Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: UXNDR0rMSBD1xEav5fvfEo5swITyzjxa1/QRJ7/PtZ0=
Subject key identifier: B6:B1:07:8E:F1:E4:EB:3A:65:B9:58:05:B0:6F:E6:0F:35:8F:83:6F
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019922555FEE35C081DB4F67243E8E0322A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 0211
Signing time: Sun 07 Sep 2025 04:00:44 +0000
Manifest this update: Sun 07 Sep 2025 04:00:44 +0000
Manifest next update: Mon 08 Sep 2025 04:00:44 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: 5MRNjnSjtmKriIWCqIcBCARChgQKUPqNt/QyiWzwd38=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5f:ee:35:c0:81:db:4f:67:24:3e:8e:03:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Sep 7 04:00:44 2025 GMT
Not After : Sep 8 04:00:44 2025 GMT
Subject: CN=b6b1078ef1e4eb3a65b95805b06fe60f358f836f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:2d:0c:6b:1c:bc:09:1b:87:22:08:01:c7:
b2:a8:ac:8f:8b:38:af:00:35:5a:72:ab:15:92:62:
5e:5b:98:08:64:e9:1c:e6:40:35:ef:b5:02:63:f9:
0e:b6:13:84:01:ab:c1:9a:6b:a4:00:63:05:8c:27:
b7:50:80:88:37:5c:43:a6:b6:ff:ec:03:0e:1e:8c:
9a:6e:07:6f:62:31:83:7d:db:66:7a:bb:8f:09:a2:
d5:0f:9d:c8:04:be:5b:03:1f:34:64:cf:95:0c:3f:
20:4f:fe:88:ab:a4:d9:b4:2d:80:5b:d7:23:a5:5c:
f3:ec:b4:41:cb:ea:ca:de:b4:c9:3e:5c:af:04:96:
28:1e:17:14:6f:a5:2c:68:51:c7:80:1f:13:d4:78:
de:37:b3:4d:61:30:83:34:75:ab:97:f2:54:88:44:
92:d3:bd:98:fd:e2:24:b5:03:a7:2f:12:43:88:4e:
5e:8b:8f:a9:c2:dc:19:81:b9:cf:e3:8f:7f:34:4c:
2b:fe:d5:b1:03:cb:0a:78:43:a2:4e:a5:eb:26:8a:
d4:ae:1b:73:d8:81:26:4e:42:b0:0e:eb:41:76:dd:
b8:7d:61:46:a3:d6:dc:db:0f:68:dc:32:72:a7:37:
ea:88:20:ef:2b:65:ac:a8:18:98:22:83:93:49:9a:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:07:8E:F1:E4:EB:3A:65:B9:58:05:B0:6F:E6:0F:35:8F:83:6F
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5f:d9:f9:44:76:9e:cd:cc:ef:2b:fa:76:cb:f4:84:0e:76:
1d:e7:09:49:27:49:d9:1d:26:a8:c9:67:54:4a:f4:a2:9e:05:
b4:d1:95:cf:f5:ba:d5:bd:e1:75:83:df:33:80:ed:c9:d4:fc:
c1:66:71:d4:e8:99:ab:43:12:5b:53:05:06:5c:ee:32:94:eb:
25:48:8d:d5:33:2c:80:e7:b5:70:3a:95:b3:98:e4:d4:ea:c6:
b8:ce:78:c9:ad:45:06:c4:71:f8:3e:96:e4:45:f4:12:3d:84:
0a:6c:93:7c:cd:79:48:99:08:92:a8:df:93:7c:fc:c9:c7:45:
88:af:02:9c:97:39:a8:35:59:49:8e:f2:31:f1:b2:31:00:df:
62:00:95:5a:94:d7:c6:6e:8b:b7:dc:ee:27:05:d4:39:8d:ff:
75:33:bc:03:cd:77:68:68:f4:46:e0:f4:a9:f4:e1:63:8d:8c:
0f:5e:bf:e3:1f:28:f0:5b:68:93:37:91:26:4c:1f:ee:c2:4c:
60:9c:8c:15:17:41:bb:5c:11:06:fb:63:49:77:ca:d4:4b:07:
4d:32:ef:03:a0:b8:57:9d:a1:d3:23:aa:5f:70:bb:4d:79:2e:
86:6e:b5:ba:5a:74:c2:ca:54:7a:ec:09:c3:3d:cd:7e:f1:84:
21:74:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client