Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: 9BeyJiTYoeKzW7gpy6fZqJfmsnnvoyyJYjymdAwQeWA=
Subject key identifier: 03:30:2A:BB:BF:DE:68:CD:15:90:3B:6A:50:00:E5:7D:F9:EB:9D:58
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 0199239F76756F77ECB892164B7F89878650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:17 +0000
Manifest this update: Sun 07 Sep 2025 10:01:17 +0000
Manifest next update: Mon 08 Sep 2025 10:01:17 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: cY7D1a5xmvKt4RMpOZ3zHlMO7R2S3wUmMbBoAu8Givc=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:76:75:6f:77:ec:b8:92:16:4b:7f:89:87:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Sep 7 10:01:17 2025 GMT
Not After : Sep 8 10:01:17 2025 GMT
Subject: CN=03302abbbfde68cd15903b6a5000e57df9eb9d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:d6:a0:4f:48:b1:8d:89:8f:d5:04:a6:11:
97:bb:86:b5:33:bc:03:a3:2c:ae:d5:11:a5:9a:9d:
c0:4c:e9:7c:e8:44:ea:37:42:6c:cf:44:fd:7c:b6:
48:84:e9:00:45:c2:af:aa:80:cd:ce:ea:56:16:74:
35:c9:32:9d:a0:21:34:e0:90:4a:7d:6d:35:e7:c2:
7f:89:de:ee:5d:02:7c:74:c5:f0:8e:33:50:6f:3c:
c7:2d:29:fc:a9:45:c4:7c:27:fd:63:73:f5:78:5a:
8a:b5:a3:1f:d1:b2:0f:60:02:ad:40:88:98:96:6a:
e1:49:57:b9:c7:be:18:d7:d7:d6:3e:a4:ad:7e:2e:
a9:b3:aa:ea:58:a3:a1:f9:e0:09:65:5d:5a:d3:aa:
51:6f:0c:e0:af:55:10:a1:ea:6e:d7:38:56:3a:df:
ed:8c:cc:12:c9:5d:10:7c:35:84:07:55:d1:44:eb:
78:bb:95:42:d7:65:28:0b:fa:7e:5b:f8:5d:5c:1a:
93:70:52:f6:ea:ed:9d:89:29:29:7a:be:7b:82:a3:
34:9a:56:9f:31:8c:f5:3e:ac:e6:4a:10:b4:41:91:
ba:17:4f:55:35:6c:7a:61:fa:55:13:d8:d9:de:38:
14:b3:8a:57:34:31:3a:30:ae:80:5d:d0:a5:e8:35:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:2A:BB:BF:DE:68:CD:15:90:3B:6A:50:00:E5:7D:F9:EB:9D:58
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:35:2a:c2:65:89:8a:f8:10:7b:1a:6a:57:cd:9a:13:79:d1:
20:49:64:81:39:35:a0:bf:8a:0f:d6:49:23:e6:7e:3e:a4:e2:
b7:ac:fd:92:20:36:9b:ed:32:88:f4:b1:2c:50:f3:99:11:f5:
9d:2f:a1:6a:34:c1:c5:b1:9b:e6:c4:b0:11:18:df:62:c2:d8:
54:82:da:fa:e7:5d:7e:78:ce:e9:dc:47:5a:30:49:8f:3f:6f:
86:88:21:49:38:e6:21:f4:45:b9:cb:bf:22:f6:6c:29:db:a7:
4b:df:22:fb:25:72:75:cc:2e:4d:fd:1b:3d:b6:f9:19:d2:d7:
22:61:17:03:a1:c7:61:e8:41:a1:0a:90:82:40:b8:02:38:5d:
59:d5:a6:78:0c:7d:b1:a2:0f:11:42:d5:15:e3:e4:45:98:fb:
fd:15:c4:5c:a8:9e:9c:b9:c6:fc:7b:e9:0f:c5:19:ff:35:c0:
9c:44:de:a0:88:fc:61:42:ed:ad:19:00:00:cc:21:9a:e2:f0:
c4:db:5b:29:e1:cc:a8:a9:ee:05:7d:6a:e2:9d:f4:65:1d:14:
87:fe:77:2b:ee:a5:7e:66:bf:29:55:11:81:54:0e:98:e2:f9:
40:b3:bb:b9:f9:77:fe:35:93:4d:44:0f:fe:9b:8d:30:e6:da:
34:d5:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:13 2025 by rpki-client