Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File: GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier: xqPX7jZ/D7hnolkqQkylR6DPNls4VExC6C5mU7EKEiU=
Subject key identifier: 93:FC:70:BD:E0:8D:FF:4E:55:65:95:B8:0A:4E:BE:33:67:DF:D9:97
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer: /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial: 0199221EB31F821C645004AC9234C49BD0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number: 1560
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: rV3Lo1bzo/9yNihPiPP39hK/bgkZEtG2bfHM5kaRIfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b3:1f:82:1c:64:50:04:ac:92:34:c4:9b:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=93fc70bde08dff4e556595b80a4ebe3367dfd997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:5a:a1:31:8f:d0:68:15:e3:99:12:38:61:
4a:9b:d4:9f:25:ae:22:4c:df:7c:52:e2:a3:bf:0b:
f5:b5:12:ec:75:89:e5:0e:7d:4e:89:39:02:d4:05:
8b:50:46:32:9f:c8:36:c2:f6:8a:f7:3d:b9:d7:05:
8f:8e:3a:93:5c:6c:ca:18:d8:f9:9d:cb:58:43:27:
41:f9:b8:ff:d2:b9:8a:29:12:a7:54:d8:11:dd:28:
99:1c:2b:cf:36:38:c3:cd:3b:b2:45:0b:dc:2f:41:
7b:cc:4b:7a:95:80:e7:77:8b:cd:29:7c:a5:cb:ca:
68:99:11:e5:e0:ed:bb:1d:e6:10:7d:3b:c0:a8:3f:
ee:f0:ad:18:b3:4c:6a:d4:47:45:3d:b2:8d:10:56:
2b:bb:a5:73:50:b2:7f:46:62:ff:4a:65:e6:55:ad:
d2:ee:3c:19:fe:dd:5a:04:b3:53:5f:6d:0b:0e:39:
16:22:32:ff:43:89:b5:a1:90:30:13:2e:b2:9e:aa:
e4:f7:ad:de:af:b9:29:45:c4:f0:2a:b5:df:b6:d1:
fe:b9:17:70:1a:7b:b7:87:cf:14:d3:e5:db:42:5f:
1b:1c:42:7e:7d:e3:40:8a:ed:5d:17:00:3e:8c:0f:
5f:77:30:a3:cc:f9:aa:06:e7:60:57:7b:7d:ce:87:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:70:BD:E0:8D:FF:4E:55:65:95:B8:0A:4E:BE:33:67:DF:D9:97
X509v3 Authority Key Identifier:
keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:55:e7:5b:74:d8:09:c7:e3:fb:d7:b3:53:d4:06:e7:70:45:
16:43:ae:a3:96:ec:5d:d7:86:52:81:5a:b6:3d:19:df:87:ac:
c5:ad:96:d0:48:1a:24:0c:5a:e2:ec:f0:8f:3e:b7:c6:0b:a6:
b4:0c:93:9a:b0:0b:7f:87:6c:c7:ce:b5:ee:82:8d:7d:7c:18:
f5:6a:fd:8e:90:89:a3:17:55:23:d7:0b:80:6f:90:78:4b:00:
b9:d4:75:1e:26:6c:05:a3:41:9b:21:3a:48:a6:39:d7:d4:77:
37:01:15:1d:df:b7:f1:3a:c7:74:7d:19:05:8d:66:38:df:7a:
36:ac:34:fc:4e:6f:6e:99:c1:a4:99:ec:eb:a6:ab:ff:ec:df:
1b:fd:d6:cb:26:3b:8f:2a:ad:f6:5e:1e:35:55:28:98:85:1e:
ad:20:8f:5b:83:31:1f:ab:c2:4b:44:88:a7:2c:18:d2:d1:fd:
01:5c:ae:16:61:a3:35:39:87:ca:ae:58:3c:21:0b:e7:6c:e3:
f8:48:70:60:3f:b2:44:37:f4:b6:e7:d1:40:41:3e:b6:92:fc:
6b:62:27:c1:34:a9:57:7f:b5:82:ce:d2:78:07:62:fb:36:b8:
4e:0e:9b:cf:f0:33:e9:b3:e8:e3:fa:4a:5f:e2:d5:a5:ca:08:
6b:d4:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:39 2025 by rpki-client