Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
File: gK-nCOCY5WlCsWLzTkYzSX864tk.mft (raw, json)
Hash identifier: h+jdDQ9naZ2Bu/w54gF2rg6AIqi2VSGp25ZafjTSojc=
Subject key identifier: C6:BA:77:C2:DE:8D:B2:2D:F0:97:6C:B2:64:43:22:BA:B8:7D:70:DE
Authority key identifier: 80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
Certificate issuer: /CN=80afa708e098e56942b162f34e4633497f3ae2d9
Certificate serial: 0198782D5AFDEF1240B9A097B2025D77373B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
Manifest number: 3A
Signing time: Tue 05 Aug 2025 03:01:34 +0000
Manifest this update: Tue 05 Aug 2025 03:01:34 +0000
Manifest next update: Wed 06 Aug 2025 03:01:34 +0000
Files and hashes: 1: YdAjbfCRxVQuhwuJCOd8n6-9uGc.roa (hash: ryQI+IE9GniEW1zRKSAQBzSoJ8r45pp9QujhZtOYmEk=)
2: gK-nCOCY5WlCsWLzTkYzSX864tk.crl (hash: 7oe8HYtwlinb68BjD6JL93X/WHtlRsvbDl9tp00oLkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:2d:5a:fd:ef:12:40:b9:a0:97:b2:02:5d:77:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80afa708e098e56942b162f34e4633497f3ae2d9
Validity
Not Before: Aug 5 03:01:34 2025 GMT
Not After : Aug 6 03:01:34 2025 GMT
Subject: CN=c6ba77c2de8db22df0976cb2644322bab87d70de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:9b:a8:40:e1:bf:48:d9:0e:52:8f:0d:0d:
bd:00:32:19:aa:e4:93:33:7a:a0:fb:bc:8a:dc:cc:
f8:73:99:ae:ca:de:42:b8:64:89:a2:0f:96:e1:12:
22:e7:b4:d0:2d:28:30:3f:5a:d1:5d:51:ed:bf:ee:
64:50:b0:71:7f:aa:ba:52:e7:55:a3:fd:56:33:44:
d6:da:cd:3f:d0:05:e6:68:d2:36:a5:14:55:10:ab:
93:38:54:da:9b:cc:49:7a:6c:28:e4:5c:0f:e1:d1:
af:40:c6:a2:87:c1:e9:65:a4:26:73:c0:d5:b6:03:
70:15:31:02:56:50:d2:4e:0e:7b:aa:7f:a8:5c:4d:
d1:2d:01:41:e6:dc:7d:ee:b9:20:d5:65:90:bb:f2:
c1:98:7c:77:d8:39:7b:e4:9d:84:09:5a:aa:51:4e:
35:ba:c4:88:87:b7:2b:d4:19:39:86:17:e3:22:77:
40:18:e3:55:2d:5a:32:85:64:91:d2:c5:b1:9b:e7:
f0:d9:95:7a:1f:de:d4:6c:f8:c0:ee:60:a4:2b:b2:
a0:0d:ed:66:b2:1d:a8:6f:ab:92:91:a3:d2:5e:ed:
c6:27:bc:24:68:d2:8b:9a:01:93:6a:5a:88:13:b7:
98:e1:e2:74:21:1b:49:0c:f1:d7:ea:1c:bf:6a:56:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BA:77:C2:DE:8D:B2:2D:F0:97:6C:B2:64:43:22:BA:B8:7D:70:DE
X509v3 Authority Key Identifier:
keyid:80:AF:A7:08:E0:98:E5:69:42:B1:62:F3:4E:46:33:49:7F:3A:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK-nCOCY5WlCsWLzTkYzSX864tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/36e4b8-4beb-43fb-a68e-2a8a2253fe0a/1/gK-nCOCY5WlCsWLzTkYzSX864tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:e5:39:5b:82:d0:e5:bc:60:c2:39:04:0e:ca:94:67:b7:
b6:76:3c:16:59:ec:c1:f9:14:88:17:08:c9:b5:d3:ee:29:04:
6c:fe:f6:c0:56:4f:e6:09:0d:bd:7a:2c:c4:b9:87:55:47:7d:
5b:0e:53:a8:1e:a0:81:0d:23:1d:bc:70:23:b2:ab:80:1b:25:
b7:74:3d:11:1c:be:39:f8:a6:52:97:08:a4:05:34:c9:ec:0b:
e6:a6:2c:2e:92:16:41:b3:18:e5:3a:e9:ef:c1:83:95:ea:19:
21:65:4d:ef:08:75:c0:d4:b8:3b:39:6e:a2:e6:37:64:20:ac:
3e:98:35:00:34:37:63:37:ee:66:e6:6d:c4:4c:4e:25:d3:7f:
78:42:60:e5:43:3e:7b:52:f8:23:4f:95:6c:3a:f4:3b:f9:3b:
48:92:eb:2c:ec:77:6e:b0:10:43:78:1f:df:c8:90:78:27:60:
14:db:cf:63:2e:de:3a:5a:4d:db:6c:20:da:55:6c:e7:12:50:
86:90:73:6f:74:5b:2d:a7:44:e3:0c:86:32:de:d6:26:70:9a:
f0:01:e9:c0:52:15:79:39:0b:8b:06:ed:98:f8:56:e0:ae:3b:
c5:ce:b8:cd:3a:1b:0d:a6:13:f8:89:46:f5:05:ff:55:64:0d:
47:4d:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:26:15 2025 by rpki-client