Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File: gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier: f7sHNQ6ogNQj7XDRKHlrMmTkVV1nlRJvIoXfUGwiz2c=
Subject key identifier: F0:3E:AC:68:8D:45:51:37:7A:B1:67:A6:09:E1:32:69:BC:96:99:CC
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer: /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial: 0198816768EBD19E004E98A68CDD7FC7B70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number: 058C
Signing time: Wed 06 Aug 2025 22:01:34 +0000
Manifest this update: Wed 06 Aug 2025 22:01:34 +0000
Manifest next update: Thu 07 Aug 2025 22:01:34 +0000
Files and hashes: 1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: G/br9bT7W3ceHloTU5wgNpFfz4+JZXOCG5V9CEdL0sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:68:eb:d1:9e:00:4e:98:a6:8c:dd:7f:c7:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Validity
Not Before: Aug 6 22:01:34 2025 GMT
Not After : Aug 7 22:01:34 2025 GMT
Subject: CN=f03eac688d4551377ab167a609e13269bc9699cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:22:85:53:ad:fa:0e:64:62:2f:d0:26:ea:
82:3d:b6:8a:cf:ad:72:2d:3b:39:df:d8:9e:49:4a:
d7:a1:ea:af:bf:c7:b9:5d:a7:2d:86:14:90:03:e4:
ea:2c:4a:c4:31:b0:37:6d:21:e2:45:69:58:44:fb:
26:15:bb:06:e1:41:c8:d9:61:7a:f9:fa:4a:7d:c0:
37:40:f9:11:40:5d:cf:89:14:1f:de:78:d0:05:df:
b5:3f:86:ed:e5:94:d1:98:56:53:6d:1f:97:c3:68:
71:26:a3:36:71:15:08:79:50:db:79:66:58:bf:b1:
54:ba:8a:8a:04:01:0b:d5:13:e7:7a:b2:b7:4d:f7:
4c:42:6f:34:c2:63:af:ad:3e:d8:2a:55:83:ce:91:
2b:57:55:20:47:db:1a:71:c7:ff:da:ac:35:ab:d2:
1f:d8:0c:9f:8b:1f:6b:47:35:19:42:74:86:70:81:
50:72:7c:6a:a8:d5:4f:d8:9d:07:33:23:be:7b:67:
28:cf:83:44:b8:7c:88:88:78:c9:68:63:d5:fa:de:
65:a4:9a:39:59:18:4e:97:9b:34:a2:81:6d:fb:13:
8f:c9:91:98:ed:61:a7:c7:4e:a3:6b:7e:c4:9b:3b:
b0:5d:4b:ec:36:21:3b:32:c1:bb:ed:af:b0:07:51:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3E:AC:68:8D:45:51:37:7A:B1:67:A6:09:E1:32:69:BC:96:99:CC
X509v3 Authority Key Identifier:
keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:72:a2:9b:df:6b:1e:bd:ba:08:86:1f:b2:ef:60:8a:35:2f:
4a:22:21:07:26:03:22:7b:94:31:17:d3:86:2b:c9:69:c1:4b:
ed:9b:1f:a3:aa:b7:6b:7f:29:c6:49:43:ba:db:46:e5:73:5a:
ae:b7:6a:8c:f1:42:b7:da:cb:e4:92:23:ac:a1:86:f9:88:da:
e4:8b:e0:42:62:16:01:8c:fd:38:0e:1d:1b:07:d8:fb:bd:e9:
a5:0b:ea:00:00:1c:47:b1:b3:97:38:02:73:9f:3c:f7:51:be:
8d:5e:81:66:b6:9d:a1:ae:7f:95:a5:27:5d:12:9d:ff:b3:c7:
08:78:ff:97:6b:0f:e0:b1:34:fc:20:c2:75:f6:61:f4:b1:f3:
a8:ed:d2:f4:1e:bb:87:44:bf:d9:21:31:84:7e:c3:6a:57:7c:
f9:3e:51:32:3e:45:3f:68:6d:71:ab:2c:86:b0:c1:12:bc:45:
f3:25:f1:69:a5:e4:02:cd:3a:6c:e5:ed:b7:1c:ea:57:4d:1a:
47:e2:02:f8:25:42:f1:78:89:49:99:e9:18:8d:49:eb:44:4d:
1a:15:28:4a:f5:50:83:b0:24:d9:57:85:30:d0:24:17:cb:8a:
6e:44:c8:46:c1:ee:24:da:1e:51:0f:25:c4:6e:e8:3a:f3:df:
64:0b:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:03 2025 by rpki-client