Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: 1JTvHVVwlDSyh2uqQbSX19tth/fhTbG3NPD6t14v7iE=
Subject key identifier: 76:88:3A:E3:96:46:CD:C7:93:5D:A5:4B:12:D7:D1:90:3D:56:2C:45
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019878D1A93A3E2960FF4EF52AFB2DB12143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 06:01:02 +0000
Manifest this update: Tue 05 Aug 2025 06:01:02 +0000
Manifest next update: Wed 06 Aug 2025 06:01:02 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: ONHkzdvwUS+TMeI1bkBgkL5N1MLEwnfVbHrwsd6S8FY=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d1:a9:3a:3e:29:60:ff:4e:f5:2a:fb:2d:b1:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Aug 5 06:01:02 2025 GMT
Not After : Aug 6 06:01:02 2025 GMT
Subject: CN=76883ae39646cdc7935da54b12d7d1903d562c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:a3:5d:8d:d9:b2:b8:20:64:7a:a5:c8:fa:
5b:89:8a:d7:65:0f:4a:76:28:94:7b:da:ff:22:ca:
23:c4:4d:e3:ca:d7:0c:fa:84:5a:f1:96:c1:0b:5a:
1c:4e:ce:a0:b0:bd:55:0b:fa:f4:c1:59:10:29:cd:
a5:be:75:e2:b5:c8:89:49:b6:0b:96:32:d5:6a:46:
43:91:07:6c:e7:32:fe:e5:10:7c:c1:d3:cc:12:f3:
43:fe:97:6d:7e:af:41:83:82:32:c0:e3:9e:d1:39:
47:3a:72:70:aa:07:09:19:b5:01:41:7a:c8:dc:81:
56:4c:a3:bc:8f:45:3c:57:1b:c1:c6:70:c6:9d:c7:
3c:85:e7:10:c7:32:6e:bc:eb:d5:c1:59:bc:a5:38:
27:df:b0:df:2c:d3:7c:fe:85:46:b4:3e:d9:7c:b3:
da:66:f3:77:53:2e:27:68:16:37:e1:34:ed:5a:53:
25:5e:b5:dd:8d:ed:c8:af:0d:09:23:7b:68:60:92:
cd:6a:8a:c2:a0:27:9f:c4:1f:0c:5a:db:86:c7:1e:
d7:ff:cf:e9:44:d9:e7:8f:84:f1:19:de:40:c0:df:
a7:bc:44:39:8a:32:80:13:5c:74:5e:f7:92:cc:a3:
5a:47:5b:9f:a1:16:20:e4:5c:34:af:38:7d:5b:3f:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:88:3A:E3:96:46:CD:C7:93:5D:A5:4B:12:D7:D1:90:3D:56:2C:45
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5d:f4:66:d1:a8:cc:de:ca:38:70:72:41:16:6b:23:62:fb:
d6:7e:3a:d4:31:a1:44:aa:e7:46:50:db:34:0c:3b:c4:bb:d3:
03:b3:43:4d:41:ae:7f:d1:f1:d0:12:06:fc:c4:c4:87:30:00:
4f:d1:f7:ab:e8:ed:bb:3b:b5:9f:59:95:be:18:66:b1:f7:ed:
7e:a8:90:5a:b8:7c:1d:4b:b9:fa:a2:0f:ed:83:99:8c:60:23:
58:1b:a9:bf:0b:59:6a:99:bd:a4:8b:19:89:c5:1d:1d:c4:4b:
c6:f2:d7:df:7d:86:1c:94:0b:d2:fc:4e:4d:b0:9e:9e:89:67:
5f:34:7e:74:77:99:fc:b0:5b:cf:ae:47:c8:ee:43:e3:cd:2d:
40:63:3e:4e:05:52:24:40:f3:10:55:79:98:70:6c:a7:70:65:
b8:a4:40:9b:41:f0:97:b1:74:63:f2:c5:44:b7:f4:df:69:88:
56:c1:a6:13:3e:51:fd:c5:56:98:c8:b7:55:19:25:79:a4:75:
8f:e6:b1:2d:30:a1:06:0d:07:31:00:20:91:b6:b3:e6:1a:ba:
59:0f:2d:3b:23:b8:aa:e7:34:e2:af:7b:b4:6f:56:72:9d:d8:
d0:ca:cf:da:f7:35:94:be:bb:fd:46:a2:f9:85:a5:dd:10:e0:
f6:65:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:14:27 2025 by rpki-client