Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier: dXLi5Qe75pvnP5BpKo0tQ3K+bms7x+KYm2c09XwMfQc=
Subject key identifier: 1A:E8:8B:21:95:DE:9D:B0:D6:F9:22:FC:8B:43:0D:88:AA:D9:E4:1D
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer: /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial: 019921B1868AAF26E29CA5944E60CD7CC58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:01:46 +0000
Manifest this update: Sun 07 Sep 2025 01:01:46 +0000
Manifest next update: Mon 08 Sep 2025 01:01:46 +0000
Files and hashes: 1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: kpTLFS2cSlsmakILdgZIyVenyggRJHE3n4g3CglVdUs=)
2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:86:8a:af:26:e2:9c:a5:94:4e:60:cd:7c:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Validity
Not Before: Sep 7 01:01:46 2025 GMT
Not After : Sep 8 01:01:46 2025 GMT
Subject: CN=1ae88b2195de9db0d6f922fc8b430d88aad9e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:ad:8a:d6:67:df:51:6e:a1:9c:97:9a:54:
76:a6:08:d8:55:af:80:47:cc:07:24:6d:39:aa:36:
09:10:79:d1:d9:cc:7c:27:82:d2:6f:8f:a5:94:90:
6d:7d:83:95:61:c6:23:63:fe:d8:b1:5d:a5:3f:a0:
a8:30:15:cd:c7:d2:46:f8:7b:3e:d4:6b:8f:7c:15:
31:fc:9f:90:43:f5:18:d9:29:5e:63:87:a1:1b:4d:
a4:5f:08:eb:15:53:fa:3d:e5:25:1b:14:68:02:51:
1a:c8:05:b8:d6:0e:47:09:e1:a3:0f:3b:6b:12:ae:
bb:f7:30:5d:78:69:00:7d:c8:b5:16:d6:36:5b:df:
2d:7c:bf:4b:01:7c:83:79:1e:84:88:9b:2c:d6:6d:
3a:fd:05:45:c1:ad:c0:13:14:66:64:df:08:4d:59:
1a:75:4e:6f:96:1e:20:4a:81:bd:39:fc:88:83:15:
21:c2:03:02:10:a7:46:ac:a1:49:71:d4:7b:c9:aa:
d8:d2:a5:eb:e6:d9:c7:c8:f6:c0:38:24:77:d1:a6:
f5:01:32:25:26:19:88:aa:e6:14:19:02:df:61:b8:
6c:eb:68:28:09:23:e2:90:cd:4d:72:2b:dd:f3:60:
3a:6d:99:7b:0f:f3:7f:a8:e4:17:9b:d4:a4:d2:f3:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E8:8B:21:95:DE:9D:B0:D6:F9:22:FC:8B:43:0D:88:AA:D9:E4:1D
X509v3 Authority Key Identifier:
keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:25:a9:6c:8e:91:10:36:45:c8:0f:d9:7d:c2:4a:39:d4:3c:
11:c5:59:91:f6:2f:dd:66:73:c4:b1:54:f1:0a:86:49:f7:c9:
c1:41:92:66:8d:62:46:1d:9d:06:3c:ae:62:95:a9:2d:58:f0:
31:69:c8:38:42:ae:52:c3:7c:39:10:b4:b0:7d:24:f8:ea:6d:
41:80:50:1b:6e:7a:ca:f4:5e:85:42:ca:f1:6c:52:64:72:a0:
33:88:d9:75:c0:08:0f:66:82:4e:7c:77:c1:78:5a:ed:e8:38:
6e:09:45:04:84:c2:c8:ff:ef:c6:fd:09:a9:5e:14:65:b1:67:
89:98:f9:b7:cd:17:90:c5:7a:3d:34:98:43:d8:0f:32:2b:67:
07:b7:5b:23:67:8b:e5:e5:26:1c:2c:55:cd:2c:90:ad:d1:eb:
53:1b:35:94:a4:6b:ff:a2:eb:4f:78:30:35:69:74:dd:e8:d4:
2f:dd:72:0b:b9:7d:db:86:c0:73:85:8f:5c:35:78:b4:fd:0e:
27:e5:32:ca:22:f6:51:c7:de:80:50:04:9c:e4:fb:2b:35:11:
fa:7b:e7:39:f9:2c:51:04:da:ea:28:f7:41:75:e9:a7:2c:13:
46:d2:17:60:6c:f0:d1:3a:e8:30:01:c6:a5:9b:79:02:9d:da:
7e:d4:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:03:59 2025 by rpki-client