Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: 8jlxXJ1EbUwDIBWjqgU2xmPv9khNI00PGB/IerDiL1c=
Subject key identifier: 47:B6:01:F3:3E:4F:48:8D:BE:80:38:9E:54:4E:AC:60:E6:71:77:09
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 01987ABFA2B83C733710650273B7B38747C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 15:00:35 +0000
Manifest this update: Tue 05 Aug 2025 15:00:35 +0000
Manifest next update: Wed 06 Aug 2025 15:00:35 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: b3l2UGnRxGvpebImRy9beZP+BMW8zZOH4C+lr18fCKo=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:a2:b8:3c:73:37:10:65:02:73:b7:b3:87:47:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Aug 5 15:00:35 2025 GMT
Not After : Aug 6 15:00:35 2025 GMT
Subject: CN=47b601f33e4f488dbe80389e544eac60e6717709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:11:9b:f3:1e:cd:9a:45:aa:69:9d:24:63:
4e:74:48:75:69:b6:4c:11:b4:46:30:5c:ae:c8:52:
34:04:1f:c3:42:5d:38:2b:e5:c5:1d:e0:c7:6c:39:
30:b9:c8:44:7f:17:35:73:a2:7e:f0:5b:f9:23:ae:
fd:96:a2:11:92:65:e4:2f:d7:5c:53:0a:3b:d8:a2:
f7:56:58:72:81:3b:ea:40:af:f9:ec:21:cf:25:f0:
b7:8a:61:e1:39:33:56:d3:b8:2d:f0:ce:13:58:f7:
4b:d1:92:2c:b5:27:67:7c:b4:88:0c:df:86:1e:0e:
94:b8:8c:cb:a1:1f:1e:6a:f6:60:ab:5f:94:e0:b7:
36:06:dd:65:7b:24:fe:f1:db:42:f3:ff:a2:32:83:
01:51:c2:29:20:4c:f4:b6:5d:58:f0:5a:65:c5:d2:
4a:a5:33:a3:c9:b8:85:a4:62:80:77:bd:45:cb:82:
f4:5c:52:72:24:45:a7:6a:52:b8:7d:4c:89:6d:95:
be:4e:ba:b6:6c:86:1a:f0:b8:81:86:6e:f8:13:88:
32:85:51:ea:19:f4:61:35:6a:92:8d:64:b1:bb:6d:
68:b1:19:ee:99:3c:0a:b4:c3:86:e6:e0:e0:3f:8c:
b9:9d:77:b2:b9:c8:5b:f4:7a:e2:6e:77:c3:61:24:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:01:F3:3E:4F:48:8D:BE:80:38:9E:54:4E:AC:60:E6:71:77:09
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d1:75:6d:84:57:d0:fe:68:e1:30:ba:31:44:4d:91:7f:64:
a9:a0:1e:83:64:06:c1:9c:aa:e9:39:79:ee:9d:d3:ab:a6:8b:
b6:0d:62:92:24:cc:61:19:53:2a:1e:c7:03:70:10:f2:a7:38:
71:3d:c9:15:02:15:11:b3:0a:2f:7e:c2:cf:ee:5b:d4:e1:b2:
12:d1:47:0d:e1:07:5e:6d:bb:c4:f2:39:ee:fb:08:54:fb:15:
26:31:b9:64:61:69:93:22:1d:e0:2e:bd:c8:3a:a8:17:18:e2:
41:78:ac:86:9d:c4:9d:c8:21:18:0e:ea:21:4c:46:3a:da:5a:
b6:0b:fb:cc:1e:04:f3:5b:db:6f:41:f5:45:47:45:56:4d:d0:
37:fa:11:29:e5:09:e4:5a:f7:97:e3:12:87:1f:39:f1:d9:ba:
59:41:a0:40:74:6b:a6:f8:0b:d3:8d:84:0f:18:44:a0:ce:21:
49:94:42:a9:db:0f:54:21:e5:01:0e:3c:82:7e:aa:a8:1d:dc:
43:d6:68:e0:a6:28:95:86:9b:54:90:40:33:55:88:fe:be:6f:
42:f0:5a:f4:3e:7f:95:22:df:fc:a4:ec:5d:3d:4c:92:7a:9e:
4d:f5:49:d8:e6:70:10:4c:11:14:cd:fb:6c:1f:d3:3d:3a:ba:
6c:38:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:38:32 2025 by rpki-client