Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
File: gAVnqlixEmbTjGRvpkc_VEk3fE0.mft (raw, json)
Hash identifier: oEUarhFtUqOGMeRXxeQGCJ/UN7fotTTLowGcBTKyDUE=
Subject key identifier: B6:7F:3E:5B:71:3E:63:4A:F0:D3:E1:7E:8E:22:9B:31:D7:86:1D:18
Authority key identifier: 80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
Certificate issuer: /CN=800567aa58b11266d38c646fa6473f5449377c4d
Certificate serial: 019874F5361E5C22CFBACD647EC65567443C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
Manifest number: CF
Signing time: Mon 04 Aug 2025 12:01:23 +0000
Manifest this update: Mon 04 Aug 2025 12:01:23 +0000
Manifest next update: Tue 05 Aug 2025 12:01:23 +0000
Files and hashes: 1: gAVnqlixEmbTjGRvpkc_VEk3fE0.crl (hash: qEf9d+BqGPSGzIyPneRTps7lb9P70JHdPF8kml7ENPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:36:1e:5c:22:cf:ba:cd:64:7e:c6:55:67:44:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800567aa58b11266d38c646fa6473f5449377c4d
Validity
Not Before: Aug 4 12:01:23 2025 GMT
Not After : Aug 5 12:01:23 2025 GMT
Subject: CN=b67f3e5b713e634af0d3e17e8e229b31d7861d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:80:16:39:35:4a:42:fd:b1:d3:bf:9f:cb:
42:bb:6c:f7:72:13:15:e4:e3:a4:08:a4:ba:af:94:
8e:02:d2:03:14:04:53:cf:05:30:6b:c9:32:a8:bb:
e8:ef:c2:40:5f:01:b0:e5:90:24:40:e3:fe:79:9a:
d3:9c:0f:25:3d:f3:05:67:d8:5c:de:8b:c0:0b:d2:
96:c4:fc:b1:00:90:9a:c7:ec:86:c8:3a:86:3a:ec:
48:ba:d3:4f:ce:2e:e0:84:69:6b:9d:48:85:ec:ca:
ed:5e:5f:de:9c:42:a2:70:6b:fd:3c:38:dc:9d:b7:
cd:3c:f9:dd:14:df:1c:42:f8:be:cc:58:81:14:41:
5f:e8:a4:ae:3b:48:ae:0b:24:24:39:a9:03:c5:8e:
dc:94:ab:d3:1d:ae:27:58:63:68:1f:7d:25:b6:65:
2e:cc:c7:14:75:54:25:cf:40:58:5e:37:ff:ab:99:
6d:d5:9b:cd:4d:62:69:c6:b0:7c:93:98:14:db:47:
ff:e3:44:7e:d2:30:ca:7f:c0:24:64:18:71:de:29:
2d:31:12:b5:72:eb:ef:ad:a9:e9:f1:74:2a:95:c7:
29:68:7d:17:ef:a6:98:9d:4e:07:fb:58:1e:28:3e:
ae:f8:12:d8:cc:6f:eb:24:77:ef:9a:b6:67:e2:d1:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:3E:5B:71:3E:63:4A:F0:D3:E1:7E:8E:22:9B:31:D7:86:1D:18
X509v3 Authority Key Identifier:
keyid:80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2c:1c:0a:f9:d4:c3:fc:84:0c:8b:e1:be:d6:c1:28:4d:83:
76:d4:cd:36:53:ed:ce:82:c3:e9:50:d1:9e:ff:62:41:3f:fa:
f8:b9:9e:9f:4a:8c:64:03:2e:86:68:26:88:d7:7e:51:d8:5f:
53:a9:39:ee:00:2f:25:31:97:45:ea:fc:e2:87:aa:d9:d3:2c:
c7:a8:31:62:d8:b2:b6:08:21:ba:d0:18:74:cb:29:5b:bc:a4:
52:35:9c:c2:5e:f0:41:76:5b:4d:6c:7b:30:70:e8:03:50:fb:
a6:7e:d6:9c:09:16:6b:24:13:f2:03:ae:05:74:bb:9e:54:fd:
be:d1:51:9e:a1:10:d7:1f:fe:b1:c7:5e:6c:40:4c:50:13:c1:
7c:69:8b:7c:8f:55:9f:8f:ba:ac:46:b0:ed:56:a9:80:8b:99:
fa:97:41:2a:3f:a1:4d:23:f9:06:ee:80:84:8b:6d:53:82:0d:
bc:21:aa:2b:2e:2c:91:d6:91:3d:a6:97:8e:09:76:9a:e0:7a:
14:c3:59:d4:5b:fe:0b:6d:80:f3:2b:99:fb:e4:3c:e3:5d:c6:
1b:2f:aa:e5:aa:c2:97:0e:c5:ad:da:fa:dd:e5:53:1a:81:64:
b8:d2:05:80:1a:14:b1:43:2a:aa:71:7a:3c:b9:ea:b7:e6:32:
e8:18:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:13:19 2025 by rpki-client