Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: R7OCXbBK2u0nM5RBXqO+2Ud0O3s0/iFWPD5rQtfngcw=
Subject key identifier: 63:B8:C2:66:90:00:D4:C1:66:0A:C8:61:B9:4F:C6:EA:CF:B4:54:37
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019922C36AC24C01E2CB6F5040492334CE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 074C
Signing time: Sun 07 Sep 2025 06:00:56 +0000
Manifest this update: Sun 07 Sep 2025 06:00:56 +0000
Manifest next update: Mon 08 Sep 2025 06:00:56 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: FPAYczCHgAzSayRiLjH57/veS8/pF2on7EghsvBS/oM=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6a:c2:4c:01:e2:cb:6f:50:40:49:23:34:ce:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Sep 7 06:00:56 2025 GMT
Not After : Sep 8 06:00:56 2025 GMT
Subject: CN=63b8c2669000d4c1660ac861b94fc6eacfb45437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:35:ab:5d:ce:37:d0:ba:d6:25:aa:37:f1:
8d:28:0b:71:8c:cd:85:5b:4a:e2:4f:7e:6d:70:d6:
9b:31:85:8b:30:fb:63:e2:ce:c5:27:3c:5a:d7:88:
d0:79:5a:df:bc:c3:64:2b:56:6b:76:2c:e3:fc:75:
a6:4a:1c:f4:a4:23:4c:56:9e:fb:18:24:ec:eb:0e:
87:3e:e9:a3:0c:34:a4:67:a4:5c:3a:c9:45:f1:12:
b6:64:0d:8e:60:35:08:b8:4c:21:c5:e1:6a:8c:03:
85:21:41:92:29:3d:cd:9b:30:f3:d4:d3:08:65:a7:
5d:d9:6e:c0:1b:6e:81:a0:cd:b3:8e:7f:c6:e9:99:
b0:ed:da:20:ca:99:dc:df:b3:7e:12:75:e6:5e:ab:
2e:a8:3a:7c:17:08:72:44:1a:e9:4c:9a:a9:13:ac:
6c:fe:73:e1:e8:c6:e8:62:a5:25:16:b9:f8:26:13:
48:0e:29:aa:fd:9c:7e:9e:55:42:a5:05:1e:53:0f:
b6:56:50:7d:57:8a:d5:3c:f5:b2:4b:a9:c1:2c:2d:
2f:e7:b0:b5:9b:1b:3d:22:da:76:1a:27:3c:47:dc:
b4:0e:45:e4:b8:4c:58:b2:cc:d5:9d:cd:fe:1f:66:
77:7c:38:8b:7a:40:93:93:ed:36:58:5e:e5:4b:72:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:C2:66:90:00:D4:C1:66:0A:C8:61:B9:4F:C6:EA:CF:B4:54:37
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:07:ba:56:28:c9:20:78:bb:98:4b:ae:6c:a4:b8:b3:5b:a3:
55:63:87:e5:d7:ff:92:3c:dd:f6:8a:d5:4b:46:1c:b5:b5:59:
bd:57:e3:a2:4c:d1:8f:ec:fa:62:5a:1a:8b:a9:06:76:0a:b3:
f2:de:b3:da:31:00:7d:91:45:e6:30:ef:c7:49:82:10:9c:aa:
13:7a:aa:fa:6a:8c:6d:b9:d3:b9:e6:5a:88:28:2c:e2:84:ef:
84:d8:75:e1:8e:8f:54:0f:99:bd:44:16:55:f1:99:83:0c:68:
8d:79:9f:42:3b:8b:18:07:97:82:87:75:16:40:2a:5b:38:47:
b1:3d:49:d7:74:14:f0:8b:92:be:cc:95:17:e3:31:05:fb:71:
30:ac:fa:1d:9e:5b:14:8c:87:92:c8:31:f0:ff:06:7c:4e:05:
d8:78:07:46:3b:88:a5:b4:fc:47:8c:7e:d3:3a:89:fd:65:b8:
0f:a0:58:89:41:50:62:55:0f:f0:0d:4e:2f:d5:c3:89:53:9a:
9c:e3:d1:8d:0f:54:38:00:00:14:de:fd:c7:7d:72:24:b3:43:
e7:5a:b6:6e:96:65:e2:d2:91:97:50:73:db:06:5a:96:f5:fb:
a2:85:69:ca:d2:89:32:e7:6a:a2:13:77:63:c3:9d:ac:72:7f:
88:c3:ee:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:06 2025 by rpki-client