58:db:b2:ed:e5:39:0c:06:69:f6:3c:
e8:5d:b2:85:03:3f:3f:b5:c7:25:e4:f3:9d:50:a3:
f0:f9:b7:5e:d4:2c:38:d3:9a:05:5c:81:ef:da:67:
53:ef:da:4c:a8:13:da:b2:ee:ce:bf:51:8a:33:75:
34:fa:a5:9d:a7:71:6c:12:df:ec:6f:90:37:af:ad:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:AE:45:B1:0C:50:99:CC:B1:94:D4:C3:D7:4B:B5:32:87:6E:16
X509v3 Authority Key Identifier:
keyid:18:17:17:5E:AA:E1:0B:16:A4:15:3B:70:A5:CF:D7:68:C7:B5:19:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBcXXqrhCxakFTtwpc_XaMe1GZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b1848-74f1-497d-9ff6-5d21348a63c8/1/GBcXXqrhCxakFTtwpc_XaMe1GZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:cf:9d:cb:9c:04:41:34:38:9d:de:46:4e:41:c3:52:7e:
6b:71:c8:b3:83:8b:35:56:6c:71:33:fb:e6:6a:75:b8:fe:c7:
cc:67:ee:8e:35:7f:8e:77:43:01:51:e2:68:fc:f9:ae:3b:ac:
23:5e:b0:29:49:3e:52:35:90:0a:b0:06:ce:52:ab:68:93:59:
42:f8:36:23:bb:64:f1:3c:c0:17:4b:71:b4:05:fb:18:ff:55:
08:53:93:08:7e:14:7f:71:f8:dd:6e:64:1d:13:b8:6c:6f:2a:
93:e0:ee:69:a4:9d:11:45:06:2b:9f:2d:01:d4:b4:a2:98:b8:
eb:61:d8:2b:6b:bc:ef:4e:f9:9a:e8:44:a6:3c:5e:39:72:98:
33:ef:23:ff:cc:b9:60:53:40:11:be:6a:e3:fe:73:6a:dd:7e:
e3:a0:e7:26:b2:6f:ca:cd:0c:cb:85:0a:4f:ed:94:02:6f:ec:
85:f8:02:1e:b7:33:ba:56:7a:89:df:d5:fe:11:f8:e4:e5:8e:
4e:42:93:78:34:27:45:0d:d3:14:c7:92:3b:40:fd:39:c5:63:
60:b6:44:8a:cd:57:a7:0b:6f:e9:02:3c:fe:b0:a8:41:9e:18:
05:e4:d6:49:2c:ce:db:aa:5a:4e:3a:b4:13:5e:29:69:bf:38:
cd:00:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:54 2025 by rpki-client