Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: Wxu++dHexmQZLfnv8eKxB0Fzs395RM+by2jcUgM6354=
Subject key identifier: F6:48:E4:7A:8A:81:EB:60:A9:80:52:CF:3B:24:04:74:A3:AD:8C:99
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019921B1D9B03E446B48995FC4CE3CCE8B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:02:07 +0000
Manifest this update: Sun 07 Sep 2025 01:02:07 +0000
Manifest next update: Mon 08 Sep 2025 01:02:07 +0000
Files and hashes: 1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: nXQABzbTuXb06kOYQ0x9cLKM14LlqYy9JVP188SczMw=)
2: ocSKLBAvwLdO6Bz9BzgpYro5A9k.roa (hash: Gf/KD5MQfVoD7yuJC1PN6VI3qKYUcNl5HcQ7qcq9TAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:d9:b0:3e:44:6b:48:99:5f:c4:ce:3c:ce:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Sep 7 01:02:07 2025 GMT
Not After : Sep 8 01:02:07 2025 GMT
Subject: CN=f648e47a8a81eb60a98052cf3b240474a3ad8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:84:75:a4:bc:c5:26:ee:6f:e6:5d:31:36:
d4:8a:0b:21:b4:6e:3e:44:8f:0f:be:a8:3c:fb:b4:
1a:38:09:d9:ca:98:f0:17:fc:85:8d:5c:f1:1a:8a:
17:00:56:b3:7e:77:0d:b9:96:fd:a1:74:f2:23:11:
8b:cf:7f:bf:31:30:6a:38:51:60:b0:16:c8:c5:1e:
7d:6e:8c:85:3b:17:6b:e5:7c:9c:53:c4:0c:c3:b8:
2c:2c:74:52:fe:4f:fc:db:40:49:b6:61:49:27:b2:
df:3e:1e:78:7a:35:20:b7:71:8b:fd:59:b6:1b:11:
c0:ca:b5:a3:37:bd:85:d3:9e:f7:4b:cc:23:ee:11:
9d:d1:b1:c6:6c:eb:8a:bd:6f:95:0f:bc:97:d6:e2:
ce:1e:62:0e:27:de:e8:3c:0d:0c:a7:b2:ca:80:8f:
67:f2:71:74:99:dd:eb:72:da:b5:1d:eb:72:87:ca:
ef:90:3d:eb:76:51:be:5d:1f:cb:71:05:59:fb:b8:
9c:7a:6a:25:4d:9f:f5:d5:c5:82:f7:e5:d1:64:ca:
70:5d:7c:68:67:1b:7c:e2:7a:2c:11:bd:11:28:cc:
c6:a3:ca:de:59:6f:87:32:af:77:94:db:59:7c:24:
76:26:0e:1e:c2:07:c6:02:74:e4:01:4b:2c:ff:6e:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:E4:7A:8A:81:EB:60:A9:80:52:CF:3B:24:04:74:A3:AD:8C:99
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:69:3c:76:28:10:9b:16:4c:eb:3a:9c:e3:3b:14:9c:a5:
b3:60:bf:d5:12:59:d2:87:e1:1e:e9:3d:5b:e5:63:90:c2:fb:
a5:de:be:b7:cd:f6:90:34:4d:7b:12:3e:d6:f6:6d:1d:43:2a:
ef:32:19:4a:fb:2a:b3:75:5e:4c:53:66:f8:be:ec:5d:66:36:
ae:93:bf:47:c0:26:85:b2:38:47:7a:09:61:dd:d1:8b:35:8f:
0e:d1:3a:f1:ac:a3:7a:af:eb:eb:12:d8:4a:fd:74:5f:e4:00:
df:97:b3:84:33:ac:d2:ca:7a:f2:86:73:cc:85:dd:3c:3f:62:
32:33:d0:66:ce:6b:61:8b:d7:70:4e:b4:58:05:ae:ba:d6:64:
45:92:8f:18:56:6e:51:f3:31:96:b7:6c:6b:58:09:2c:ea:4c:
82:d7:b7:49:33:37:d2:15:35:fc:57:09:76:8e:ac:5d:aa:0f:
38:19:03:b7:fc:b5:08:4f:5b:66:dc:d6:05:07:db:d9:39:ec:
24:41:42:55:4e:f1:fb:10:45:f0:51:32:89:c8:d6:b9:6e:63:
5e:f9:ea:2e:03:8d:05:5a:e6:c8:2a:27:15:5a:f6:6d:8a:e5:
6f:e1:24:95:4e:69:ac:08:54:35:c8:1a:b9:c0:59:4c:84:95:
92:e5:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:20 2025 by rpki-client