Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier: g/e3ANZOWAfmmEuAlPejON9SI0TaCh9bN6BJRxJUJn0=
Subject key identifier: B5:A9:52:F9:1D:46:D6:7C:D5:D7:3B:28:61:68:EF:A1:55:D9:0E:91
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 019896A5D892716FE0683079A7FB65B4C297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number: 0876
Signing time: Mon 11 Aug 2025 01:01:47 +0000
Manifest this update: Mon 11 Aug 2025 01:01:47 +0000
Manifest next update: Tue 12 Aug 2025 01:01:47 +0000
Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=)
2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: BgzhcHdALPF2ZHVeyBP8T4AnzKAeS7dup6lKNqSNHhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:d8:92:71:6f:e0:68:30:79:a7:fb:65:b4:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Aug 11 01:01:47 2025 GMT
Not After : Aug 12 01:01:47 2025 GMT
Subject: CN=b5a952f91d46d67cd5d73b286168efa155d90e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:c8:27:ff:65:d0:10:63:f0:1f:56:87:70:
ca:ab:33:25:04:88:1f:9d:f9:3a:5a:db:57:cd:ee:
0f:3e:96:24:d2:46:64:98:71:3b:d5:7b:97:da:3d:
a1:74:89:5d:09:4f:3d:62:21:3c:fd:52:a8:6f:bc:
2c:ec:10:96:84:fa:91:c9:fd:42:8f:ed:30:8f:ae:
5d:64:ca:7a:22:e0:ec:69:32:b4:26:21:64:96:30:
2e:22:a0:be:03:17:2f:f8:e3:a7:8f:00:df:76:cf:
4f:4f:6e:55:eb:28:d2:96:31:2f:71:68:78:0a:5a:
7e:25:e7:15:ec:49:9b:23:12:4a:04:e6:8a:e2:b0:
32:ee:15:40:c4:43:5e:21:d4:60:ff:35:63:bd:4f:
7b:30:51:99:3e:c5:bc:7e:83:25:88:10:ff:9e:2c:
33:ee:c2:d4:50:e2:0c:56:06:6b:ab:1a:6a:8e:fc:
76:5c:0a:0e:ca:be:aa:40:1b:40:e5:b6:91:f8:3a:
6d:a0:8f:6c:9e:1c:16:22:8a:1a:ca:61:03:c9:df:
b6:d1:9c:ad:be:51:2c:d2:8b:52:67:56:e0:af:d9:
7e:5a:fd:94:b9:cd:c0:f4:b3:5d:37:59:53:89:1d:
58:8a:c5:de:60:cc:44:f8:ff:23:70:77:ba:74:b1:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:52:F9:1D:46:D6:7C:D5:D7:3B:28:61:68:EF:A1:55:D9:0E:91
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:30:3a:3d:fe:a2:fa:b4:b2:4d:cc:8c:19:6d:85:63:1b:f3:
c7:e2:8d:db:65:b3:28:fd:17:f1:09:2d:b3:93:23:af:b8:82:
77:f0:5b:ba:d3:56:bb:6c:88:99:74:7a:8f:16:b6:d1:0a:1c:
4f:1c:b8:8d:44:b4:70:b7:1c:c9:0d:5b:ec:0b:ce:83:55:6e:
9d:1a:f4:dd:c0:1e:66:b7:f5:c9:53:6b:70:db:54:55:f3:de:
9b:f8:ae:7c:49:4e:02:db:3f:93:72:c6:d1:d2:60:f5:74:f3:
53:cc:a0:35:a4:18:bd:66:93:ed:8f:00:12:38:28:d0:5f:09:
ea:5b:4a:f2:35:bb:cb:4d:98:8b:b3:1a:a4:bf:00:d4:4c:86:
30:98:8b:a0:3a:35:e9:f2:11:72:64:21:f0:23:82:90:8a:3d:
f5:ec:b2:f0:99:d1:19:0c:42:1a:a0:d4:40:74:7d:82:f9:b7:
52:03:21:e0:c3:8b:29:28:72:d4:48:e1:b3:a0:40:b4:15:ca:
98:a6:93:20:42:d9:04:66:17:db:b4:51:c7:71:39:78:be:99:
3b:37:c7:4a:9c:b0:b8:61:1f:cd:a2:cc:41:de:1c:27:ef:b6:
f1:3e:c2:bb:b8:62:5f:99:ea:83:8f:d3:54:bb:c8:a9:ae:37:
70:9f:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:07 2025 by rpki-client