Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: welNIZA/8gZvauIIREjMEYB/XNwMY07AsoZxrs4qb2M=
Subject key identifier: B2:F7:F5:83:D3:B6:F9:DB:CB:68:61:CC:F5:D6:2D:F0:E9:83:3E:41
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 019873E1F72758F9897CE8825E0627865C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: G+oC4vvIaou6R1nQaqALK0Uly2lQk9jvMjS3lSSI8wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f7:27:58:f9:89:7c:e8:82:5e:06:27:86:5c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=b2f7f583d3b6f9dbcb6861ccf5d62df0e9833e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:f2:9b:51:c0:e0:13:fe:67:e8:f9:10:9f:
12:c3:44:68:e5:50:c9:e4:e1:91:48:22:4e:14:3f:
c4:cc:3d:6c:fb:35:1d:a1:08:a6:27:c7:15:6e:cb:
7c:e0:b8:13:4a:40:c7:27:8f:ff:56:ba:1e:52:60:
5d:d3:0a:eb:e6:9a:51:79:1f:c4:a2:1a:d2:10:fb:
68:d4:d7:4f:5c:55:bd:57:e9:c4:11:9a:e0:9f:e5:
52:b9:a7:9c:db:3a:c3:ef:ee:17:ae:8b:3b:40:68:
4e:6c:05:1e:59:bb:fb:ac:6c:fa:42:03:f4:fd:1c:
82:2c:6c:dc:98:21:e7:fe:5f:28:45:e1:7d:0e:33:
c9:17:c3:4b:6b:e4:13:c2:2a:41:f1:c7:3a:f4:98:
1a:47:46:a5:e7:b3:b7:d5:23:db:df:98:38:f4:b6:
e2:d3:77:df:de:ce:4b:a0:46:d2:df:bf:3b:ff:97:
12:0b:48:91:0e:7b:06:3d:b9:d6:11:35:87:d9:c5:
ac:5d:b0:0d:9d:e9:03:b4:ca:f4:41:91:eb:61:59:
7b:19:0a:9a:f0:5b:fd:9a:e1:82:0a:e4:3a:45:fe:
bf:c5:2d:4c:72:78:a3:54:40:39:b4:b2:95:fc:df:
ee:f0:39:5e:71:ea:5a:4d:3d:6a:21:d1:21:bd:b8:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:F5:83:D3:B6:F9:DB:CB:68:61:CC:F5:D6:2D:F0:E9:83:3E:41
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:45:e4:ca:4c:6f:3b:a7:46:2c:2e:6e:1b:dd:b3:7b:fa:e2:
6a:38:4b:fe:84:8a:f2:4a:17:cf:25:84:25:ab:22:17:39:79:
f3:37:17:e3:00:e2:8b:57:56:88:62:52:d7:39:a6:17:70:1d:
27:bc:37:54:f9:7a:f1:d4:46:98:33:3a:ac:b8:59:df:25:16:
b9:e4:4c:62:5a:ef:03:55:a4:14:14:a0:1e:d5:08:ff:02:37:
6d:fc:c8:4f:a3:18:c6:21:db:db:53:ae:c3:6b:32:5b:06:86:
a7:25:8d:bf:e4:5d:ea:52:a7:8b:d4:ff:f8:8f:41:a5:3c:d1:
8f:17:08:14:33:24:be:7f:fb:8e:64:ec:16:ca:7b:bd:09:e1:
5e:9e:cf:1e:d4:45:aa:3a:a6:f3:c4:13:14:cb:74:1c:ef:a4:
97:f4:5e:66:e8:7f:bd:e5:fe:fd:4f:ec:ae:f2:9a:67:e2:81:
c8:2c:5c:12:5c:3b:6b:1f:20:a1:fb:3a:2f:d0:1e:dd:69:23:
72:ed:ea:21:83:20:2d:02:23:c3:be:46:f4:40:1f:ce:df:6f:
31:55:e2:e1:15:fa:c4:85:c2:ce:36:25:a8:a8:15:59:be:77:
6e:63:4c:22:87:bc:ee:d4:13:bd:b6:15:64:4a:7a:84:a0:d9:
7e:55:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:51 2025 by rpki-client