Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: bLR119rjPsBF7jV6Eux5LmOKLDSfarR0ghahWVeHkig=
Subject key identifier: C5:4A:B5:AD:F7:99:B7:F5:98:F7:0A:D9:3E:1E:5F:27:B3:B6:52:AA
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 0198745006F8EC4E2B1BE22F7A7FE4CE90FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:00:58 +0000
Manifest this update: Mon 04 Aug 2025 09:00:58 +0000
Manifest next update: Tue 05 Aug 2025 09:00:58 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: t1WIcbAXP5c0LWtF9olu68Uq6IQSNvGkUu3XqZdVkwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:06:f8:ec:4e:2b:1b:e2:2f:7a:7f:e4:ce:90:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Aug 4 09:00:58 2025 GMT
Not After : Aug 5 09:00:58 2025 GMT
Subject: CN=c54ab5adf799b7f598f70ad93e1e5f27b3b652aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:25:62:98:49:b9:91:ab:6d:0d:1c:5c:0b:
df:b3:f2:35:cf:eb:7d:d1:60:d6:76:28:28:de:45:
e6:0b:e3:12:58:01:d5:23:06:23:06:4d:15:02:c2:
61:0d:36:68:64:4b:c3:68:22:fc:5f:c9:62:cc:e5:
46:74:b6:9d:2a:38:15:56:25:d1:3b:1d:58:29:1a:
27:78:53:67:3f:16:73:33:00:6f:77:3f:53:80:ca:
f4:44:e3:67:af:d3:4b:41:75:37:78:58:d9:cb:73:
83:6a:0a:fd:22:90:8c:3f:5e:6f:4f:2b:d6:cf:65:
07:4a:4a:c5:1b:5f:76:10:e8:1f:7d:88:16:97:57:
57:7f:92:4a:a0:9d:16:cf:b9:f1:95:52:6e:6b:af:
a9:4c:99:7d:77:87:19:74:6f:d8:27:3d:91:98:47:
e5:62:c7:1e:4c:1c:52:63:81:ab:5e:b0:7d:0f:d5:
ba:6e:a4:8b:ee:86:ed:94:8a:ed:10:a3:60:fc:59:
e0:c3:5d:d0:9b:29:93:13:ec:56:65:82:49:f5:56:
68:eb:c8:2a:fe:c6:d7:85:1a:3d:42:97:6d:08:88:
36:5c:ee:f1:fa:77:20:b9:dc:25:b5:06:50:b8:b8:
99:74:5a:fa:9b:8b:aa:ba:52:3f:3d:3b:55:19:64:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:B5:AD:F7:99:B7:F5:98:F7:0A:D9:3E:1E:5F:27:B3:B6:52:AA
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:60:5c:b6:da:1f:ad:6a:53:f2:f7:5c:d4:f2:a2:37:14:8b:
0f:c8:f8:48:a9:72:7b:e6:11:9c:99:07:a5:c4:ed:34:36:a4:
42:08:63:08:e3:d0:06:ae:0f:4c:44:b2:a6:31:2e:f1:5b:c0:
86:3d:f6:a1:b1:a8:76:03:43:29:20:a5:ff:dc:a3:0a:31:d2:
3a:51:3d:6b:a8:02:38:39:a1:9d:be:eb:26:dd:2b:2e:bb:40:
38:50:ed:f5:b0:21:9c:99:dd:89:47:b9:1f:7a:26:21:39:9a:
fa:46:94:97:ed:1f:db:4c:11:cb:ac:00:fd:84:47:6d:a9:aa:
bc:92:5a:c1:0c:3a:49:88:b4:24:06:7e:c5:de:0a:44:72:90:
01:b0:41:ba:21:dc:2d:51:6c:c3:5b:43:54:55:b7:a9:b9:85:
53:3c:17:40:e2:6c:a4:24:80:f8:eb:4c:47:46:43:32:63:10:
b8:f0:ff:c1:a7:1f:0d:cd:24:c4:10:69:9a:94:08:23:07:64:
df:91:9b:2c:ec:d4:be:17:3f:12:9b:a9:13:db:07:92:c6:f0:
ec:ec:f2:81:f8:7a:b7:be:66:ef:60:02:3a:5e:fc:cf:cc:cd:
f4:f5:2f:21:74:af:29:f0:f4:56:6a:50:7c:06:59:77:10:b2:
69:74:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:32 2025 by rpki-client