
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: 0SMNzXtKpAZeJBqV5DauIx+N862nfwbpff09gyHqW08=
Subject key identifier: 2E:50:4C:C7:11:48:49:EC:28:54:4E:5A:01:E4:68:5A:4B:BB:0F:34
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 01987450EAB284B93F959278A03F328ED742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 09:01:56 +0000
Manifest this update: Mon 04 Aug 2025 09:01:56 +0000
Manifest next update: Tue 05 Aug 2025 09:01:56 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: ecM5gvE6ntew8Lc3p48UXlyK8jnRnmTefWJ0lvaBo5w=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:ea:b2:84:b9:3f:95:92:78:a0:3f:32:8e:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Aug 4 09:01:56 2025 GMT
Not After : Aug 5 09:01:56 2025 GMT
Subject: CN=2e504cc7114849ec28544e5a01e4685a4bbb0f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:5b:81:da:65:5e:a5:cb:d0:fb:7c:d8:f3:
cc:d1:30:e8:e9:5a:1e:55:f8:92:a2:96:85:60:ed:
e6:5c:a0:87:cb:90:cf:0e:f9:e7:44:bd:3c:c5:67:
fb:e2:ff:29:bf:80:00:e1:fe:29:8c:15:be:88:4d:
d6:73:71:72:f2:19:d9:84:d5:fc:ab:aa:30:6e:38:
94:d5:3a:8f:6f:69:32:9b:ee:4e:4d:0f:72:33:49:
b6:14:af:bf:b0:40:b3:80:da:ba:fc:6b:48:9d:d7:
3a:30:e8:e9:1b:3f:f1:f2:87:9a:53:d1:3a:22:58:
b8:06:20:4d:fe:ce:fb:76:0a:d3:6c:93:8f:24:a0:
68:e7:b7:7f:d8:b9:ae:92:69:f7:74:b8:9e:99:6d:
c4:89:dd:49:80:7c:d6:e9:ae:48:0f:b0:bd:5c:09:
fa:84:dd:0f:b6:56:16:dc:45:a2:fd:91:da:27:d8:
01:88:f5:c0:64:3c:d9:78:1d:99:d9:60:ec:32:0b:
fc:8e:fc:d3:70:bb:68:ac:09:80:d7:4f:0f:77:7d:
ab:02:ad:56:35:8e:be:bf:64:bf:fc:06:2e:8e:28:
f8:29:25:23:1c:d3:d2:9d:a4:c1:32:78:75:1f:9f:
b5:5e:c5:0e:71:7b:65:80:3c:cd:ea:27:20:74:a4:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:50:4C:C7:11:48:49:EC:28:54:4E:5A:01:E4:68:5A:4B:BB:0F:34
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:e7:9d:1d:22:0a:7e:bc:88:4a:61:a5:db:1c:27:ac:7a:
81:eb:7c:68:55:8d:db:36:04:d8:29:1b:15:08:6a:4d:e2:3a:
1a:3f:f6:78:ba:a1:d3:1f:b6:f7:6a:6f:9c:f1:a6:30:e4:9c:
ec:a3:4f:af:46:9f:e8:6c:10:08:70:f3:28:35:56:2e:47:96:
2d:f0:0c:b7:47:c2:ee:7b:6e:d6:98:11:91:8d:11:8a:37:5c:
91:c9:26:99:df:23:22:b5:f0:a1:6e:0e:01:05:77:65:83:d8:
ec:fa:39:d9:dc:c7:ab:d3:34:a6:69:c1:22:b5:b7:64:20:ae:
a4:bf:a0:7d:db:06:36:0e:16:f1:5e:aa:7f:65:2b:98:db:fc:
6b:57:34:70:83:ea:0d:e7:10:29:27:c7:6d:24:25:41:2f:be:
49:74:dd:cb:45:65:f7:26:3a:a4:26:2a:81:4b:71:7b:39:39:
1e:5c:f2:11:7b:4d:0a:53:49:99:ec:7e:c9:94:0e:0e:6e:2a:
1c:fd:05:ba:72:44:25:89:31:8e:84:e5:35:54:86:b6:d0:4e:
c6:4e:8d:f6:7d:8f:8b:da:8d:95:90:c7:de:7d:4d:b5:8c:93:
16:f1:3b:90:14:7e:00:30:7d:8f:c8:86:bb:89:dc:e9:0b:4d:
c4:b8:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:56 2025 by rpki-client