Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: e8h8zMFLJCEqWmR0J/pGIo4SfsM7YBlwD+Pc+6XorfA=
Subject key identifier: 43:09:F1:D4:95:57:3A:6B:0A:E7:64:2A:E7:6E:A3:69:21:4B:24:1E
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 019768BC054F9427A3BC56D3C74A0A2CDA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0F84
Signing time: Fri 13 Jun 2025 10:00:41 +0000
Manifest this update: Fri 13 Jun 2025 10:00:41 +0000
Manifest next update: Sat 14 Jun 2025 10:00:41 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: WbOUPsE+kuhHasTa3KjV2nBxwHwHGtQ0C2mx0YSzkQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:05:4f:94:27:a3:bc:56:d3:c7:4a:0a:2c:da:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jun 13 10:00:41 2025 GMT
Not After : Jun 14 10:00:41 2025 GMT
Subject: CN=4309f1d495573a6b0ae7642ae76ea369214b241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:cc:df:4d:91:8e:52:c3:7b:e4:36:1e:17:
81:36:a8:5c:e8:d1:6f:a7:9a:a8:2e:56:f2:20:0c:
6c:88:ea:df:fd:fe:1b:0e:9d:80:86:64:41:0c:83:
36:25:b9:6c:e9:77:d2:74:2e:30:61:95:93:9f:49:
cc:26:36:5e:4f:6e:71:11:31:1f:90:ba:85:16:ba:
17:20:03:f9:ff:18:d8:15:dd:c0:38:30:49:4b:09:
ce:b8:55:34:56:bc:49:97:33:7c:e3:62:6b:46:29:
2a:70:0c:7d:c1:e5:d0:4b:25:15:82:df:c0:2e:4b:
af:63:92:0a:41:01:5f:d3:de:69:60:f8:eb:13:7c:
6c:14:99:42:30:2e:57:a2:65:ce:c0:d6:db:8b:25:
8a:74:e4:dc:2e:50:18:01:3b:ea:d5:ce:07:84:b9:
96:b0:08:b2:0f:5b:37:a4:23:f6:fc:5f:19:3d:9f:
d1:28:7d:ac:34:e6:a1:a9:05:2d:31:78:3d:64:6a:
71:bd:4e:2c:2f:8e:9d:a0:79:b9:b8:a9:2e:cf:b3:
ff:65:49:49:48:eb:38:2c:bb:bf:91:50:44:ae:16:
78:40:48:1a:5b:66:62:c3:e4:47:86:42:33:37:f5:
ae:72:65:3a:77:7e:73:78:c4:56:f9:aa:94:39:37:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:F1:D4:95:57:3A:6B:0A:E7:64:2A:E7:6E:A3:69:21:4B:24:1E
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f0:a9:e1:62:e5:4a:90:c5:35:56:16:fe:54:85:e9:20:d9:
b5:cd:73:91:30:ec:34:26:1b:54:b1:34:14:f6:58:4c:b2:e3:
9d:b8:e8:ea:17:8d:35:b7:ee:7a:23:28:e3:4f:b2:4c:7e:0f:
80:7c:c3:2e:c8:ab:12:cb:13:5e:93:85:44:2a:69:ee:a1:4e:
7e:92:62:93:38:fb:d7:99:80:2b:6c:48:d5:67:ae:08:9f:30:
38:e8:f8:c6:41:6f:46:f9:1d:af:0e:8f:ca:15:7a:06:db:75:
75:bd:37:e6:0c:3f:65:0d:99:ba:f6:22:e4:8b:b1:3d:46:c6:
a1:e7:23:32:8f:5b:71:1d:88:3b:ba:ee:87:83:66:0e:e9:c5:
94:89:ff:dc:5c:86:10:dd:a7:d0:6f:4d:ee:dc:33:dc:e3:12:
46:9f:3f:08:eb:4d:f4:f1:87:33:82:6e:e7:07:15:fe:c4:54:
47:33:37:20:e0:32:a3:a3:0a:dc:04:20:ba:c2:15:36:c5:cf:
3a:d1:17:33:f2:56:f0:0d:a9:ea:a9:9d:f5:87:56:01:08:6a:
75:e4:96:39:e0:e2:5c:e4:2e:68:11:d9:62:a4:fb:eb:c0:ef:
c4:56:98:d3:fe:c1:08:45:a6:58:b0:7c:dd:59:12:0f:65:68:
8e:e4:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:50 2025 by rpki-client