Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File: gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier: fVlNmNHxN5Pnv04g8F4q67KX5C2PUMz064j1oKFD79Q=
Subject key identifier: AC:29:8B:18:6F:21:2C:FA:61:8A:2A:40:40:5A:92:CB:06:32:3C:A2
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer: /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial: 019891B5BEEB03975BE25BE31CC8D9A76625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number: 0F27
Signing time: Sun 10 Aug 2025 02:01:03 +0000
Manifest this update: Sun 10 Aug 2025 02:01:03 +0000
Manifest next update: Mon 11 Aug 2025 02:01:03 +0000
Files and hashes: 1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: FZHSQYfa8S/dUTFOkheWmuOYZuJH7jfHmhep3dLlJa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:be:eb:03:97:5b:e2:5b:e3:1c:c8:d9:a7:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8166038385b343d55e76b728efe23c0731787668
Validity
Not Before: Aug 10 02:01:03 2025 GMT
Not After : Aug 11 02:01:03 2025 GMT
Subject: CN=ac298b186f212cfa618a2a40405a92cb06323ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:c2:b2:fd:04:c8:4e:9b:cd:c6:2c:2f:80:
e7:85:94:5f:4c:08:aa:db:69:fc:43:4a:16:51:37:
45:f2:5e:d2:bf:81:f1:bb:00:e7:82:d1:c4:7a:6b:
70:22:cb:23:91:76:5d:1c:e3:43:a0:a6:23:97:6f:
f5:80:41:36:c8:9c:1a:18:81:17:9e:da:d2:55:ad:
f5:5b:f5:87:ce:9f:8a:88:09:32:0f:b7:35:df:dd:
4a:09:90:b1:87:38:b7:e1:53:f6:17:aa:d5:5b:78:
ee:db:93:35:28:5f:7e:76:f1:77:5a:07:48:4e:94:
3d:3c:9d:cb:1a:b6:c2:e1:6d:0c:df:f4:8e:4e:a0:
02:c4:f9:93:48:80:21:ef:66:a3:d9:4b:53:d6:13:
44:03:e9:a2:d6:6d:62:c2:56:0d:07:6d:34:48:b5:
0f:6f:65:68:b4:a5:0e:e7:69:89:29:45:5c:4a:7d:
ab:c6:5e:88:64:d1:40:a4:0e:c6:00:a9:80:fb:14:
96:25:07:49:c8:a0:3c:8f:cb:2e:e6:b0:db:94:48:
4b:2c:36:c7:d3:df:82:98:67:a8:9b:c0:2b:cb:0b:
59:ab:38:34:b2:9e:18:f1:63:8e:f4:14:ea:72:9a:
7d:47:d0:ed:d6:a7:38:da:90:b2:0d:59:25:e3:6f:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:8B:18:6F:21:2C:FA:61:8A:2A:40:40:5A:92:CB:06:32:3C:A2
X509v3 Authority Key Identifier:
keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b5:ee:a6:ba:f6:84:27:dc:6c:03:0a:1b:6f:e1:9f:01:c6:
bf:5d:14:9b:69:49:10:ea:73:06:09:09:fa:92:6a:b2:fb:08:
13:2e:5f:2d:fb:b5:32:a4:a5:71:ac:91:ed:f5:fe:09:ce:d0:
b0:14:07:19:b6:15:b5:0e:9f:87:a7:16:c5:a2:2c:e9:c4:bb:
74:21:a2:bd:fa:ac:b8:21:f9:01:0d:a8:a3:3b:3f:ba:bb:32:
4c:27:27:dc:55:6a:f4:b8:b7:15:35:03:25:57:27:6c:e5:ca:
6a:4a:85:dd:60:4d:e7:46:c6:2a:04:21:d2:ba:a7:05:38:a9:
6f:f8:6b:31:ad:af:37:c1:2b:b0:71:f5:fd:e7:4d:8c:0e:9c:
60:dc:b2:3e:bd:6b:7a:89:67:a9:e8:e2:52:98:e9:3c:ed:50:
05:cd:36:de:a1:0e:89:24:72:24:59:c7:5f:68:08:71:b4:f1:
0f:c4:af:bc:9d:d3:2e:42:ed:68:32:67:15:b1:46:33:22:0c:
41:ea:41:b3:ac:58:29:9f:a5:92:62:6e:68:5b:24:b4:a2:f5:
48:b3:57:4c:52:30:97:78:1b:76:f9:a9:74:95:1b:46:62:74:
bb:10:52:7c:ac:d4:d8:e4:8e:8a:dc:c3:e3:32:5f:00:42:a4:
b2:30:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:43:00 2025 by rpki-client