
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: 9FKHvQL0nL201+sfvK8g3hmSvRS2xGoDdPV9Al8QJAI=
Subject key identifier: 2A:C3:83:3E:45:71:54:93:7A:C5:DC:15:BD:9B:34:16:B6:BA:CD:9D
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 019888446F2418C4B619ED51DC425F9D5BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 06:00:42 +0000
Manifest this update: Fri 08 Aug 2025 06:00:42 +0000
Manifest next update: Sat 09 Aug 2025 06:00:42 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: GzitcD6gPgkiXXmFSAGgzIak2a19URkDMUwzmuk4pnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:6f:24:18:c4:b6:19:ed:51:dc:42:5f:9d:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Aug 8 06:00:42 2025 GMT
Not After : Aug 9 06:00:42 2025 GMT
Subject: CN=2ac3833e457154937ac5dc15bd9b3416b6bacd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:ad:ae:c2:ad:ef:49:01:b7:39:9c:27:2e:
a4:04:54:d7:67:0b:aa:16:59:7f:fa:ea:0e:d8:d9:
24:d3:ff:44:57:d6:79:55:23:a4:f8:e2:e7:d6:8a:
24:ea:0d:b7:d3:df:f0:cb:ee:98:03:76:ac:1b:66:
04:23:bf:9e:3a:dc:10:a2:28:2f:a1:63:6e:f7:3b:
de:30:b0:da:fa:c4:99:7d:5a:e6:07:b7:87:2b:ae:
7c:a1:30:07:52:ec:52:13:83:39:c4:97:80:e1:d5:
ca:3f:c6:ca:5b:b7:26:4f:12:c3:4f:e5:43:ec:c3:
68:98:37:3e:98:b1:64:29:36:47:1a:e6:2d:04:ef:
69:e2:74:e3:e3:24:51:42:6a:86:8e:ed:58:ed:46:
7d:fe:cb:29:c0:45:b0:41:19:ab:cf:e3:28:8b:3f:
32:46:a4:c1:21:8a:f3:1a:99:48:86:01:fb:ba:71:
4d:dd:3d:bf:0b:61:5a:5d:e4:7b:f5:82:a6:62:70:
ad:f2:b6:02:23:d7:c2:52:f3:ea:d8:03:46:05:33:
c2:97:fe:67:7c:20:c3:c1:e0:fc:be:f9:3a:56:ac:
be:5a:d2:e5:96:6a:64:d8:af:9b:55:5e:3b:ff:83:
cc:0c:8d:fc:0a:ec:63:96:04:86:f6:69:69:0b:33:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:83:3E:45:71:54:93:7A:C5:DC:15:BD:9B:34:16:B6:BA:CD:9D
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2d:74:d2:fc:4f:47:34:5f:74:63:a2:ee:a2:44:e7:31:04:
38:41:3b:63:84:5b:d0:f0:d9:71:62:6e:70:5e:2f:00:1a:f3:
b4:b6:1d:4e:3c:c3:c5:cb:a3:ac:ee:36:bd:1f:56:0c:21:0d:
39:ed:46:95:5c:d8:43:f3:62:7b:c4:a7:a4:37:f5:c9:1f:75:
02:29:a5:5f:e7:9d:a9:d5:c0:bb:67:22:28:3a:31:8f:de:1f:
2f:b3:a4:4e:88:80:be:0b:ac:33:23:a2:6f:af:86:68:3d:15:
64:4e:61:3e:ad:2d:18:65:d5:91:09:40:f2:2f:e0:0a:c3:11:
6f:b1:ad:88:62:21:e0:b2:3e:3d:3e:5e:96:9f:61:83:ea:41:
7f:cf:7b:7d:59:bb:b3:74:c7:f6:45:48:d6:4c:7b:ba:54:bc:
73:33:80:4d:81:82:12:9b:1f:78:d2:d9:b8:d4:5c:70:f0:65:
a1:40:ba:11:cd:3e:15:d4:cf:0b:1e:2d:53:df:2d:61:ba:9b:
6d:04:d7:d6:ac:1e:bf:d6:94:48:ad:64:39:ab:38:c9:e1:47:
72:46:e6:5a:b2:b2:a9:0f:dc:26:da:d9:a4:ed:88:99:1e:e8:
7d:b0:fc:8c:d8:de:2b:6d:a5:b6:1c:bd:99:ed:03:6d:c6:57:
d6:4f:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:21 2025 by rpki-client