Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: Qs9K6uYYf2liHCuR5Nes1hRcEi3WaZV3G8n7jWPQdTY=
Subject key identifier: 24:F7:9B:FE:0E:09:1E:1F:9B:AA:8E:90:4D:1B:E2:F1:90:3D:45:B1
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 0198E5D4C68115E3687344AD77EA08FBE692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0DB2
Signing time: Tue 26 Aug 2025 10:03:03 +0000
Manifest this update: Tue 26 Aug 2025 10:03:03 +0000
Manifest next update: Wed 27 Aug 2025 10:03:03 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: oAP1UvMb5f1NQULDOjX2cWkydq50PscWEkiMb2fz100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d4:c6:81:15:e3:68:73:44:ad:77:ea:08:fb:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Aug 26 10:03:03 2025 GMT
Not After : Aug 27 10:03:03 2025 GMT
Subject: CN=24f79bfe0e091e1f9baa8e904d1be2f1903d45b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:65:8e:1e:1b:7c:f2:2f:ce:c5:fa:4e:82:
69:ce:a4:97:ad:1c:73:a8:b3:ff:1f:2b:5b:20:50:
47:fe:6c:de:30:7e:e3:5b:0a:da:b3:97:82:66:d1:
9a:fe:b2:31:dc:9b:81:29:99:12:17:c1:d3:b0:d5:
02:8e:e1:45:c9:81:fe:c7:bb:63:fc:ae:7c:fc:c7:
9b:60:f2:86:98:08:b9:1e:eb:d7:58:8a:49:c2:84:
33:81:ab:30:00:1b:9e:95:dc:ef:f8:03:53:9d:26:
31:56:22:16:72:33:8d:8c:ad:70:15:c6:f2:85:b8:
69:c0:e0:6f:05:e9:fd:12:cf:19:94:76:01:a1:74:
39:66:60:f8:6b:e9:6a:46:ca:e4:9b:97:93:e0:f5:
1a:86:b2:14:97:46:e6:d0:95:ba:a0:ea:0f:ee:c4:
c5:74:93:a4:37:09:3b:b5:35:7a:64:27:ab:71:65:
0f:86:47:6f:69:9a:ca:8b:c6:f8:13:1b:63:84:e5:
cb:43:b8:ca:70:10:02:7e:5b:f7:5a:9e:f5:8f:8c:
93:04:0c:3d:7c:3a:96:2e:b7:d5:40:7c:2a:3d:9d:
29:81:a9:1d:0f:0e:b8:61:78:c3:a3:af:40:6b:7c:
95:22:ff:1e:e9:40:01:a5:64:4b:a0:b5:05:19:7b:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:9B:FE:0E:09:1E:1F:9B:AA:8E:90:4D:1B:E2:F1:90:3D:45:B1
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:8d:20:22:ea:38:e8:76:a8:d0:f1:24:79:57:40:95:7c:
c8:33:f7:af:18:cb:f3:8a:79:0f:61:dd:34:3d:5d:92:21:e1:
21:f4:72:de:11:f3:a1:4e:3b:cd:17:0a:6b:aa:d7:14:43:d2:
e8:b6:3a:f8:4c:22:42:0d:90:00:e3:e4:0a:09:80:14:52:b3:
b5:57:14:42:4c:85:25:3e:c3:79:2e:56:bb:53:86:94:c6:c1:
4e:1e:3d:65:7c:c0:80:a8:6f:b3:32:71:2f:49:dc:de:7e:37:
ad:17:0d:69:a6:99:07:21:c9:de:8c:25:ab:97:8c:d9:e9:f7:
6b:a0:0c:5c:d3:80:72:62:93:06:38:7f:90:97:9d:98:69:45:
f2:54:35:f5:72:3a:e6:59:99:f6:d8:23:b8:d5:0c:a3:75:3f:
76:48:b8:03:81:52:f6:92:70:17:2b:4c:3e:14:5f:39:4d:c6:
4c:0a:6f:7e:2e:cb:32:c7:b8:47:c8:a2:01:2c:f3:f3:42:2a:
d9:9c:f9:23:af:53:8a:68:19:4d:25:15:89:17:28:cd:07:5e:
72:11:70:d4:97:5d:7c:d9:c7:c7:c8:c2:fb:d5:0b:af:ce:3b:
20:b9:01:0f:c6:93:e5:e3:e8:5b:f4:d4:66:ba:74:8a:79:cf:
5d:5d:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 18:43:57 2025 by rpki-client