Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: Xo+zvE2fFjmsRDquZJn2vN9VWHPMh6F0+eNgRvu4Z6U=
Subject key identifier: 36:8C:71:1C:4D:8F:7E:CC:5F:28:CB:96:BB:9C:84:0E:7A:96:62:42
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0198477804F0CA58F60556FF490A646C33BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0E47
Signing time: Sat 26 Jul 2025 16:01:44 +0000
Manifest this update: Sat 26 Jul 2025 16:01:44 +0000
Manifest next update: Sun 27 Jul 2025 16:01:44 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: +pAkmD2z9bT60tQxvr4fzn6rlpqqJRvduG0ntDw1Q1U=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:04:f0:ca:58:f6:05:56:ff:49:0a:64:6c:33:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jul 26 16:01:44 2025 GMT
Not After : Jul 27 16:01:44 2025 GMT
Subject: CN=368c711c4d8f7ecc5f28cb96bb9c840e7a966242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:68:4f:84:88:73:e4:69:5a:2e:18:b2:ac:
e7:42:66:fc:6c:77:ce:18:83:9e:10:7e:7d:05:0b:
e5:29:03:f4:cd:40:41:59:47:2e:d5:53:23:84:d7:
ca:c4:83:4b:83:ae:8f:e4:1e:e8:41:fa:52:54:be:
bd:71:45:9c:3b:05:5f:07:d3:d2:e6:3c:a2:83:ed:
fc:71:b7:67:5c:e1:99:35:c0:d3:e2:86:35:da:8f:
12:bd:60:c2:ae:1c:65:07:14:4b:69:49:85:7e:a4:
98:a5:70:74:cb:5e:27:77:ec:bb:4a:d4:03:11:6e:
ff:33:08:d9:2d:9d:d6:87:d7:f5:2e:cc:55:e5:9a:
37:f4:09:6b:09:29:c1:7f:6a:4a:07:af:78:02:b2:
1b:45:87:a0:61:3a:11:43:9e:70:81:a5:8d:2b:1e:
02:8d:2b:f1:f1:a2:ac:11:d8:f9:63:f1:29:ba:11:
6f:85:a7:e0:77:46:7a:81:b0:d4:81:3d:e3:4f:a7:
06:f6:2a:59:b9:c5:23:01:f8:4d:88:ef:c0:df:ac:
b8:61:32:29:34:da:f0:1d:a2:78:81:95:d1:2b:d2:
05:1f:cd:52:d2:9e:44:13:5c:13:a2:a7:42:9e:20:
8b:b8:85:18:03:ae:cd:d7:c7:19:e8:89:cd:f0:75:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8C:71:1C:4D:8F:7E:CC:5F:28:CB:96:BB:9C:84:0E:7A:96:62:42
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:d4:65:ca:a4:0f:2d:7b:5f:fd:fb:24:36:9f:d1:dc:a9:
b9:d6:3e:8e:cd:f2:20:b2:dc:b3:6e:6f:56:a6:4c:0f:af:1a:
b8:8a:0e:76:bc:18:6d:43:8e:0d:00:a3:ec:98:b6:db:3c:b4:
f8:b2:fb:5b:80:34:28:ac:51:92:12:fa:76:dc:cd:fc:68:29:
a1:ea:aa:86:e7:02:16:81:f5:11:4b:74:d5:33:b6:4d:d8:8c:
7b:e4:6b:44:e6:7c:96:14:15:05:1e:fb:09:f5:20:f2:7f:c2:
b4:6d:09:47:cc:05:28:8c:a5:56:82:24:9b:43:5e:ee:bf:78:
9e:94:bd:6d:ce:2c:13:77:00:68:18:13:a4:b2:5f:45:7b:0b:
f6:d3:3d:e0:55:e0:c8:31:24:88:fa:70:26:e8:39:5f:67:03:
dc:34:b2:e3:a3:2e:a0:3b:a0:ef:3f:4a:ef:6c:43:0f:eb:cc:
56:ec:6d:14:af:91:8d:4f:4d:8c:29:83:0b:69:96:21:f2:85:
f1:f0:87:96:11:12:ad:a4:e9:bb:d2:fb:a2:ba:3b:4a:6d:af:
dd:97:71:d0:ca:43:86:3b:6f:34:f0:a6:9a:aa:36:4f:0d:1a:
ee:ac:c5:30:0e:91:8e:ee:49:d0:af:4a:28:a6:11:cf:9c:42:
3e:c1:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:14:59 2025 by rpki-client