Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: tIoj0k7cYP80T0Ypv4CrRHNFO6a/6RFeK0puYQlJ35M=
Subject key identifier: 0A:70:7C:8F:E1:FA:81:10:74:EF:25:1F:8B:82:F0:FC:A1:43:97:75
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 019879AF392BB433B8474D8A80020D8DB7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 03F5
Signing time: Tue 05 Aug 2025 10:03:03 +0000
Manifest this update: Tue 05 Aug 2025 10:03:03 +0000
Manifest next update: Wed 06 Aug 2025 10:03:03 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: uFj8kezQF5+SZO4uWXium28hGKdJFUekxvUYHDHRFgI=)
2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:39:2b:b4:33:b8:47:4d:8a:80:02:0d:8d:b7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Aug 5 10:03:03 2025 GMT
Not After : Aug 6 10:03:03 2025 GMT
Subject: CN=0a707c8fe1fa811074ef251f8b82f0fca1439775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:fa:60:ad:32:11:94:75:1b:48:91:98:93:
aa:dc:7d:31:c5:b4:fa:84:28:96:e9:8c:86:b6:b1:
8e:fb:01:8c:a6:8a:25:f9:33:0f:cf:1b:92:97:46:
60:ee:7d:df:55:35:85:1a:02:4c:93:e9:06:86:6d:
4b:f6:bc:13:9e:3c:70:01:a5:82:d3:7c:12:24:79:
f0:88:67:36:06:ac:0f:65:6a:76:f1:77:95:4c:cc:
ce:1d:ae:1f:04:85:62:df:2e:45:f0:cc:e2:96:bc:
41:f7:66:1c:c0:89:6f:81:e9:66:f6:5d:53:03:d9:
0b:d8:52:ef:66:6e:dd:64:0a:4f:f5:10:e6:2f:ea:
82:a6:4d:23:cc:78:6d:96:82:bc:bd:02:e0:ba:c8:
c2:ab:2f:5b:a5:2d:86:60:b9:8f:7e:9f:49:39:35:
48:41:48:f6:bd:b9:e7:ec:70:ab:0c:2b:20:75:28:
51:cd:e8:f0:41:ef:1e:56:89:c3:ac:68:b1:9c:2c:
7b:2c:84:b8:a0:7e:30:1f:75:b4:b5:6a:31:df:e2:
0a:c3:ad:ee:9d:ee:01:cb:bc:f6:b7:15:2b:b2:a5:
ed:e5:ae:da:9f:17:48:61:e9:e3:1b:b0:45:b3:f4:
06:23:ec:17:3f:b2:26:50:4e:0c:dc:b2:69:a2:15:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:7C:8F:E1:FA:81:10:74:EF:25:1F:8B:82:F0:FC:A1:43:97:75
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a9:97:b6:3a:3e:bb:4d:63:f4:00:c0:cf:f3:eb:7d:8c:cc:
a4:c5:5d:25:85:0e:ef:a5:90:1f:8e:d0:ad:54:33:39:9e:f7:
38:c9:87:60:b4:a4:c4:37:34:69:04:57:14:80:ad:dc:13:87:
8e:f1:21:9c:ad:f8:ed:0c:3c:75:bb:56:36:2d:46:3c:87:82:
a1:22:46:fd:8a:0c:5f:59:95:f1:bb:d1:53:15:ea:5c:ad:0a:
52:3e:21:4c:3a:36:77:e7:c2:e2:5a:87:97:55:f3:7a:ce:ed:
36:2c:2b:60:72:8a:47:ed:01:f9:d0:db:0e:11:29:4d:ef:a4:
ca:7d:fb:2f:39:cc:1d:03:11:72:38:21:a8:d3:80:46:3c:8d:
b3:a3:e9:9a:b8:8d:42:c0:6b:aa:68:f5:c1:89:21:db:18:4d:
1e:0b:57:38:d1:3d:c9:c3:0a:51:ae:c4:9d:af:0e:d2:13:d4:
ff:a5:24:97:1d:03:78:53:a0:db:28:9a:86:e2:29:f1:1f:64:
e9:b6:64:7b:e0:19:36:6c:52:71:2b:e0:29:f0:61:40:7e:9c:
90:aa:9d:04:69:ed:2b:b3:12:0c:f4:df:a5:44:75:b8:60:da:
f3:d6:a7:46:b6:08:9a:60:09:00:c2:bb:65:25:72:7b:0b:37:
ab:c3:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:56 2025 by rpki-client