Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
File: GNl5-JL-uBmXaiX-lH9devN-zH0.mft (raw, json)
Hash identifier: RljZvq0rClZz4tL46kPx2dFYMFFmf9//94GkWSvTlDg=
Subject key identifier: 24:E6:1B:C6:97:D1:3C:5F:93:1D:B5:DB:77:71:2E:91:FD:4B:72:DD
Authority key identifier: 18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
Certificate issuer: /CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Certificate serial: 019849669FEA74C13C75E9E34C1E775261EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:59 +0000
Manifest this update: Sun 27 Jul 2025 01:01:59 +0000
Manifest next update: Mon 28 Jul 2025 01:01:59 +0000
Files and hashes: 1: GNl5-JL-uBmXaiX-lH9devN-zH0.crl (hash: DI3DFdLnC+1K6wVxqgI0OKs8EVQ3462V0AyVtp/fNys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:9f:ea:74:c1:3c:75:e9:e3:4c:1e:77:52:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d979f892feb819976a25fe947f5d7af37ecc7d
Validity
Not Before: Jul 27 01:01:59 2025 GMT
Not After : Jul 28 01:01:59 2025 GMT
Subject: CN=24e61bc697d13c5f931db5db77712e91fd4b72dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f5:86:62:59:d5:85:3b:57:a6:f4:d0:d8:46:
ce:98:6d:fb:20:08:40:e0:2f:71:4b:9d:cb:05:76:
f9:47:4b:66:4a:bc:f4:a8:8a:d8:29:66:f9:fa:63:
c8:44:33:3c:2d:37:89:7c:53:58:40:f8:cd:e0:43:
0c:44:67:db:9f:2f:a7:f7:5b:d3:7f:d6:59:e5:fc:
76:7c:92:9f:97:ab:4f:bb:a8:e3:44:b9:44:0e:f3:
2a:ba:b4:7d:0d:0c:99:c9:b3:7a:55:45:cd:41:24:
c4:6a:4f:ba:19:16:9b:6e:9b:55:19:6c:11:0f:f5:
30:d6:19:f8:66:ef:7a:ac:ae:c0:b1:91:df:a3:09:
98:fd:d3:06:b6:8d:0f:5f:67:80:f9:85:5c:7e:e3:
81:37:2a:7f:2c:67:1d:69:8b:1d:2f:79:61:60:fb:
0f:bb:97:25:88:3a:e7:6a:71:ca:f2:e2:d6:68:8b:
ff:58:e9:22:89:3a:1a:c8:d8:e5:2d:c9:c5:11:b0:
c3:52:49:fa:ed:97:92:81:e8:8f:90:03:51:45:a0:
32:2d:95:5e:b0:e5:11:a7:07:d8:e7:00:ec:1e:91:
09:3b:d6:f0:10:31:69:b7:d6:08:c9:15:a4:58:55:
d1:0b:d9:18:e4:b3:b0:41:4c:ac:be:c8:94:fe:13:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:1B:C6:97:D1:3C:5F:93:1D:B5:DB:77:71:2E:91:FD:4B:72:DD
X509v3 Authority Key Identifier:
keyid:18:D9:79:F8:92:FE:B8:19:97:6A:25:FE:94:7F:5D:7A:F3:7E:CC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNl5-JL-uBmXaiX-lH9devN-zH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/f50b90-f031-412e-a040-ae6abce59ac1/1/GNl5-JL-uBmXaiX-lH9devN-zH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:30:72:f9:e4:bd:b3:3e:32:3d:4e:f1:b6:b4:77:01:5a:a3:
fe:7d:39:0c:65:5a:da:29:e0:3d:c4:d5:54:e7:67:0c:d3:8e:
37:e7:f2:5d:77:84:84:7c:6c:d6:30:dd:94:70:71:df:66:aa:
b9:97:55:d2:71:ef:2e:af:df:44:4a:c2:3a:15:ea:af:6c:9b:
17:d4:18:13:94:cd:f9:08:93:b6:5e:e3:2a:fc:11:6a:f3:c8:
78:94:f6:0d:e6:e1:b6:86:c6:a1:71:09:61:36:31:dd:64:fc:
02:d6:0b:2b:51:52:60:aa:31:89:75:bc:0b:e9:98:d3:5f:24:
eb:67:cc:38:a8:a3:7f:b6:06:97:c9:7a:e9:89:d6:d5:99:2d:
63:7b:6c:52:4b:5b:7d:76:0b:f3:a4:4c:2c:05:ce:33:64:24:
bf:b0:ce:4a:85:0b:e2:b3:3a:de:bb:8c:92:06:6f:04:25:9e:
3b:da:a8:87:f6:66:9f:ab:b4:f9:95:87:de:b1:27:e8:93:dc:
7f:cd:d3:97:c1:a5:13:9a:74:4f:0b:50:02:6d:2a:1d:ca:a0:
27:36:c6:16:f4:17:8b:dc:db:5a:97:bc:b8:0b:29:60:cc:4e:
1f:1d:25:03:ae:94:67:3f:3c:ef:80:31:d0:d3:e4:1b:96:e4:
bc:56:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:44 2025 by rpki-client