Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: Pi8jpte5bvGUGbQxQ4T1z/R3h5xvqinifyihdFn7Wsw=
Subject key identifier: 58:DA:73:2F:54:85:1B:77:52:C7:D0:CE:EE:B5:03:EF:7F:41:FF:DE
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 019874BD8675CC9200A047D90EA4AC0B3F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 11:00:34 +0000
Manifest this update: Mon 04 Aug 2025 11:00:34 +0000
Manifest next update: Tue 05 Aug 2025 11:00:34 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: OdS61M5Q/FJtxTHrap+Vf3jqrZwSsCKQy8SkSZJwJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:86:75:cc:92:00:a0:47:d9:0e:a4:ac:0b:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Aug 4 11:00:34 2025 GMT
Not After : Aug 5 11:00:34 2025 GMT
Subject: CN=58da732f54851b7752c7d0ceeeb503ef7f41ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:8d:d1:72:79:47:3c:0c:9a:41:c0:0f:60:
30:bd:9a:c5:7d:15:24:69:09:83:a2:42:ff:a0:09:
a9:cc:78:be:7c:d0:15:45:47:ea:68:77:38:a4:da:
73:c4:07:9f:e5:5a:58:e4:b2:02:92:77:02:e5:c1:
bc:71:f1:b2:46:1a:f0:2b:ef:7a:59:82:50:c0:b9:
df:68:da:6d:be:b7:37:fd:03:dc:33:5a:48:f2:4d:
29:e6:bf:c8:2e:18:ba:7b:f2:aa:05:c3:e7:fb:4d:
3a:0c:a8:a7:ad:ea:11:a9:35:ad:62:9f:59:eb:65:
95:ab:38:c2:c6:b2:5f:3b:19:ef:5d:2a:09:7a:ee:
c1:a4:cf:02:44:c0:0b:6e:c1:7d:f4:64:83:b3:d0:
87:8d:00:93:01:de:58:23:3f:dd:85:60:9c:70:0d:
4e:e6:cc:d7:41:a3:35:2f:06:c4:33:67:5e:35:fb:
fa:56:db:28:48:81:bd:61:d5:4e:bb:7d:d1:de:6f:
bb:a4:22:49:c5:66:c4:7b:bd:07:69:4e:97:4b:db:
e3:9b:41:07:dc:e7:b7:82:2a:17:3a:52:85:d8:e2:
0e:d4:75:e9:af:2e:7a:77:51:ca:6d:1d:2d:53:f3:
38:ae:4b:da:43:0a:c6:cd:a1:aa:39:aa:85:64:3e:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:73:2F:54:85:1B:77:52:C7:D0:CE:EE:B5:03:EF:7F:41:FF:DE
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2a:57:0b:ec:f8:2b:0a:83:0a:4d:80:3e:10:ca:73:d6:51:
51:aa:5f:dc:d0:bb:39:25:8a:06:7a:7e:60:ed:2c:84:65:a6:
52:84:c9:be:c0:24:ff:67:26:fc:96:ca:de:bf:30:3c:a1:ca:
d9:19:02:42:e2:09:ef:81:06:07:9e:b9:03:be:b6:a8:4f:b9:
cb:8f:f2:aa:95:09:b3:d1:60:11:af:e4:3f:40:1b:1e:0e:78:
52:97:b9:de:44:6a:8f:98:de:fc:c2:e4:eb:2d:ce:b3:58:8c:
20:6e:1a:40:8a:82:29:05:95:d3:75:05:06:03:49:e6:99:ab:
c7:e6:81:d2:53:5d:20:4d:e0:f6:14:78:f2:55:c3:f5:f8:5d:
06:55:44:ff:33:94:db:04:bb:de:22:8a:fb:c0:93:e7:b8:35:
10:cf:3b:9a:88:42:99:c1:63:34:c3:23:d5:db:93:38:3e:99:
5c:9f:0e:20:92:2b:6d:7e:d8:48:0f:4c:57:83:ee:f4:d1:0a:
58:a8:ff:50:1b:3c:d9:23:66:75:4d:b5:92:c4:e4:46:22:2c:
67:c2:8b:65:96:af:06:65:a4:50:ae:99:04:96:8d:92:37:4a:
08:38:a7:bf:bb:22:6a:86:ae:d7:58:11:6e:c3:36:fb:fe:3b:
b6:e4:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:15 2025 by rpki-client