Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
File: gjptycYnXW8k-Z3kFmCcYihYlt8.mft (raw, json)
Hash identifier: ZTLd9Vo3CpXCv2HWjrrMW5pVjRlT9kJa0aFcuPp/wdM=
Subject key identifier: 08:A8:31:EF:6F:13:28:0C:66:65:E3:0A:1B:9B:83:1B:C8:15:89:BD
Authority key identifier: 82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
Certificate issuer: /CN=823a6dc9c6275d6f24f99de416609c62285896df
Certificate serial: 019923312D71ED411378C732BE2B6550A11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
Manifest number: 19
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: gjptycYnXW8k-Z3kFmCcYihYlt8.crl (hash: IWaxnnbugUFD49187AWYcgbOl9vOuKxvXhwZ8z5IlN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2d:71:ed:41:13:78:c7:32:be:2b:65:50:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823a6dc9c6275d6f24f99de416609c62285896df
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=08a831ef6f13280c6665e30a1b9b831bc81589bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:0d:f2:54:1c:02:67:db:0a:a3:ae:63:6d:
0e:fa:b2:c5:98:4f:6d:3c:83:cc:4e:53:e7:af:f4:
b1:9d:82:a1:d8:50:91:4f:22:2f:e4:8d:ea:79:d2:
7c:da:d2:95:0d:d9:e8:58:b3:97:a2:36:68:4f:bc:
e0:a4:47:80:30:43:ba:ea:d8:69:36:61:11:c1:63:
4c:70:d5:90:0b:dc:55:05:6f:9d:b0:2b:f1:37:7f:
69:cd:c5:37:65:dc:67:9f:2c:de:3c:49:bd:ef:1c:
df:7f:3a:58:7a:53:6a:91:e7:97:6f:7b:75:db:e0:
e5:46:7e:c4:23:62:0a:32:2f:87:53:11:fb:c2:f7:
92:23:ab:8a:80:bf:52:26:90:de:cd:87:d1:70:33:
65:6c:12:f5:90:61:48:b8:85:5e:a4:c1:13:85:ac:
09:19:b5:68:b4:9d:28:7a:a9:56:4b:16:d2:53:cb:
e0:2c:35:2e:96:ff:c9:aa:93:6b:7e:0c:b1:95:05:
af:fd:86:12:9f:48:12:3b:96:b1:d6:55:7a:65:b0:
15:9f:74:c5:34:2c:5c:0b:52:65:03:98:93:07:a7:
cd:a9:b5:1c:d0:63:c1:b8:ab:de:e2:d1:93:5a:15:
07:ac:b6:32:04:5d:5f:c6:25:0c:6a:87:e6:23:7a:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:31:EF:6F:13:28:0C:66:65:E3:0A:1B:9B:83:1B:C8:15:89:BD
X509v3 Authority Key Identifier:
keyid:82:3A:6D:C9:C6:27:5D:6F:24:F9:9D:E4:16:60:9C:62:28:58:96:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjptycYnXW8k-Z3kFmCcYihYlt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9b99d8-d26f-4a49-ae36-ef68bdfc1c44/1/gjptycYnXW8k-Z3kFmCcYihYlt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:44:37:1d:6b:1f:2f:1e:43:c5:f5:98:bc:82:d3:65:23:
62:dc:5a:5e:ec:19:84:d0:66:95:ce:d8:0a:6a:ad:22:fb:2e:
15:c4:08:e0:d6:72:3b:fc:3d:39:bd:ca:c2:32:79:0e:37:98:
38:cb:bb:4e:63:3a:64:79:33:da:45:d0:f1:32:23:3d:dd:d4:
ef:1f:d7:82:f3:87:d5:2a:0f:15:30:39:8a:32:ac:5b:fc:41:
04:55:4e:33:f0:fb:61:d2:dd:82:12:ba:6b:cf:9e:85:1b:11:
0a:ea:e2:6d:bb:67:8e:f7:c6:da:db:7f:7a:a3:69:d7:b5:f1:
10:01:30:c3:85:3c:de:fe:ca:6c:66:c0:18:81:63:85:91:9b:
59:93:f6:59:2f:ed:cc:36:0c:c8:f7:dc:7d:81:9e:64:19:14:
f5:e3:6d:eb:03:af:31:38:9e:2e:ba:2f:d4:4e:79:5a:08:cc:
72:0a:6c:33:9d:02:b2:31:b0:d2:5a:a8:dc:96:08:95:24:09:
cc:db:22:38:c9:13:59:33:af:17:d9:73:23:07:73:5e:fd:0d:
48:03:e7:12:7a:b1:f4:57:7a:9a:f2:ab:71:0f:dc:3e:e7:01:
35:47:43:70:2f:42:83:45:66:3e:5c:04:f8:ef:20:24:1a:71:
0c:cb:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:26 2025 by rpki-client