Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
File: Gc3YIGweNSxQZeSBeX73evDD3o0.mft (raw, json)
Hash identifier: Bz4Rgx2K4wQXcAz81g3C0/dZmrMde3gShgY0jxF4Eoc=
Subject key identifier: 35:6E:FF:0C:75:44:98:63:52:F5:68:C7:71:9F:CC:32:B7:0E:9D:CB
Authority key identifier: 19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
Certificate issuer: /CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Certificate serial: 01988A33172F676620FD08378C5660325EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
Manifest number: 0CD9
Signing time: Fri 08 Aug 2025 15:01:00 +0000
Manifest this update: Fri 08 Aug 2025 15:01:00 +0000
Manifest next update: Sat 09 Aug 2025 15:01:00 +0000
Files and hashes: 1: BXWkDJgGeE3wLT1lYDsJPAlavfw.roa (hash: irjuewqr+XdI7kgKWav4JZTl4lqEMRRX3Cq/Qdp74jc=)
2: Gc3YIGweNSxQZeSBeX73evDD3o0.crl (hash: 0c/+e0rXA6QSgHfUx+POsSFyZppWltnDI7b8uPbyp2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:17:2f:67:66:20:fd:08:37:8c:56:60:32:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cdd8206c1e352c5065e481797ef77af0c3de8d
Validity
Not Before: Aug 8 15:01:00 2025 GMT
Not After : Aug 9 15:01:00 2025 GMT
Subject: CN=356eff0c7544986352f568c7719fcc32b70e9dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:5c:cf:54:36:31:87:1d:2e:ad:34:7b:46:
88:78:bb:98:df:7f:56:a8:9b:2f:71:b2:a6:c2:6c:
59:8e:2f:8e:a8:b2:bb:8a:81:de:42:31:b0:bb:4d:
35:b1:dc:ff:68:7b:9a:da:3b:cd:6e:75:f0:62:25:
7c:10:cd:33:a4:32:33:ae:b6:e5:56:6d:ed:75:92:
e6:9d:11:2a:54:21:40:b3:6b:c9:a4:44:d4:4a:39:
dc:d3:0c:87:d5:00:5f:8a:e6:1b:60:f0:43:b0:9b:
ce:28:5a:75:34:43:a6:82:76:5b:e1:7d:93:21:8a:
d4:dc:4c:c8:94:7c:1e:77:d4:af:24:a9:f3:f3:76:
d6:dc:7a:28:08:07:04:8b:09:b3:30:4b:5b:9b:44:
51:3f:d2:ef:a7:5a:af:e4:6e:8f:f3:5e:b8:0f:0a:
38:05:a3:f3:fd:c1:36:81:14:1f:94:e5:d9:84:33:
e3:23:55:e5:f7:00:90:46:32:fd:47:4e:83:c5:0b:
26:35:32:c0:1a:f6:73:95:ac:8c:44:86:1f:df:ce:
dd:fa:8d:a9:95:be:78:5b:eb:94:56:93:ae:bb:ae:
86:36:c0:df:6d:f6:24:08:6e:a2:25:92:31:b1:9d:
94:1b:c7:77:c6:b0:ed:94:88:53:3e:d2:f2:9d:01:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:FF:0C:75:44:98:63:52:F5:68:C7:71:9F:CC:32:B7:0E:9D:CB
X509v3 Authority Key Identifier:
keyid:19:CD:D8:20:6C:1E:35:2C:50:65:E4:81:79:7E:F7:7A:F0:C3:DE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc3YIGweNSxQZeSBeX73evDD3o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f25066-9eba-43ac-bbb4-7b1778ddf7a9/1/Gc3YIGweNSxQZeSBeX73evDD3o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:f2:7a:d3:f9:b0:91:ac:89:5e:0d:98:da:41:35:51:02:
6d:3c:f0:ad:3a:5a:fe:b7:b2:8f:01:e9:a0:72:44:04:a3:e9:
b4:36:a6:52:86:b4:2c:99:76:35:f3:a6:6a:a6:ec:31:5a:20:
e9:60:f9:9f:ed:78:e0:c8:da:fe:8e:71:ca:f2:4a:5a:72:47:
ff:04:c4:d5:70:4d:a2:ac:1f:2a:6a:b9:95:c1:e2:48:ce:75:
20:bf:69:cd:63:23:4f:f2:0e:95:38:d6:e0:89:4c:ef:e7:02:
00:9d:9e:9b:0a:14:8f:75:01:14:c7:db:97:37:6b:8e:fc:6f:
a5:0c:31:76:13:40:66:85:3b:bb:3f:b0:dc:92:fd:da:7f:ba:
04:48:17:48:86:99:96:0c:7d:0a:d8:c2:c2:60:24:b7:50:6a:
fa:a5:3d:b7:b8:9e:45:a5:75:e4:d0:ca:4d:13:e7:2b:fe:2a:
69:77:4b:28:06:ad:ed:c8:20:7f:0e:10:8e:e7:9c:11:d3:87:
68:50:1d:be:ea:f6:b9:94:10:d1:8d:19:07:03:df:2d:b1:0e:
b6:47:79:f2:0a:22:83:be:a5:2f:80:50:80:7b:27:42:64:ea:
4d:57:cd:fe:39:09:77:8f:b9:cd:da:a4:66:45:ab:9e:49:b0:
d9:dd:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:01 2025 by rpki-client