Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: 04ei+J34XgDLmfswCwnF3Q+BSj3/heJnMowJB1yBXkY=
Subject key identifier: 29:90:64:02:EC:8E:6D:1C:99:BE:DE:CE:03:B1:9C:70:A7:96:81:B9
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 01987D89C1B34887DB1F6F7030E32E990959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1267
Signing time: Wed 06 Aug 2025 04:00:36 +0000
Manifest this update: Wed 06 Aug 2025 04:00:36 +0000
Manifest next update: Thu 07 Aug 2025 04:00:36 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: sDUOrWcmLPjYoHwo3hDSUyN55dUPA/PKVi39ClXpsr8=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:c1:b3:48:87:db:1f:6f:70:30:e3:2e:99:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Aug 6 04:00:36 2025 GMT
Not After : Aug 7 04:00:36 2025 GMT
Subject: CN=29906402ec8e6d1c99bedece03b19c70a79681b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:46:60:54:4c:a5:dc:43:dc:cc:01:5a:4b:
aa:48:43:e3:e7:9b:03:5a:a9:fb:30:bc:92:1e:19:
97:fa:b0:51:ea:b1:bf:48:25:12:ce:a8:0e:97:f9:
86:0e:df:5d:ba:b7:30:57:b0:f4:48:2d:00:34:0c:
14:46:d6:c7:62:e9:45:df:03:2d:5c:d4:cd:cd:ea:
7a:fc:b3:c7:6f:61:50:6f:41:1b:00:2b:c3:84:0f:
13:bc:da:02:af:81:52:35:15:ec:fa:f5:27:8b:74:
88:c7:b1:1e:d2:6d:33:58:93:0f:1f:1b:37:56:40:
d6:50:66:66:c8:0c:e4:48:70:9b:65:3f:01:14:ce:
65:ba:6b:d7:8a:42:5c:46:16:48:a7:e9:ed:f7:eb:
47:e2:8b:e9:65:b6:34:c1:2d:cb:56:81:c9:09:fe:
e5:9d:79:41:96:97:ee:f2:0e:ab:60:94:be:41:42:
d0:9d:77:d8:38:7e:2d:3d:32:e0:aa:c7:a8:b9:be:
20:f2:51:bc:7e:38:fd:f1:df:58:66:1a:a2:1a:e4:
c6:83:ea:08:49:59:9c:b0:79:15:91:62:23:dd:b2:
25:42:21:55:87:ec:b4:cc:c8:10:a7:f3:68:06:ce:
78:c5:e2:a9:01:90:61:57:5e:2e:63:bb:27:3f:71:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:64:02:EC:8E:6D:1C:99:BE:DE:CE:03:B1:9C:70:A7:96:81:B9
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:44:9c:de:12:6e:ad:98:c6:7b:01:b4:34:57:0e:0b:85:a1:
fc:bf:e8:e4:55:2e:11:75:be:b2:12:77:93:e4:8d:a3:d7:98:
2b:ab:46:46:13:68:38:5a:9e:9e:ca:1e:ce:2d:aa:35:2c:3f:
81:05:2e:7d:16:7c:07:cf:09:12:08:63:9a:05:0f:51:d4:62:
4c:24:50:34:73:0e:f5:49:f3:92:33:8e:dd:97:dc:b6:7b:a1:
c6:51:02:db:7d:68:9a:aa:a4:f4:b7:26:96:d6:c2:05:e4:e1:
a3:c3:35:a6:22:83:b1:e0:96:c0:d1:42:84:a7:78:42:69:3e:
0c:8a:1e:bc:bb:5c:46:ec:27:0c:c8:13:08:6c:82:da:40:ce:
d3:26:4a:c7:4c:7c:81:c3:93:77:1f:96:89:fb:4b:3f:6b:21:
75:8a:39:04:3b:65:e8:67:ec:e1:fa:6c:8f:2f:66:a2:af:57:
28:b9:75:2e:fc:b9:a5:b5:fe:73:f3:7d:36:df:a3:3f:6e:ff:
42:81:e5:1c:89:04:23:f6:3b:ed:9f:40:28:cd:24:82:6e:fe:
e0:d6:80:d5:95:4a:d8:db:99:76:98:c3:6d:2a:8c:48:4d:d2:
c2:ac:a0:d7:ae:d9:ce:4f:f2:ea:51:92:37:33:34:de:be:22:
32:19:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:15 2025 by rpki-client