Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: c+VyOUry1TiOmfDpqAP/zD7LxJjdpuYXwv4tx64OnTc=
Subject key identifier: C9:1F:4D:32:4C:03:6C:97:DD:84:05:D2:18:38:9F:37:77:44:8C:7E
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 01989600B4D74065D06D41F2FB3DD0760F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 1020
Signing time: Sun 10 Aug 2025 22:01:25 +0000
Manifest this update: Sun 10 Aug 2025 22:01:25 +0000
Manifest next update: Mon 11 Aug 2025 22:01:25 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: x9CxXh9zQ+x+uUHKFc9dq1PbUkjSSYey4u4/KScyF1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:b4:d7:40:65:d0:6d:41:f2:fb:3d:d0:76:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Aug 10 22:01:25 2025 GMT
Not After : Aug 11 22:01:25 2025 GMT
Subject: CN=c91f4d324c036c97dd8405d218389f3777448c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1d:57:dc:a8:4d:44:ff:4e:97:f9:25:09:e2:
28:a2:12:11:f9:45:34:35:f0:69:77:32:16:ff:d1:
95:05:49:c1:cc:e2:93:3b:0d:d5:f2:af:84:cf:c6:
3c:c6:d2:f4:d2:79:6e:7f:26:f3:f6:ab:9d:fe:fc:
88:e1:bd:ea:3b:83:73:03:28:0e:62:b7:1c:a0:d9:
7c:ff:e5:97:4f:90:21:a1:60:e1:7b:fc:2a:a5:f5:
46:22:84:e3:92:68:fc:93:20:38:5e:72:1a:02:fc:
cc:e7:de:ef:6b:01:9f:38:47:f2:ad:56:3f:32:01:
d9:e2:82:c5:95:39:5f:f0:b8:f2:8e:ea:d6:21:0b:
62:2e:89:ae:77:37:61:fa:bb:20:02:4b:ab:08:b6:
74:a0:c0:19:0a:a3:d1:3d:cf:e5:c8:f3:a3:3b:f1:
d9:31:33:d7:6f:8c:b5:3d:16:85:30:a3:94:38:cb:
8c:5d:05:5a:f6:eb:47:3d:66:ba:8d:fa:67:ea:11:
58:f8:e2:73:dc:c2:11:e9:0f:cd:22:c5:a2:f8:ee:
a4:44:ef:30:65:2f:f4:6f:f1:c3:07:00:ed:2c:4b:
1a:e1:fc:cf:ec:d0:32:dd:a1:e4:62:00:e0:66:92:
a3:2b:7c:ca:dd:95:55:ae:ec:7a:f2:bd:7d:cc:d5:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:4D:32:4C:03:6C:97:DD:84:05:D2:18:38:9F:37:77:44:8C:7E
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:75:49:8a:0a:9f:60:40:a6:e4:94:c2:90:a3:c5:8c:fb:
5b:6e:05:75:f5:31:0a:6f:90:d4:c4:8c:50:4a:d4:74:aa:da:
8b:4b:46:0f:ba:b5:45:a0:95:7d:d3:64:d0:c0:31:29:0d:82:
94:95:66:d4:bb:ad:90:fd:2f:e5:e3:0f:a5:05:62:f9:59:0f:
1a:fb:9f:cf:98:30:ac:e1:72:da:e8:e4:ec:bf:f6:2e:bb:06:
0a:35:a9:31:7a:5f:33:34:b3:fa:a6:05:f3:03:e4:8d:40:fc:
2f:cb:41:15:18:5f:8b:f9:37:65:a6:5c:21:36:2a:33:97:d9:
e7:e7:0c:93:f5:f4:a2:b3:4f:5a:7c:4f:8c:95:62:29:3f:b9:
7f:52:ec:1d:e6:f4:b1:bd:8e:72:b7:03:39:c3:12:c3:32:72:
53:8b:00:ba:f2:0b:80:a6:65:98:1d:68:64:7f:77:8e:7d:2b:
5b:4f:1b:2e:29:35:2a:b9:ce:1d:cd:5c:38:2f:16:6d:61:5b:
b4:c3:56:2d:53:93:bc:e5:8e:96:55:69:34:ef:cf:a6:d2:5b:
c0:eb:84:8f:c6:9d:76:a2:9f:8f:d6:90:1b:4a:a5:9d:21:ab:
15:39:4b:bf:a2:78:30:85:15:d0:3b:58:6d:4b:f9:96:f6:d8:
55:d5:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:45 2025 by rpki-client