Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: gAxk22y3hRVy2M2eIBv7EcLn+vHU20dZVlgtCw7vbQg=
Subject key identifier: 28:22:2B:C5:C7:6F:EA:13:37:A5:E3:06:DE:CC:53:FA:45:3C:12:C6
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 0198A0BB2161A10DF1A6FE2DCEDC56FF31D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 15BF
Signing time: Wed 13 Aug 2025 00:01:14 +0000
Manifest this update: Wed 13 Aug 2025 00:01:14 +0000
Manifest next update: Thu 14 Aug 2025 00:01:14 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: rqvx2QSLJxGI+BazXYLOoKnlX0CvIBXVEeJVy6kMp18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:21:61:a1:0d:f1:a6:fe:2d:ce:dc:56:ff:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Aug 13 00:01:14 2025 GMT
Not After : Aug 14 00:01:14 2025 GMT
Subject: CN=28222bc5c76fea1337a5e306decc53fa453c12c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:ac:b3:81:be:7c:9f:34:35:84:8f:4b:e3:
22:59:9a:0e:7c:b2:74:e7:38:d7:6f:f7:c4:fc:86:
25:17:f4:6d:8e:a7:5f:e5:3e:de:64:1d:88:80:d4:
49:17:fb:c2:ab:37:8c:35:13:b5:ba:ee:8c:73:39:
21:5f:b2:b9:30:07:38:0b:bd:f0:86:eb:b6:bd:f3:
41:0a:c6:ab:79:4e:e9:b7:75:ed:91:5d:95:49:7f:
95:27:f6:d8:d4:04:15:e2:d8:74:13:3a:c0:3a:7c:
82:22:cb:b1:32:54:4e:94:f2:16:8f:f6:ad:b1:7f:
91:f7:20:62:20:7f:26:01:2a:83:7c:81:ef:54:cf:
6f:a3:09:fc:c3:54:44:ab:aa:8f:8a:79:a1:20:99:
d8:ae:7f:99:09:c1:55:fb:d8:7b:53:ce:7f:de:84:
bc:59:8a:05:98:a7:97:37:5f:60:11:b8:c8:2f:94:
96:2b:76:94:a5:a9:32:e0:b5:c0:10:6e:57:13:d3:
eb:66:24:5e:c7:f3:49:ea:4c:18:19:ad:a4:59:14:
0c:3a:a1:14:e0:75:6e:e3:40:0a:13:3a:b1:bf:a0:
ec:df:c1:6d:e8:0d:89:0d:c1:2f:8a:cb:0a:57:b2:
fe:0d:19:50:6a:16:d0:1f:fe:66:9e:55:ee:02:da:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:2B:C5:C7:6F:EA:13:37:A5:E3:06:DE:CC:53:FA:45:3C:12:C6
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f3:02:0c:83:82:5b:b2:c6:f8:9a:03:33:db:9a:bb:e9:d1:
05:95:ff:83:7e:99:a4:4a:04:d8:c1:1e:48:65:fc:75:db:0e:
6a:6b:96:cd:7d:71:55:65:7b:58:bd:be:0d:5d:12:b5:0d:47:
80:aa:38:a6:2b:ee:25:6f:8a:62:40:a3:b6:9b:80:a5:dd:5f:
87:49:ef:d2:79:77:5e:5e:3c:86:1c:d7:f6:71:84:bd:16:1d:
bb:bc:b6:5e:d1:f7:6b:c3:a3:9c:0e:37:37:45:7b:8f:16:2b:
1f:d9:28:46:d5:49:a8:99:8b:3d:93:57:43:48:c0:95:9b:bf:
d4:8b:68:ac:31:33:5b:2c:9b:87:fd:75:72:c7:fe:dc:18:37:
a8:46:4d:47:40:67:1b:b9:93:d3:ad:ed:89:53:40:40:3e:79:
30:8b:5b:4c:61:ce:e3:64:b3:4b:13:37:0e:86:bd:4a:e6:ff:
3f:ce:df:51:06:f4:ce:a5:28:d6:18:81:3e:22:40:2f:c0:cb:
8b:ad:72:ec:e1:15:4a:a2:73:cc:78:a2:67:5f:8a:24:22:85:
da:9e:80:21:b8:a0:a9:d3:b9:56:4b:b2:03:cd:d2:a8:f7:ac:
b7:29:1e:33:48:33:dc:39:6c:63:df:58:0a:07:7f:89:7e:33:
f1:69:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:28 2025 by rpki-client