Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: t8LAwmTXThGAUo5f0RN4+fP5cFZujwEqPsr3NsBo1dQ=
Subject key identifier: C2:72:47:66:E4:62:5E:73:59:23:CC:3F:F9:3A:80:AC:17:31:F7:41
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 019873E3DB1B694D3D4E5369FCD5DD14A27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0D28
Signing time: Mon 04 Aug 2025 07:02:49 +0000
Manifest this update: Mon 04 Aug 2025 07:02:49 +0000
Manifest next update: Tue 05 Aug 2025 07:02:49 +0000
Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: rQAkp/8rz3TPFvVXUPZNPpj1/qgO7JnTqjJNBqMOMss=)
2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:db:1b:69:4d:3d:4e:53:69:fc:d5:dd:14:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Aug 4 07:02:49 2025 GMT
Not After : Aug 5 07:02:49 2025 GMT
Subject: CN=c2724766e4625e735923cc3ff93a80ac1731f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:f6:be:6e:a8:a3:12:41:81:5b:59:da:62:
42:ab:ad:cf:05:75:c7:ea:f2:0e:45:99:f0:8e:a0:
67:de:f3:0f:fd:7c:67:2b:f2:9e:07:6a:d0:23:bb:
4e:1f:5c:a0:5d:51:69:ef:b8:c1:78:a2:c6:5c:dc:
2e:fb:ad:5a:7e:91:c2:27:8b:ce:ad:1c:e3:70:28:
8e:67:7d:fe:3f:ef:6f:aa:67:26:4f:9b:9e:86:54:
0d:a3:2a:51:4f:28:c9:8d:bd:0c:53:c9:c6:99:35:
eb:d2:c7:66:3b:b4:16:36:0c:e5:07:d5:a5:39:07:
44:81:14:86:51:b7:fd:48:81:21:f2:bc:95:64:3b:
67:3a:59:77:53:f4:e9:f1:85:20:a5:b3:a0:b5:2f:
ea:93:2d:c5:b4:fe:8c:6d:cd:19:55:be:6d:81:da:
81:24:bd:f8:3d:fc:41:42:dd:f0:9e:7a:18:a5:d7:
8b:9c:30:c5:ad:37:ed:8c:e5:43:b0:47:05:d4:0a:
d7:bd:cd:91:70:96:14:e0:67:0f:4e:81:e8:47:0a:
49:3e:15:91:b0:d4:4b:b3:a6:c4:45:88:35:2b:7b:
b4:a6:5d:6a:38:f6:e0:7c:0e:99:6a:ba:14:40:d7:
b4:8e:92:2c:38:a4:a6:c3:fe:05:46:98:3f:3e:8f:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:47:66:E4:62:5E:73:59:23:CC:3F:F9:3A:80:AC:17:31:F7:41
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:bb:0a:71:2b:bb:42:d5:2a:75:a1:35:39:e2:b1:15:f3:
07:f0:0e:29:96:8e:6b:06:71:fb:dd:22:76:9b:0d:d4:95:28:
88:33:92:ad:0e:47:f9:ab:ba:5f:c3:f9:6e:ca:e5:7a:ec:60:
e5:ea:75:be:35:d8:f4:7d:24:09:30:66:48:e7:7e:03:f8:78:
3f:de:be:71:8d:98:12:03:1c:16:62:82:01:55:05:e4:ff:5b:
97:e8:96:84:42:21:a0:16:a3:f1:fa:29:e5:14:72:d7:c0:f9:
4b:25:b1:79:aa:e6:8c:26:c1:ed:d0:a4:74:9f:88:c9:3f:d0:
23:a0:00:3b:55:c4:65:66:c1:31:e5:30:bd:92:c5:c7:8e:fb:
db:58:15:ce:77:1c:fb:09:78:8d:f9:1a:50:15:8e:ba:13:d3:
eb:57:a1:9e:55:ab:00:27:be:f2:55:13:0d:69:5e:6c:e8:31:
91:13:c9:67:29:4d:21:5b:b6:d3:fa:4e:4c:0c:91:b8:c5:8c:
22:4e:ba:5d:8f:bc:c1:71:ca:e9:78:b1:70:31:7d:b5:54:a8:
08:90:91:9e:df:77:f1:bf:fd:a9:c9:66:1e:5e:c4:28:fb:8f:
e0:4d:76:9e:2b:14:0a:8e:be:4c:bb:6b:df:4d:ce:b3:8c:94:
e5:37:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:59 2025 by rpki-client