Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: fA7PsOKxCduq0GCM9HLAJt7P4tn+CqehN2owp+IUSho=
Subject key identifier: F4:36:DD:B0:20:61:FF:A9:DC:AE:47:BA:51:D4:C0:0B:F3:E4:8E:D1
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019922556AD7892509ABD1AB780169CFCF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 13DD
Signing time: Sun 07 Sep 2025 04:00:47 +0000
Manifest this update: Sun 07 Sep 2025 04:00:47 +0000
Manifest next update: Mon 08 Sep 2025 04:00:47 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: 2TrLm3LZjIEH7OExVK+EITAOulEle6YJ5kOws6tU268=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6a:d7:89:25:09:ab:d1:ab:78:01:69:cf:cf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Sep 7 04:00:47 2025 GMT
Not After : Sep 8 04:00:47 2025 GMT
Subject: CN=f436ddb02061ffa9dcae47ba51d4c00bf3e48ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:d9:09:49:c9:8c:e3:de:7f:57:c1:e3:ba:
82:15:d8:03:e5:eb:41:44:0f:ac:3a:6d:1d:50:f4:
07:4e:89:5a:ff:21:9e:a3:b5:50:f5:61:ce:c0:44:
bf:9b:fd:51:6a:c2:b6:51:c3:89:ef:4b:c7:73:5c:
8f:56:ea:f9:ab:26:de:e9:88:e6:c9:61:32:ed:9c:
af:42:ea:9e:a0:2c:03:04:eb:74:74:63:b8:77:2b:
c1:de:19:2f:30:31:96:c4:38:65:c9:be:e1:31:e3:
0f:dc:bf:a9:3d:2e:6d:fb:e7:d5:29:3d:c9:6b:e4:
1c:76:61:88:b0:8c:e7:a9:cc:52:9e:7e:80:dc:6a:
de:3e:d6:10:cf:6b:1c:29:c9:d5:14:95:99:a5:db:
18:7e:ba:b5:89:0f:8a:00:b9:6e:41:4f:55:a2:eb:
c2:cc:be:83:53:1a:6e:22:2e:92:6a:98:61:69:9d:
28:59:68:89:18:41:f3:ff:8a:aa:eb:31:a0:1e:fb:
e6:27:bc:1a:c0:7f:12:86:d6:05:49:e9:4a:e7:2b:
6d:7e:b4:b2:5d:c4:0d:4b:63:26:05:5a:6f:ec:88:
2b:e3:a5:a2:cc:c9:5d:fb:7a:52:ac:8d:a1:04:5a:
95:93:31:81:70:bf:1f:89:82:2c:95:81:e4:b3:28:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:36:DD:B0:20:61:FF:A9:DC:AE:47:BA:51:D4:C0:0B:F3:E4:8E:D1
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:3d:b3:9c:19:98:8d:a4:ce:c4:cb:e0:b1:d8:83:65:c2:
5f:cc:62:8f:f4:9f:bb:3a:43:62:b0:67:45:2d:84:d0:d7:4b:
08:ef:79:dc:9b:9d:92:ff:71:88:48:f9:1a:1e:f2:5e:77:0e:
89:c3:7f:30:66:75:02:f0:cf:e9:45:c5:ed:08:59:57:e1:29:
33:d4:f7:db:50:7e:e7:52:50:a1:4c:8a:9c:68:49:5d:c4:2f:
4a:a6:e4:39:f8:8c:84:e4:c8:87:9a:cc:73:b4:cc:bb:fd:a4:
a0:63:19:d9:22:b2:61:13:e6:01:6d:35:0e:a2:2b:a9:fe:9f:
39:0f:2e:5a:99:96:a7:f1:33:ed:89:5e:44:7c:55:e1:d1:0f:
bf:88:ab:22:fd:76:f4:11:90:f3:29:a1:21:6a:e1:1d:48:1d:
2a:15:9f:71:83:e6:36:66:c2:5c:64:cc:af:8f:bc:42:78:df:
dd:67:27:c4:1e:62:4c:4a:9b:f1:9e:7f:f9:ee:01:9c:1f:64:
55:95:07:64:ab:76:41:95:35:1a:a0:56:b7:01:7e:fb:b0:d2:
f3:b7:8c:11:c2:6f:c7:8c:3b:14:de:58:3c:9a:55:e8:44:5a:
e8:c0:dd:8d:1c:19:14:85:64:e7:fa:05:8c:7a:8a:ea:e2:32:
3e:86:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:56 2025 by rpki-client