Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: SnT/szWNuYTDtNOcK6frrOo+URmuMlUZHyp0kTl4Z+8=
Subject key identifier: 74:59:78:23:E5:D6:05:D9:2A:90:25:F0:CA:7E:1B:D1:C7:AD:14:38
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 01976F99B950FC51A74651C780D5A0A0B8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 0728
Signing time: Sat 14 Jun 2025 18:00:34 +0000
Manifest this update: Sat 14 Jun 2025 18:00:34 +0000
Manifest next update: Sun 15 Jun 2025 18:00:34 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: Bu49uS+6JUM8jsLDe6+URnjcAI9CsU+PVKHTrYZII5g=)
2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:b9:50:fc:51:a7:46:51:c7:80:d5:a0:a0:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Jun 14 18:00:34 2025 GMT
Not After : Jun 15 18:00:34 2025 GMT
Subject: CN=74597823e5d605d92a9025f0ca7e1bd1c7ad1438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:94:56:7b:f1:4d:b0:35:07:65:92:09:e6:
2c:84:97:5d:e7:46:9a:68:27:75:6b:84:6b:50:d0:
7a:f2:28:49:4b:8a:64:1d:9f:c7:67:f9:e8:8f:cc:
44:ae:9a:a8:e0:a6:62:1d:13:e3:30:19:5c:51:8e:
ce:f2:f3:0e:b7:61:0c:72:f6:8f:79:6a:37:e4:32:
d7:ae:ae:a5:30:29:e9:10:3f:a6:56:67:2d:c8:fc:
e6:f4:51:dc:be:4c:4a:11:a7:d6:0a:40:5a:17:81:
25:2a:ea:da:e2:88:04:e7:d7:ce:40:64:66:b6:13:
c9:c1:6a:5d:5c:bc:54:a9:3e:23:03:7b:71:db:aa:
b3:ec:4d:b6:e2:e8:76:ca:78:a8:6a:11:d3:93:b5:
24:b6:c4:04:72:d9:47:0b:ba:c1:a1:56:e2:64:a3:
36:0e:d1:45:1d:d8:db:31:6f:82:04:76:6d:6a:21:
d5:7d:3f:31:4b:4a:d7:0e:14:70:a7:6e:78:72:ae:
83:ef:cc:55:7e:fe:2e:16:d8:22:65:1b:3e:61:26:
36:37:f9:d6:30:b0:8b:a3:93:78:57:61:3a:99:d2:
f7:4b:4c:0e:95:ee:9a:eb:8f:b1:9e:98:a0:09:e1:
69:f0:41:15:d6:c8:c9:7e:f0:bf:41:23:89:29:61:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:59:78:23:E5:D6:05:D9:2A:90:25:F0:CA:7E:1B:D1:C7:AD:14:38
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b9:51:8e:e2:94:68:66:6e:bd:e7:b6:f2:c8:03:3e:54:ec:
6b:c4:7b:3e:bb:1b:5d:b5:86:31:ca:19:d3:63:88:c7:62:0a:
3b:16:b3:46:e0:91:59:34:d5:9e:16:50:6c:6e:b9:d8:21:e0:
cc:15:6a:14:c8:9e:6b:95:eb:be:a2:bd:31:12:8a:01:56:72:
23:8c:67:e7:a1:8a:8b:f0:e2:73:23:8f:26:b4:b7:b6:83:f7:
f5:06:ea:22:97:98:9d:65:8f:71:c2:35:8e:8c:79:e3:1f:0b:
70:72:68:ef:55:ff:9a:24:2c:7b:43:32:39:8b:f1:23:f9:4f:
29:fd:53:68:d5:e1:70:35:17:55:9b:70:e7:58:61:4d:38:a0:
7a:2a:16:a5:33:3e:ca:5a:b2:06:fa:a6:b1:05:7a:58:d6:12:
e3:3b:41:a7:77:6e:cb:49:a4:1e:48:9f:42:1d:28:ec:b7:0b:
f7:4a:b1:e3:2a:d3:6c:fa:ec:93:d8:3a:b7:f0:df:46:fc:cf:
0a:27:27:5b:92:f3:44:b6:34:13:7b:01:98:a6:68:f8:d1:4e:
5f:28:94:4d:d8:49:8d:1c:22:3a:8e:01:7f:8e:26:19:18:5c:
13:5c:ff:98:9e:9e:41:cd:76:ea:65:83:53:20:53:66:45:69:
cb:d7:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:40 2025 by rpki-client