Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: U1LC4pCHDQUZWkzlhyap9sg0pZ3Dx68N8fOt6qaXwgI=
Subject key identifier: 4F:2A:F0:6F:AD:C8:61:02:A4:85:DB:6D:DE:13:6E:34:06:90:A9:18
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0198819E60680D9109D09AD4BE5F99D00C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1625
Signing time: Wed 06 Aug 2025 23:01:36 +0000
Manifest this update: Wed 06 Aug 2025 23:01:36 +0000
Manifest next update: Thu 07 Aug 2025 23:01:36 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: 9Aqnc1UtQloKXPV5ZP3fKWiVSo0ge6dvNaMdPqAgKYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:60:68:0d:91:09:d0:9a:d4:be:5f:99:d0:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Aug 6 23:01:36 2025 GMT
Not After : Aug 7 23:01:36 2025 GMT
Subject: CN=4f2af06fadc86102a485db6dde136e340690a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:b8:1f:1c:71:b3:45:cc:26:c8:c7:e5:74:
24:7f:6a:98:ff:12:54:53:68:d5:fd:96:8b:14:1c:
70:9d:71:c0:bb:0b:44:3f:fd:ae:82:d1:33:b7:0e:
c4:45:1a:65:8b:83:1a:dc:ea:d4:f2:9f:7a:e9:9e:
75:26:c0:f9:e9:44:44:0b:30:0a:23:16:b0:79:bc:
45:74:1b:0d:76:de:0a:77:9c:69:eb:72:5f:56:0a:
0c:98:a8:8d:03:3b:5b:62:f1:6c:ae:6d:49:ac:98:
92:16:71:15:98:2a:3b:6e:85:18:2d:c9:58:f5:f1:
bf:7e:a0:72:24:e7:80:e5:5d:5d:a8:ff:08:e8:d9:
86:f7:5a:6d:80:f8:7d:50:cd:8b:f0:c4:af:1c:3b:
16:e4:5c:e8:e6:f8:2a:86:9c:0d:10:37:60:43:da:
73:ef:8b:03:0c:21:31:d1:5d:74:82:ba:2c:fc:d9:
d9:70:7d:29:38:4a:2d:8e:e5:02:c2:cb:03:bf:bd:
fa:ce:34:0e:5d:9a:81:dc:b2:e4:79:2c:2f:a7:cb:
b1:3d:e6:d2:92:57:9c:51:ce:47:3f:3a:f0:aa:6b:
8c:8a:05:fa:6d:97:db:f8:24:5d:6e:0d:b6:c9:fa:
73:e9:b2:d9:79:f3:31:95:6b:96:82:bf:e8:cc:d2:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2A:F0:6F:AD:C8:61:02:A4:85:DB:6D:DE:13:6E:34:06:90:A9:18
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:8c:3c:ad:8a:91:03:1d:5e:89:53:f4:44:0b:5a:30:18:
e8:4d:85:0c:4a:59:c3:27:9c:89:96:8f:35:1f:7f:c7:d6:d0:
36:aa:d8:b8:08:c0:36:c6:fd:5e:a8:9b:c9:17:b8:a6:75:12:
0e:1a:0e:fb:d0:47:ab:a1:88:f2:db:a6:13:5d:47:ce:3f:33:
f5:ae:45:bf:04:73:87:25:75:03:65:56:ce:59:25:cf:2a:78:
1d:79:ad:b1:fc:4a:81:16:0b:0d:ae:23:06:53:ff:98:65:b4:
0e:a2:44:be:c8:55:8d:7d:15:29:30:96:70:38:62:e0:1b:40:
71:34:cc:6a:47:c5:c5:37:54:0a:79:5e:31:b8:1e:6e:92:1d:
01:fb:c8:c2:ee:30:9d:ab:74:9f:0b:c5:ae:ae:a6:84:cd:4c:
a2:33:02:be:70:81:15:9f:54:f2:69:5f:3c:93:5b:1c:68:6f:
7a:49:b1:84:b3:e8:40:a6:25:d0:62:e0:21:7e:bb:95:9e:fe:
0d:05:ab:d6:72:15:c7:81:d6:46:4c:d3:56:2e:9c:81:65:5c:
ff:a3:08:81:01:45:ac:28:81:07:c6:9d:66:21:54:ab:6f:ad:
54:13:af:6d:66:70:12:cb:79:b1:eb:27:dc:3f:8f:cf:a5:1c:
28:08:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:51 2025 by rpki-client