Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: ptUggWIUKZWUi7KdmyzkKA7P3lf/sIe14aowRm/EvRo=
Subject key identifier: 07:B4:07:F7:96:DE:06:00:45:FB:FF:8F:96:3D:F0:59:C2:78:B5:51
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 01988B0FAD74103C199F24B4373689C0D742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0D09
Signing time: Fri 08 Aug 2025 19:01:57 +0000
Manifest this update: Fri 08 Aug 2025 19:01:57 +0000
Manifest next update: Sat 09 Aug 2025 19:01:57 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: SoSnzAL9AjLifdrmK7NK2SxCf6HIRsQWHz2Fs5rfyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:ad:74:10:3c:19:9f:24:b4:37:36:89:c0:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Aug 8 19:01:57 2025 GMT
Not After : Aug 9 19:01:57 2025 GMT
Subject: CN=07b407f796de060045fbff8f963df059c278b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:9a:43:cd:46:ba:b1:06:73:13:77:f2:39:
0f:7e:e5:59:a6:7e:bf:17:35:44:bb:80:ae:60:97:
dc:88:c0:d0:12:70:76:7b:88:dd:a5:08:de:ab:88:
9e:98:f4:58:be:8f:2b:0d:ae:52:9d:9f:08:f2:54:
f2:69:d7:98:7a:56:55:12:14:36:30:83:e3:d3:f0:
6e:71:14:35:3d:2e:de:12:b7:87:a1:18:73:ff:40:
e0:78:9c:f0:34:ef:f7:7e:5e:3b:89:65:7c:d0:d3:
8f:46:5b:80:cc:4a:9b:c7:d8:70:48:e9:b0:55:b6:
7c:75:cb:d1:b2:11:e5:45:e5:96:41:04:5d:91:4e:
86:64:b6:98:59:f2:42:bb:68:f8:c9:92:a1:5f:47:
fa:2b:43:7c:b6:5f:86:f7:9d:9a:6d:62:d7:b1:d0:
07:42:d6:4e:c5:80:79:8b:e4:35:0a:22:53:55:e4:
85:4f:1f:11:4c:d1:82:11:08:2d:f6:12:3f:d4:c6:
9a:9a:a0:99:c9:e2:71:07:ce:b5:c3:a2:26:43:20:
51:5d:a6:9c:f2:47:2f:78:6f:60:21:38:df:01:50:
43:2c:43:02:20:d0:be:c8:39:61:fb:71:49:14:7f:
99:5f:20:4d:1d:fa:ce:30:29:7f:77:19:09:d3:13:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B4:07:F7:96:DE:06:00:45:FB:FF:8F:96:3D:F0:59:C2:78:B5:51
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:55:7c:62:66:71:bc:9a:b2:8b:49:50:ab:42:61:06:87:
c9:7e:d6:9f:b8:61:1b:a6:c1:76:72:95:b9:16:44:3f:23:58:
1b:08:7f:83:28:ce:55:d1:ce:f1:56:e8:6c:a6:93:68:17:3c:
c4:4f:5a:a6:00:01:4e:eb:c6:ab:60:23:c5:73:b4:f5:5a:0e:
b3:bd:4b:12:c4:71:7e:99:67:43:f6:be:3b:3c:b4:f2:0d:aa:
b9:2c:12:2b:b4:1b:c4:c0:b0:cd:80:b6:a0:00:0f:bf:22:c7:
8a:35:95:72:d2:04:9d:9f:f2:78:36:62:5d:15:01:da:f2:cd:
5a:54:1d:32:c7:3d:67:49:a2:d6:da:ad:f0:6d:23:5d:86:96:
2d:70:14:59:92:94:c9:ad:93:7f:c4:46:f5:3e:3d:61:56:23:
95:8d:65:d6:c9:56:0e:24:f2:7c:ec:b1:f6:dc:a7:72:f1:83:
db:f4:87:63:09:ab:ea:75:d3:f8:ad:71:1d:06:70:07:dc:74:
3f:fb:13:ee:89:7f:dc:6a:60:4d:15:37:58:a8:0f:20:d5:a7:
62:b7:e7:ab:64:bf:c1:d2:af:6a:f0:4f:07:ad:d6:84:fb:a9:
7f:f6:d9:94:20:fa:81:6c:ce:d0:15:16:61:c5:7d:0e:bd:1f:
5b:99:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:41 2025 by rpki-client