Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier: ZR0V8wdu64hk5GtZVbp7+i1s0HApUtfVjQi0V0xDU4M=
Subject key identifier: 48:66:8D:84:1A:BA:91:8E:09:72:09:D9:3E:69:42:40:23:60:06:84
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 019770AC6D20A1CD2FDC2293ACC7F2FC6EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number: 05AB
Signing time: Sat 14 Jun 2025 23:00:37 +0000
Manifest this update: Sat 14 Jun 2025 23:00:37 +0000
Manifest next update: Sun 15 Jun 2025 23:00:37 +0000
Files and hashes: 1: HuWSmht5WAvI31ALVxohsMAOFVU.roa (hash: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=)
2: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: LA+iu3OMruMAGY0PgWMuYpMUuVS4DfB7VHL6KNvsrug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:6d:20:a1:cd:2f:dc:22:93:ac:c7:f2:fc:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Jun 14 23:00:37 2025 GMT
Not After : Jun 15 23:00:37 2025 GMT
Subject: CN=48668d841aba918e097209d93e69424023600684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:5b:72:59:11:72:98:0d:d6:4e:c3:a9:c4:
7b:f6:55:d5:83:cb:bc:ef:30:10:6b:56:58:3f:7a:
b9:de:b8:1e:3a:69:9f:45:c2:4e:bd:e0:f8:73:c8:
ee:91:7d:27:f2:fd:15:3a:cf:66:e8:91:76:d5:3c:
f4:f2:29:ae:b3:26:28:8c:69:6c:03:03:0e:34:b5:
3a:f5:a0:85:d9:9d:d2:34:ac:d5:21:bc:0c:7c:01:
88:b2:a8:21:ac:4b:50:73:1f:c4:72:cf:8e:d2:9d:
9c:72:ca:66:f1:34:96:6f:39:e8:e0:68:cf:29:88:
0c:8e:3e:64:c2:98:09:78:32:a0:fd:00:73:a6:91:
af:c4:c5:40:b4:31:2a:e3:1c:e5:67:b0:3b:14:35:
ac:8f:37:23:91:35:cb:08:f9:9f:45:b0:02:7b:49:
ba:09:2c:1f:af:2a:4a:df:77:ea:2c:92:36:66:39:
33:1e:f8:ca:20:8b:49:90:2f:75:90:ba:72:00:41:
cb:0e:56:a3:04:07:cc:d2:74:95:dd:2e:62:22:e0:
18:83:e3:13:f4:7e:0c:8f:fd:64:ad:de:72:02:d6:
fa:9a:10:05:85:cc:81:89:1b:d1:3d:27:ed:3f:7f:
4e:67:f5:91:85:c5:fc:85:a9:53:57:67:a5:13:48:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:8D:84:1A:BA:91:8E:09:72:09:D9:3E:69:42:40:23:60:06:84
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:07:96:b5:d9:93:85:c9:34:0a:a0:70:e7:59:20:f3:a9:
6a:b8:1a:5b:9b:6e:56:a8:fa:25:ea:b7:60:dd:cd:33:ea:7d:
6d:4b:0d:51:79:f9:10:be:70:0d:47:43:ee:d7:28:a4:37:7c:
af:05:f0:3c:8c:01:b5:ba:a8:ea:73:6f:eb:f0:2e:fe:c6:3b:
c8:f2:7e:ea:4e:58:c4:a1:37:c4:ef:c4:18:92:75:61:7d:de:
4d:67:19:ec:89:90:60:85:60:96:01:7a:59:54:b0:2d:ae:0f:
a5:dc:92:f5:54:49:c9:46:46:31:c6:52:dc:ac:0c:4a:2c:61:
24:3d:cb:ed:f3:7b:3f:fd:dc:66:a7:44:a2:54:4f:d7:60:1f:
17:6f:6c:0a:4e:5b:ed:66:04:4b:28:71:eb:71:25:7c:22:d8:
f9:fa:4b:56:e4:c7:ea:f1:2b:43:fd:30:d9:cb:f4:eb:b7:06:
90:3d:f2:ee:6d:92:b7:a7:ce:5d:48:a7:29:aa:33:8c:89:09:
a3:22:67:22:eb:4f:13:91:b6:fc:aa:1a:b0:2b:7e:50:98:27:
66:5c:84:3b:ed:cb:f7:f2:39:47:51:ab:42:5b:ab:d8:dd:30:
ce:bb:bd:be:e3:56:78:1d:86:4b:91:cf:60:80:9f:f0:c0:82:
51:be:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:55 2025 by rpki-client