Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: 6aj3HzFyucter9MvySPNVEu6zM6CaeJ/SKK0acD/kZ0=
Subject key identifier: DB:D4:B2:5C:FE:87:31:1D:E5:DF:68:CD:18:6A:DE:B9:D2:40:F2:2B
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0198820C3B67CD65955885E19DAA796B7C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 01:01:36 +0000
Manifest this update: Thu 07 Aug 2025 01:01:36 +0000
Manifest next update: Fri 08 Aug 2025 01:01:36 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: NFZFq0n2Txtpqr46imV4RkU92wgLI5qQdkWTKHtwvt0=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:3b:67:cd:65:95:58:85:e1:9d:aa:79:6b:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Aug 7 01:01:36 2025 GMT
Not After : Aug 8 01:01:36 2025 GMT
Subject: CN=dbd4b25cfe87311de5df68cd186adeb9d240f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:06:1b:8d:a1:27:e1:86:32:df:49:9f:fa:
b7:11:7f:5f:89:b2:18:d6:17:4b:49:88:28:6e:10:
47:65:81:36:f3:f2:80:f9:76:39:ff:7f:4a:1a:f7:
cf:bc:b2:a8:ff:fa:48:78:19:c6:a8:b6:1b:80:3b:
79:8c:70:67:b5:03:bf:68:a8:69:2f:1b:73:51:de:
f6:a5:1a:c3:c7:d0:03:d5:16:64:6a:b7:dd:4c:5b:
a7:ed:54:49:d7:c6:9c:9c:70:c2:2d:a7:41:0b:27:
e7:bf:ed:68:f2:8c:fc:50:5c:23:cb:9f:7f:2f:41:
aa:31:55:4e:36:55:c7:41:d2:a9:c3:bb:47:2f:cc:
8a:6e:9d:61:54:ab:84:14:93:e2:2e:84:7d:e6:c0:
c6:ae:1b:df:2f:d1:f3:59:a0:f4:64:7a:f4:0a:28:
fe:e1:1e:dd:c9:bf:b1:a9:00:16:e2:40:5d:fb:d6:
ab:6f:53:d5:c5:50:21:c4:cd:22:ee:88:a7:fe:d8:
08:42:40:d1:94:01:f4:c3:60:de:f9:1c:b2:8e:a1:
4a:06:1a:0a:53:99:a4:73:3c:53:d8:5d:cc:ee:c9:
34:f4:a1:b8:0d:4f:42:04:7b:ba:d2:84:29:7e:8f:
b6:8a:11:65:ef:00:92:92:04:2f:49:c9:78:25:bf:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:B2:5C:FE:87:31:1D:E5:DF:68:CD:18:6A:DE:B9:D2:40:F2:2B
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:ee:c4:b3:5a:eb:4b:2a:2b:26:18:2e:64:d0:85:63:18:
25:23:46:53:2f:59:95:45:ef:eb:c9:06:56:05:f2:8b:c7:e9:
89:81:82:5d:09:7f:82:f2:69:d3:fe:6b:1a:54:5f:76:01:a6:
c2:a4:c3:7b:20:08:9d:fd:6e:63:fa:2e:de:46:cd:07:f8:92:
64:7c:19:de:ef:94:df:da:1a:0c:27:38:9a:17:50:6f:95:f2:
b9:31:dd:f7:32:b7:3b:86:fa:f6:2f:ff:ca:49:fa:fb:d5:31:
79:48:52:ef:fa:e1:9b:39:f6:c4:1e:eb:17:26:db:23:88:2d:
2d:47:48:ad:41:b5:d5:f1:be:01:d9:73:0c:a0:76:66:f1:32:
3d:b6:1a:21:b1:6e:5a:c7:b9:e1:6c:bd:ec:02:2e:7e:b7:8b:
86:82:dc:2b:c5:26:60:3e:dc:11:6d:57:50:dd:0c:8a:50:20:
26:da:b6:40:aa:7c:69:b6:ed:09:72:74:71:56:7f:04:40:61:
80:9c:00:9a:31:b2:34:84:bf:80:63:66:20:fc:a2:21:1c:1a:
eb:3a:6a:34:e3:d2:9b:8c:41:f2:1c:74:5d:40:80:53:61:7d:
1a:78:70:a1:d7:0d:bc:32:b4:bd:de:a4:5e:f3:d9:30:79:d8:
31:8d:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:09 2025 by rpki-client