Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File: gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier: wntu3kDcz7vavstng/tLjgrgMYXcXzVP0ijXXZKVJxE=
Subject key identifier: C8:58:DE:E5:4E:62:0D:74:C9:30:14:42:B5:E5:34:8B:8B:E6:3C:D5
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer: /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial: 019894B73CA60D423D8C74F90928599CA898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 16:01:33 +0000
Manifest this update: Sun 10 Aug 2025 16:01:33 +0000
Manifest next update: Mon 11 Aug 2025 16:01:33 +0000
Files and hashes: 1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: kMXPwelecyOhA/vaFEMWuRxEBGTSueR9KAPPTQW0gcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:3c:a6:0d:42:3d:8c:74:f9:09:28:59:9c:a8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Validity
Not Before: Aug 10 16:01:33 2025 GMT
Not After : Aug 11 16:01:33 2025 GMT
Subject: CN=c858dee54e620d74c9301442b5e5348b8be63cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:67:f4:5f:d3:07:54:df:7b:60:61:42:62:
24:d1:f4:94:8b:43:1f:e6:03:f8:51:54:72:c0:34:
de:d0:a4:46:df:b3:7c:6f:96:54:32:51:3a:6e:67:
4b:ac:c8:df:c1:cd:02:d3:4b:ed:16:e0:83:48:6f:
f1:1a:e7:a3:b4:85:bc:43:f7:b8:b3:08:4a:2f:0a:
ec:66:c9:b9:03:51:7d:e5:25:1e:83:8c:94:2b:73:
52:f6:00:6f:39:2d:e1:a5:06:cf:87:ce:0d:91:e5:
0f:7d:84:d4:da:76:2d:4b:41:9e:9c:51:c8:c4:d9:
54:83:0f:32:fb:11:5d:a3:92:08:1e:57:35:63:be:
af:1d:ef:f1:f0:66:27:27:9f:dc:1a:0d:54:c8:bd:
35:97:5e:24:ff:85:6d:75:d9:a6:d2:23:38:e9:79:
f5:c6:c5:e8:03:bb:ac:2f:c2:8b:c5:d5:2e:9f:8c:
4a:ff:ee:02:46:db:e6:2c:f1:3b:44:c7:ae:b6:a6:
4b:bd:88:76:bd:7c:04:d4:81:fb:4d:f9:3a:02:57:
fc:94:2d:bf:71:83:05:e2:62:ac:bc:1d:7a:80:30:
84:bf:3b:e3:ba:47:9e:7e:d7:bc:33:74:79:51:87:
71:62:33:1a:ab:46:ad:33:4b:d1:04:79:29:d8:26:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:DE:E5:4E:62:0D:74:C9:30:14:42:B5:E5:34:8B:8B:E6:3C:D5
X509v3 Authority Key Identifier:
keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:6c:7e:2e:11:3f:ab:61:48:f0:ef:1e:6b:2b:be:31:5c:
84:1b:30:21:ca:79:58:b2:b8:6a:c7:65:4b:1f:1e:08:f1:80:
49:b4:cd:ff:80:4b:21:6b:a4:7c:f8:29:75:ee:cf:7d:b6:91:
2c:25:9b:60:f6:25:fc:50:14:a4:dd:6b:2c:6c:60:dd:c8:e6:
8e:fb:10:7b:a0:a2:09:6b:02:9a:9d:c2:e6:b8:12:41:d3:d2:
62:a2:e3:57:ce:34:b1:4f:f3:fb:cc:83:59:96:47:21:4d:21:
70:e9:7f:dd:a2:6d:27:c5:28:d9:01:7e:69:0b:34:50:c9:e3:
99:aa:48:70:fc:23:4b:fd:ea:4c:cd:d4:92:d1:25:f3:c7:01:
91:e6:3a:98:5b:a4:d1:e8:b1:51:4c:9c:6f:e7:ed:0e:0d:79:
05:b3:84:ba:2f:13:44:d0:f0:9b:0a:08:64:df:ee:86:d4:e2:
fb:eb:95:45:18:0d:f3:3b:bd:76:eb:be:25:44:9d:e0:02:c2:
28:9b:9e:db:fb:11:d8:a6:55:3b:66:ee:48:24:3c:ba:e8:e6:
c0:a1:cd:41:53:28:c8:68:24:4c:40:05:ec:82:7b:05:b0:ab:
fe:5c:2e:2e:9c:a3:e9:bc:3b:6a:42:37:d6:87:6d:a6:e1:1f:
9f:28:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:34 2025 by rpki-client