Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: D3507JSxz7PFAKAODiHQWX3LTwkWux1RaAUjyK8YpOc=
Subject key identifier: EC:D7:9C:CD:61:15:82:E5:54:45:A3:5F:A0:9B:83:E9:B1:3D:B3:59
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 0198898E7378A8E4CA2B47D5838AE5B84085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 12C0
Signing time: Fri 08 Aug 2025 12:01:10 +0000
Manifest this update: Fri 08 Aug 2025 12:01:10 +0000
Manifest next update: Sat 09 Aug 2025 12:01:10 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: DoMoFBKNjhibSwmx1yyEnXbJLyu7wF9sdCsLkXlPOYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:73:78:a8:e4:ca:2b:47:d5:83:8a:e5:b8:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Aug 8 12:01:10 2025 GMT
Not After : Aug 9 12:01:10 2025 GMT
Subject: CN=ecd79ccd611582e55445a35fa09b83e9b13db359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:af:5e:99:a8:52:18:91:dc:83:38:70:e3:
f3:c9:54:e5:5f:f4:c0:de:ef:05:90:5f:3a:7a:8e:
f1:f5:26:42:92:aa:cf:2d:7c:30:27:ef:99:1a:c2:
d1:ae:33:5a:52:14:0e:c6:9f:80:8e:8c:ee:5c:25:
40:c3:2b:0e:2a:8c:bc:ee:52:6a:c4:26:1d:5d:6c:
1c:aa:d7:eb:99:13:b4:5c:56:b4:f9:49:64:b9:9e:
b6:37:77:f3:f0:f5:38:57:c3:17:53:ef:43:87:ba:
f7:d0:6d:37:12:88:80:79:13:1b:d2:96:17:c4:e7:
47:77:1d:22:f9:18:56:a5:5b:60:88:de:7a:88:80:
8c:cf:76:f3:98:44:d2:e7:85:6a:89:e6:b9:02:32:
10:06:c7:d0:65:2a:91:62:3d:0c:73:d4:eb:fc:ed:
12:00:12:da:5b:17:a2:7c:2b:da:ab:8f:87:c4:68:
58:95:a0:ab:e4:f6:06:23:96:55:46:90:23:d5:11:
e4:4b:9d:53:b0:cf:ab:7b:03:36:f3:6e:98:09:57:
1e:fd:e3:d3:21:75:7a:1a:91:48:51:7f:8a:6c:20:
75:e2:c6:12:b2:ef:a9:73:5b:e4:96:d7:0d:b7:d6:
86:d4:22:c9:ca:9d:3d:44:05:b7:a9:c5:8a:90:27:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:9C:CD:61:15:82:E5:54:45:A3:5F:A0:9B:83:E9:B1:3D:B3:59
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:35:ae:2a:4b:7f:0d:c2:b0:ad:58:66:94:12:d3:8e:b6:
bd:17:9f:fd:eb:4d:61:bf:bb:91:1f:0c:0f:3a:40:37:56:61:
2b:e5:76:41:42:d9:84:90:7e:76:91:d1:13:f3:9d:a4:e5:e1:
dc:4b:70:a9:c1:c7:b9:cd:ed:56:64:3b:4f:2d:0e:16:ff:08:
42:59:88:10:8d:6a:2b:25:69:23:4f:9d:fa:fd:28:1c:a0:e3:
8c:36:b3:c2:ba:02:8d:56:57:a9:7b:72:43:30:99:b9:c9:16:
fe:c1:48:30:af:3d:48:f4:52:76:03:21:f2:c4:95:b1:d5:68:
0a:7d:15:e6:1e:b0:fe:5f:9e:b6:38:3a:17:df:98:e5:7c:c3:
82:62:05:07:5f:9b:89:f3:cd:06:56:55:de:ca:b5:dd:f4:39:
67:4b:f9:29:16:55:77:9f:c2:0e:7b:6b:76:86:c1:4c:a0:3f:
b0:0d:16:14:8f:45:a8:cf:a0:e3:60:54:87:0c:93:64:52:13:
3c:66:ed:df:14:34:f9:c2:6b:b9:c1:2f:fc:c1:0c:f1:bc:4c:
23:81:8a:a7:ea:70:51:3f:e7:45:24:ce:0f:43:c6:c1:36:de:
71:bd:0d:01:e3:1c:95:27:f3:18:c8:c4:f4:5d:e8:e1:a3:e2:
34:0e:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:59 2025 by rpki-client