Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: txAW/XijmsrK3Z6crE+1WUb9ym+P/+6SxmWBknouhHs=
Subject key identifier: 89:50:13:06:2C:E6:F3:8D:DB:38:2C:78:92:3A:94:58:3E:CB:80:56
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 01987B645B5A4F318797EE76C0601CAFBBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0127
Signing time: Tue 05 Aug 2025 18:00:31 +0000
Manifest this update: Tue 05 Aug 2025 18:00:31 +0000
Manifest next update: Wed 06 Aug 2025 18:00:31 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: QIb5kBjLwoVtzN2LEWwkeUClasD3Yr2eiI0N3BryIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:64:5b:5a:4f:31:87:97:ee:76:c0:60:1c:af:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Aug 5 18:00:31 2025 GMT
Not After : Aug 6 18:00:31 2025 GMT
Subject: CN=895013062ce6f38ddb382c78923a94583ecb8056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:33:f1:97:b4:74:1d:e9:db:44:84:c6:54:
91:7f:26:53:01:9d:e2:19:62:1b:c5:ac:96:ef:39:
86:d9:94:58:e9:2f:b3:0f:4a:54:02:c4:ec:ba:65:
f4:09:6f:60:30:c2:f0:a7:46:cc:0e:91:9b:b1:46:
e5:70:0a:3b:93:f2:3d:86:33:11:48:33:6d:f7:a3:
66:72:0a:42:de:07:20:4e:32:5e:d3:00:bf:9c:af:
c1:97:01:44:39:be:8b:03:f7:de:df:b6:39:1b:64:
ba:f6:cc:b4:96:12:ad:05:22:8c:fa:8e:b8:e6:8a:
8d:dd:75:78:ff:2f:b5:1a:76:20:be:94:68:35:d8:
86:78:89:30:2a:d6:db:e3:2d:d8:da:cc:2b:5e:89:
12:c0:e2:81:be:bc:e5:ba:58:b3:db:05:4d:0c:91:
c7:00:c2:9d:34:39:72:0c:16:ea:89:23:c8:dd:38:
5d:65:e3:d0:49:17:fd:4c:01:5e:c0:72:90:f2:bb:
25:60:42:cb:5a:dc:a8:af:38:7e:9a:37:d1:4d:2f:
d1:22:8b:aa:50:bd:72:68:eb:51:96:36:82:a9:46:
39:41:b1:0a:fb:29:7d:27:f5:15:a7:2e:e3:5c:1b:
3f:58:a6:82:8b:a3:95:68:5e:a0:5d:ea:c1:65:bc:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:13:06:2C:E6:F3:8D:DB:38:2C:78:92:3A:94:58:3E:CB:80:56
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2a:65:1a:24:d9:66:9b:1d:7c:58:f3:63:a4:a4:ce:09:a8:
14:28:c8:a6:59:1c:5f:9c:d5:90:76:43:30:fa:d4:73:c8:b3:
11:76:03:41:11:a6:c4:fd:2d:d8:95:97:bb:b0:a5:00:9e:cf:
f5:6e:08:84:33:d8:36:ea:16:b4:94:49:8f:5b:e5:34:09:ef:
5f:d6:c8:70:a1:3d:f1:36:99:22:7a:a8:eb:d6:71:84:de:5b:
22:6c:d4:83:ce:df:f4:9a:e2:31:d5:75:4f:00:28:34:00:3f:
03:75:e6:86:ac:b4:98:8c:a0:8f:71:76:be:f1:9f:8b:6a:9a:
37:c6:a5:00:47:b7:c5:f3:39:c1:c8:c7:5d:fe:77:88:cc:b4:
1b:d3:af:57:87:d4:a4:c9:db:88:98:06:b5:8e:fd:6d:fd:6e:
fb:c2:c5:0c:e7:67:5b:7a:e7:85:87:b9:df:91:26:70:6c:90:
a2:c8:7c:c4:30:58:1b:dd:d2:33:bf:71:dc:f8:df:ab:9d:f6:
0c:a4:1e:17:a1:52:dc:a5:2f:0f:fd:f7:69:cd:b4:b4:10:a7:
72:40:f0:dc:8b:45:12:1a:ab:9b:ce:2a:c0:d5:ba:83:3a:29:
c9:89:3a:bb:4b:d7:f3:d4:6f:59:ee:8f:09:75:b1:67:ff:db:
eb:1c:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:26 2025 by rpki-client