Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File: gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier: ydqBmwkW9x4CwHJMm3hPQyG0F0XXPrdyS16rDcppK8I=
Subject key identifier: 97:23:73:66:CF:66:5D:1A:F9:AE:80:A8:00:11:9A:B0:91:02:5B:48
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer: /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial: 01989D150D1D3978D0D9644DF1949D097189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number: 0A43
Signing time: Tue 12 Aug 2025 07:00:59 +0000
Manifest this update: Tue 12 Aug 2025 07:00:59 +0000
Manifest next update: Wed 13 Aug 2025 07:00:59 +0000
Files and hashes: 1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: 0XLJI4dWh40kArHCIpumUvhkLdMxCAlLw6nWy5Oyp4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:15:0d:1d:39:78:d0:d9:64:4d:f1:94:9d:09:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Validity
Not Before: Aug 12 07:00:59 2025 GMT
Not After : Aug 13 07:00:59 2025 GMT
Subject: CN=97237366cf665d1af9ae80a800119ab091025b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:96:6e:41:41:df:13:46:8c:ad:cd:19:89:
8f:40:3d:c1:78:e3:cc:53:e1:f1:6d:b5:9e:a0:0f:
e6:88:05:0c:e9:57:30:12:12:c4:cf:ee:3c:28:00:
89:17:79:31:aa:4c:b7:52:34:55:46:53:a9:76:bb:
17:af:52:58:9e:30:e9:5a:eb:f4:73:47:05:eb:20:
e1:a1:80:4a:6f:ec:ff:7f:31:86:02:7a:a3:66:99:
04:c9:ad:fe:70:dc:62:0e:2b:65:cd:03:67:12:f5:
89:e8:fd:79:7b:f6:0a:3a:9a:49:2a:3b:3e:60:59:
a2:55:43:2d:1b:3e:71:83:3e:5a:d0:d1:c9:35:95:
07:fb:d6:bd:6a:32:aa:2e:9d:ab:41:26:ec:7a:f6:
51:fe:0a:26:ca:1e:e4:b8:ef:78:96:3e:c4:c4:65:
f5:b7:ac:d4:70:aa:b1:6d:e5:a1:bb:72:de:ca:68:
d7:1f:f1:58:8f:a6:21:e4:b4:e6:99:20:23:bc:9f:
bc:3e:d5:0c:2a:d2:ee:b0:07:a9:96:d0:2c:61:27:
63:42:29:4b:59:36:56:ae:ee:c0:18:98:5c:36:99:
2e:0f:87:1f:0b:bc:40:3f:96:3c:59:55:af:fc:14:
13:7f:a1:72:80:45:56:90:95:e2:97:44:cd:c1:fb:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:73:66:CF:66:5D:1A:F9:AE:80:A8:00:11:9A:B0:91:02:5B:48
X509v3 Authority Key Identifier:
keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6c:4a:3f:ca:c8:5d:0d:54:13:80:0d:8d:08:43:dd:d4:8f:
53:f0:07:df:ae:64:51:33:f2:ab:52:0b:d1:d3:07:06:e7:de:
81:7f:a3:7a:b7:95:7e:28:ad:c8:43:cd:0a:9a:63:cc:87:55:
ea:b6:76:a8:e5:f1:2f:71:95:bd:16:e5:4e:03:1a:df:4d:47:
5c:0d:91:12:19:25:31:ae:33:d5:59:80:37:6f:a9:c6:07:69:
e7:ec:27:15:cf:04:4c:c3:ea:be:c7:8f:27:9c:3d:91:c1:d9:
29:2c:46:5e:00:18:cf:6c:4e:7a:b5:24:71:9b:2e:35:49:02:
de:1d:94:5a:44:1c:af:03:0c:b4:50:0d:ea:68:11:70:f6:2a:
a2:0c:47:7d:9f:3b:3a:1d:5e:f2:10:fe:ac:73:df:cc:10:01:
77:c1:f3:69:e8:2f:58:02:8d:bd:1c:8b:e0:7e:d3:0b:f0:89:
44:4d:97:f5:2f:4a:9a:3c:bb:5f:19:eb:05:bc:56:1c:ab:be:
2a:52:7e:14:8e:22:9f:e7:9f:11:a7:a9:5a:eb:35:34:ed:ec:
76:3e:f1:cc:ba:f5:b7:aa:da:a1:05:e2:46:14:cb:d8:9d:88:
7f:ae:1d:ac:b1:63:55:eb:a4:b4:03:53:10:77:c2:43:5f:06:
94:f1:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:47 2025 by rpki-client