Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier: m3cWzCx/xy3LZnsuuNwj62RLslSXLzg2uHjHzZDcGNg=
Subject key identifier: 4D:4E:41:14:9B:58:FB:F9:1D:04:93:1F:47:1C:56:64:B0:24:A9:FE
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer: /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial: 01987D1C99491FF963AFB8DB849C2452C475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number: 0636
Signing time: Wed 06 Aug 2025 02:01:22 +0000
Manifest this update: Wed 06 Aug 2025 02:01:22 +0000
Manifest next update: Thu 07 Aug 2025 02:01:22 +0000
Files and hashes: 1: HuWSmht5WAvI31ALVxohsMAOFVU.roa (hash: NEqYNw5Ua7Qih23DC5eW2LfJiM7edWxcLo1N0yMRd5I=)
2: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: 03Ho68AvacuVlBQh+SeTtAbfhbJzmKBTPc294TQ7+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:99:49:1f:f9:63:af:b8:db:84:9c:24:52:c4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Validity
Not Before: Aug 6 02:01:22 2025 GMT
Not After : Aug 7 02:01:22 2025 GMT
Subject: CN=4d4e41149b58fbf91d04931f471c5664b024a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:7e:46:1e:28:bc:4e:e2:33:b5:74:d4:1f:
45:2d:e0:60:49:8a:56:80:a8:74:71:8a:cd:c3:c1:
77:0d:af:da:b7:1d:79:cd:8a:9f:e5:8f:51:a4:e9:
a0:b5:b6:e9:48:b1:c6:c2:f9:d0:cb:90:38:8b:1b:
82:0b:f3:e6:0b:e3:21:03:db:7f:a9:10:1c:d2:a6:
bc:e8:eb:7d:57:2a:c7:02:f7:dc:99:b4:bf:fc:dc:
99:c9:5f:8f:e9:b0:86:5b:dd:1b:55:f8:23:21:37:
e0:f1:17:04:dd:88:f3:97:53:b2:b6:3a:cb:32:f2:
e4:7f:a8:55:41:65:cf:6c:84:fe:c7:6d:2c:cb:42:
a4:fc:6a:52:bf:59:68:42:0d:e1:42:f4:d7:50:ef:
0a:75:59:8d:27:4e:ef:6c:97:af:64:f0:68:2b:2a:
b4:15:a5:1e:db:82:69:e6:91:38:e2:74:ae:1d:98:
42:84:08:85:3a:c1:14:30:ac:7e:55:a5:04:4f:3c:
be:60:e1:e4:d0:a4:5b:d9:7f:fb:58:09:55:cc:19:
68:22:00:6e:db:fa:43:5a:28:07:33:e4:e4:f8:4f:
52:a9:71:08:8c:c6:b3:0e:c5:3c:98:c0:16:b0:8d:
57:ec:5b:52:b9:11:bb:21:d9:c2:e6:78:cc:60:6e:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:41:14:9B:58:FB:F9:1D:04:93:1F:47:1C:56:64:B0:24:A9:FE
X509v3 Authority Key Identifier:
keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:84:88:06:ab:61:be:61:10:ac:04:36:44:f9:b7:d4:35:01:
cd:b1:1b:0f:10:54:c4:96:80:c5:a2:31:74:a4:ed:0e:d6:fb:
2a:9a:8e:3f:46:bc:1c:59:32:9e:9f:6c:bd:5f:43:a8:34:7f:
d8:e7:1f:66:a1:cb:be:bc:94:7a:31:8a:a6:62:3e:a5:49:2d:
2d:41:8e:56:cd:96:c9:b0:6d:86:29:96:07:08:07:35:54:77:
5b:c9:3a:6b:55:f0:9b:23:ff:4f:24:67:91:e0:a9:3c:09:71:
50:3b:4d:39:24:ea:ab:bd:a7:77:4a:84:95:5e:54:bc:fc:42:
47:74:ee:7f:c9:10:a4:a9:5d:2b:c8:a4:45:5f:5d:3b:eb:66:
1c:c1:f0:c5:14:34:88:bd:31:25:91:29:c7:c6:48:86:79:25:
e2:c0:dd:fc:b1:8d:35:85:67:26:e1:d2:63:62:43:57:54:10:
18:54:ac:f0:ee:42:57:39:29:8c:85:71:ef:ce:71:1b:8f:34:
9f:a1:24:d7:c2:0f:96:19:c8:b3:0c:41:b4:6e:df:15:39:c3:
c7:f3:6b:52:08:fb:e1:75:35:31:0a:0d:b1:79:1f:b6:72:19:
5b:3a:0b:56:ba:88:b5:16:4f:eb:6d:64:2d:e6:7c:12:b8:e2:
ca:8e:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:29 2025 by rpki-client