Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: +28cZUem7Dp1BNMy+iDTqKpFIk7jvPuGcBC2zdA1JVo=
Subject key identifier: 56:88:AA:56:D9:A0:72:4B:E7:AC:69:FD:50:5D:9B:05:02:74:D5:86
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 019933EDF117DB63B201A7ADF48CB161B3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 0625
Signing time: Wed 10 Sep 2025 14:00:55 +0000
Manifest this update: Wed 10 Sep 2025 14:00:55 +0000
Manifest next update: Thu 11 Sep 2025 14:00:55 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: 5Uk3hgw83dV9Tqecunh+djyr2f8gSoOvWKZzfgRvfzM=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:f1:17:db:63:b2:01:a7:ad:f4:8c:b1:61:b3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Sep 10 14:00:55 2025 GMT
Not After : Sep 11 14:00:55 2025 GMT
Subject: CN=5688aa56d9a0724be7ac69fd505d9b050274d586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:1e:0b:a5:5e:21:c2:8d:41:1a:87:77:ac:
7e:b6:d9:a5:c6:75:1b:bf:a5:1d:d0:77:c5:0e:3e:
13:b7:95:fe:3e:ab:6b:d2:60:2f:3f:ed:e1:48:aa:
f0:3a:3c:88:52:76:83:6f:bc:41:e4:91:3e:44:01:
51:dd:da:62:e7:a3:f7:fd:63:a5:5f:96:b0:29:fe:
c1:92:87:e3:1b:d2:01:3a:51:e4:20:54:66:32:ea:
3d:c3:ce:86:4c:3c:d4:2a:df:73:10:c2:ca:95:a2:
33:99:1d:ec:dd:0d:14:2a:7e:a3:ac:89:f0:35:e8:
f5:05:ad:ca:5e:99:18:ac:36:20:a8:25:ae:f0:4d:
ea:51:97:e0:ad:72:85:61:b4:0d:a5:39:ff:72:84:
d4:c7:6d:b9:4e:80:bb:19:d1:e8:ba:05:63:dd:b7:
1a:65:00:28:c6:46:63:4b:eb:f0:38:28:49:3f:55:
f6:a7:5e:67:69:8f:80:54:6c:83:a7:77:d6:aa:cc:
5c:82:29:49:ba:6f:20:99:d2:5a:3d:22:d7:15:4b:
c6:9c:37:c2:90:2d:32:59:4b:f4:3b:dc:c7:bf:9d:
ed:5a:1d:dc:a7:bd:70:03:9d:d7:65:72:0a:e1:11:
ac:bf:bd:d2:d6:ac:b6:65:d4:8c:e9:3a:87:43:02:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:AA:56:D9:A0:72:4B:E7:AC:69:FD:50:5D:9B:05:02:74:D5:86
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bc:1a:5c:a6:82:5d:bd:d9:b8:ab:51:89:03:0d:19:05:1f:
b5:1d:2b:a2:f6:cd:dc:dc:c9:cd:1b:ce:04:4f:ac:d1:82:04:
26:84:0b:d2:4b:96:13:ef:64:ee:25:f1:04:e5:05:6a:a0:5a:
20:1d:35:74:eb:83:9a:6d:56:75:59:42:a4:7c:91:4f:77:df:
0e:96:23:b1:f2:5d:48:2a:57:d8:54:32:de:4c:26:6e:e3:d0:
12:62:be:cd:b5:64:2e:a0:7a:d3:2a:f2:b4:39:f8:c1:a9:3f:
70:eb:94:18:23:54:6c:9f:72:57:39:6c:ab:f8:c7:53:db:cd:
49:d4:68:e8:cc:f2:17:8b:3a:d6:b3:f1:7f:58:d4:c9:2a:ec:
02:52:cd:bc:4d:3b:64:b4:af:f3:83:de:78:9f:b6:de:f0:83:
65:8d:12:a2:21:30:fb:dd:3e:b3:83:53:ee:a1:f5:0f:ba:bc:
cc:56:b3:97:97:99:93:6d:45:f7:6c:34:10:a7:63:03:21:e6:
53:b0:e1:0d:0f:ee:ae:22:d5:73:70:d3:94:de:36:02:08:20:
c7:12:06:99:6f:5e:1b:4f:b3:9f:8f:a6:01:51:30:f7:da:e6:
ef:78:07:ae:61:d8:ca:f8:90:13:ae:e9:71:ff:fe:a4:08:bc:
f3:f8:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:05:55 2025 by rpki-client