Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: H6MPexveHp9SypnpO/v+YrowGuLCj3M6M8t6BHmCFsg=
Subject key identifier: 80:AC:72:EB:20:11:87:0F:02:EC:FF:77:86:7F:64:60:90:B9:E1:D1
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 0198A23BFFB6EA49D8A4DC353695EBA086AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 0F91
Signing time: Wed 13 Aug 2025 07:01:37 +0000
Manifest this update: Wed 13 Aug 2025 07:01:37 +0000
Manifest next update: Thu 14 Aug 2025 07:01:37 +0000
Files and hashes: 1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: SNvjvitXim7YkbnFY8cPXnEt/TwqEgUHs4w63TYHvO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:3b:ff:b6:ea:49:d8:a4:dc:35:36:95:eb:a0:86:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Aug 13 07:01:37 2025 GMT
Not After : Aug 14 07:01:37 2025 GMT
Subject: CN=80ac72eb2011870f02ecff77867f646090b9e1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:f4:59:d7:38:c0:a2:65:76:4d:9f:70:c6:
8c:b1:44:77:ab:fd:f4:22:2a:0d:04:bd:5d:d3:93:
e6:8c:c2:ea:f9:36:95:b6:56:d2:17:a2:2a:71:20:
32:96:83:c9:bf:79:7c:91:40:63:ec:ea:7b:ac:82:
77:04:2d:00:4f:61:35:60:92:d0:28:d0:db:e3:dc:
e1:74:24:57:d0:8f:11:09:bc:99:ef:b5:59:16:4b:
63:63:4f:2f:f9:ea:9b:0f:f1:f2:94:f2:b3:29:64:
e7:5f:78:47:58:1e:6a:94:89:30:1b:0f:61:a1:e9:
2d:b8:d2:f7:a8:55:54:2b:33:4e:f7:28:15:78:0b:
a2:89:4d:77:f1:88:a2:d1:a0:69:07:6d:1c:a3:f7:
c1:a3:45:32:8b:67:a4:93:e8:a1:c6:50:aa:e3:8e:
6a:92:a1:20:c7:c0:a3:d3:c2:59:ae:cc:e3:44:31:
53:0f:6b:ad:7b:66:60:f3:3f:9b:3a:da:28:7e:ca:
b2:91:56:25:3f:25:0e:a0:84:10:aa:a1:da:9d:25:
1e:36:ce:e2:1d:1e:dc:c4:a5:0a:3b:58:20:3d:c3:
57:30:f1:eb:55:37:2e:46:37:28:b7:15:9a:c1:68:
df:73:71:53:a2:84:54:c0:c8:68:8f:a9:be:95:71:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:72:EB:20:11:87:0F:02:EC:FF:77:86:7F:64:60:90:B9:E1:D1
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:45:ca:7c:56:e5:1f:e1:bc:d2:62:75:dd:74:ca:99:89:
bd:36:0f:60:9c:7c:ba:d3:c7:75:03:ff:78:1b:31:47:36:05:
95:b7:15:27:3f:09:11:e9:76:77:2a:f9:b9:8d:5d:2a:52:83:
52:81:9e:ff:c2:c3:74:2e:a4:87:5f:1b:bb:a0:ab:44:b6:80:
8e:44:99:fe:2c:ac:7b:fb:3b:3a:94:4e:e0:ee:93:4e:ec:5c:
65:cb:2a:b5:d9:ec:14:45:a4:ab:7f:2f:e1:87:c8:19:c7:9a:
a2:a6:9e:be:8d:97:18:e0:3a:c3:29:ca:9f:80:20:8e:c1:20:
6c:bd:9b:28:22:d6:46:d7:54:2e:b4:a4:25:e1:0b:5e:60:a6:
8d:d4:04:2d:21:0d:30:bc:9b:b6:b1:80:de:ed:ac:13:cd:f9:
56:92:a2:77:cb:3c:b1:3f:9e:36:1c:47:c0:09:b1:b5:e9:13:
26:94:c9:1f:b4:71:5f:64:a1:ae:db:fa:51:4d:14:fc:cd:6a:
79:81:60:d2:38:22:d8:bc:60:e6:0e:2a:56:b7:42:40:a7:3b:
98:50:92:2a:2a:29:6a:ea:54:a6:93:04:2e:3a:63:80:0e:50:
e8:30:f5:c7:74:d5:b6:c2:85:2e:4f:89:fc:5c:3d:5c:98:9c:
6d:07:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:40 2025 by rpki-client