Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: aZgvOPoCdw3dVqikQEBi0ht4JoYGpBw/b+3LWkQViqA=
Subject key identifier: 03:30:1F:C7:08:5A:52:2E:E3:8A:FE:83:72:7F:66:69:7D:66:9D:DA
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0198744FD7A41D54B9C0BB37AE9214073FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:46 +0000
Manifest this update: Mon 04 Aug 2025 09:00:46 +0000
Manifest next update: Tue 05 Aug 2025 09:00:46 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: 84pQ8UvTmuKTQ59WycP598yz8ktZjgTH9jcmn71A8nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d7:a4:1d:54:b9:c0:bb:37:ae:92:14:07:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Aug 4 09:00:46 2025 GMT
Not After : Aug 5 09:00:46 2025 GMT
Subject: CN=03301fc7085a522ee38afe83727f66697d669dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:57:46:f5:a3:3b:3d:9e:56:ab:aa:ae:75:
9e:c8:ff:6e:07:b9:a8:ef:a5:4b:7c:c9:1b:a3:5a:
2f:74:35:a6:d2:31:7c:c5:9c:b2:7a:13:3e:ee:43:
06:77:81:c0:62:c4:f5:ff:50:6a:da:4f:16:cd:5a:
32:3e:e0:a4:77:ad:40:a8:d5:40:8f:b4:87:1a:b2:
02:71:1e:41:3f:13:e7:4f:62:5c:a7:9e:3a:d2:99:
48:38:27:9c:6c:4d:54:90:0b:f4:2d:3d:a2:3c:62:
db:e9:f2:ca:0c:c5:55:1b:c5:8b:4c:1c:77:5e:03:
ef:0b:3e:81:34:2c:16:f5:41:38:d8:a3:c8:6d:dd:
3c:75:2b:f2:b8:c2:dc:64:aa:e0:c8:88:61:81:6f:
9d:51:f6:9b:b4:9c:de:3c:d9:e6:51:a8:a2:3e:a1:
6e:bc:f1:12:8b:da:19:3d:e6:82:8b:3a:d2:63:34:
27:0b:f5:f1:75:40:ee:5c:ff:1b:19:9a:33:13:be:
eb:c8:4c:7d:d1:0f:7d:7b:5b:05:f6:c1:70:a7:88:
4c:95:25:b9:6b:d2:00:5e:9b:c4:0c:13:e0:40:2d:
fe:6b:21:24:91:03:36:d9:df:fa:46:c6:cd:ad:2c:
f9:2d:02:fc:43:cc:c7:ac:06:fc:cd:bb:51:f1:0c:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:1F:C7:08:5A:52:2E:E3:8A:FE:83:72:7F:66:69:7D:66:9D:DA
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:50:c6:f7:f1:e0:28:28:c0:a2:d9:a2:7f:63:f0:3e:1c:
69:c3:53:fc:f5:a6:11:a7:4a:00:8b:06:f0:aa:41:57:98:15:
fa:ff:ed:98:4e:4b:89:ed:3e:13:9f:84:41:0b:b0:b6:bc:e9:
9d:17:d4:2b:86:4a:17:0f:2e:d4:81:8b:95:bd:be:70:1c:05:
d4:3b:24:0b:aa:76:ca:cd:7d:3a:c8:0a:18:33:a7:96:68:c1:
28:8b:a4:cb:c5:53:86:0f:47:8f:03:ff:15:eb:80:0f:31:4f:
34:43:8d:66:a8:fa:ef:aa:a3:d5:0b:ed:30:42:a5:4e:e0:57:
33:50:f8:9e:93:4a:92:94:70:50:30:a9:7d:ab:82:43:c2:4e:
52:03:3e:16:f6:22:46:90:f7:36:e7:49:63:38:cb:eb:92:a1:
7d:c2:ef:eb:46:07:12:0c:b5:27:df:6b:51:d7:c4:38:45:a1:
0f:e3:a8:9a:9a:af:32:d7:82:1e:3a:ae:d7:be:d6:5c:b1:61:
09:87:db:e4:59:1e:96:5f:42:28:f2:89:b8:2c:c9:71:fb:e3:
68:3a:40:12:37:a3:82:29:47:aa:64:7c:89:66:d2:13:6a:b7:
e0:16:76:9e:86:34:f1:21:2f:06:fc:a9:c4:d9:c7:9e:17:48:
32:39:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:03 2025 by rpki-client