Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: xEGu+j80th5ks5iQkdtq/2UegKyS8JEWW5aFaimpRCw=
Subject key identifier: D4:FB:07:98:77:D8:E6:18:91:46:EB:02:E6:A8:5F:A8:86:39:76:3A
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 01989223B1E041AD56DECA457526BB415498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 04:01:09 +0000
Manifest this update: Sun 10 Aug 2025 04:01:09 +0000
Manifest next update: Mon 11 Aug 2025 04:01:09 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: N/LpbdTNnHZT9RVPxeXRa7oMV8QYvI271V19AY/MMVE=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:b1:e0:41:ad:56:de:ca:45:75:26:bb:41:54:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Aug 10 04:01:09 2025 GMT
Not After : Aug 11 04:01:09 2025 GMT
Subject: CN=d4fb079877d8e6189146eb02e6a85fa88639763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:39:24:77:89:13:6c:a7:d9:f8:b6:23:22:
95:98:47:ad:fa:bd:9f:a1:62:eb:24:11:9c:1c:04:
80:fd:e1:54:70:c0:ee:c8:5d:4e:4e:e0:f6:da:fb:
0a:cb:fd:e0:69:45:31:51:a6:47:bc:7e:e1:81:f2:
34:50:1d:9b:6c:67:73:26:47:ea:0c:40:28:62:f6:
d2:6b:a3:1c:86:56:1e:10:98:1d:33:ea:cb:72:7c:
c1:c4:80:52:c3:de:65:2a:55:2b:20:3d:62:fd:fe:
ba:3f:30:1a:6b:a5:75:fb:de:ef:7d:9d:51:b3:7b:
3b:61:d2:f5:7a:27:a1:22:39:79:6b:76:04:5c:f8:
b4:1c:42:a1:8b:bf:f5:07:a6:8b:b5:f2:99:76:5c:
73:9d:c2:d8:c2:25:27:ad:6c:17:49:0a:cd:e7:7e:
fe:d3:97:c0:86:4a:a6:30:42:f7:b4:5f:e5:05:a7:
12:e2:66:33:5e:9f:68:13:3c:7d:b4:ac:ba:57:6a:
ae:29:1b:65:1d:4b:e3:ab:13:61:99:08:4f:36:bc:
8d:e4:de:2d:6c:05:40:50:a8:6c:3c:29:84:d3:0a:
3c:ae:ae:cf:ba:b3:2b:d6:9e:13:90:5e:44:0b:19:
09:8a:90:ae:9d:51:3f:97:2b:14:e1:d5:4a:24:4c:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:07:98:77:D8:E6:18:91:46:EB:02:E6:A8:5F:A8:86:39:76:3A
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6c:1f:da:de:ae:61:c6:73:24:23:23:91:84:56:d3:24:65:
ec:b7:e6:09:80:60:d0:78:f1:ff:2a:bc:70:d3:3c:ee:79:b5:
8a:97:b5:d4:a6:56:ae:b1:89:af:aa:97:80:e9:16:07:ed:4e:
64:b5:3a:d5:b9:4c:85:4e:77:17:c9:05:71:58:9d:20:89:b8:
73:b0:a8:37:a7:05:96:ce:4a:c8:7e:36:6d:3d:fa:45:9d:96:
30:7a:f3:a2:c2:ac:0c:df:0e:38:6f:d8:ea:6c:06:52:cc:29:
5d:e7:71:a5:44:92:c6:96:b1:5e:34:0c:18:87:98:94:88:dd:
ea:2c:45:62:97:b7:c5:61:2f:76:3c:1b:4c:4a:02:af:ec:14:
92:c5:5f:4e:00:0b:85:a3:16:af:f9:d3:99:13:a7:8e:20:d6:
07:ae:cc:d2:3c:5d:81:b4:af:ab:b8:61:89:ac:c5:b1:30:5b:
14:91:b6:0e:1f:16:e8:ef:f6:67:63:75:6c:1f:54:a9:78:d5:
bb:57:5b:ea:d0:cf:60:12:40:1b:87:3a:42:4f:f5:b2:96:5c:
8d:b0:88:83:cd:3f:0d:84:34:2e:8d:ab:c0:13:98:f7:aa:f2:
2d:28:4f:34:f7:4a:b5:a8:44:a2:a8:17:99:6b:e0:8c:f2:3c:
95:0a:45:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:04 2025 by rpki-client