Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier: RSDfWcVQS52EYSpq1J/e0X23WZnzgf3CEWL3dGQcnWg=
Subject key identifier: BF:28:E4:1C:8D:2E:C9:6E:86:7D:EC:73:E4:B2:72:CC:15:33:68:4C
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer: /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial: 01987C40840BBB0B55001135A4BF5BDB0BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number: 01BF
Signing time: Tue 05 Aug 2025 22:00:59 +0000
Manifest this update: Tue 05 Aug 2025 22:00:59 +0000
Manifest next update: Wed 06 Aug 2025 22:00:59 +0000
Files and hashes: 1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: 8r38f735O8iEgR5nednRCqzaPuIsolNr0O/1XkCF/qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:84:0b:bb:0b:55:00:11:35:a4:bf:5b:db:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Validity
Not Before: Aug 5 22:00:59 2025 GMT
Not After : Aug 6 22:00:59 2025 GMT
Subject: CN=bf28e41c8d2ec96e867dec73e4b272cc1533684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:c2:5a:c4:37:4f:29:37:66:b4:2c:35:ee:
5f:91:f7:ea:d8:47:59:50:35:5b:07:d9:94:13:cd:
62:35:72:f0:3c:84:da:44:86:19:3b:9e:35:67:5d:
84:50:fa:55:80:fc:1a:da:bc:b8:0b:a7:5e:1e:d4:
d0:40:45:05:b3:69:b7:c7:28:86:3f:bd:8a:b3:dd:
c1:d6:3b:86:89:3b:39:2e:5d:bf:6b:82:3a:f1:7d:
b0:b1:12:97:19:47:d1:da:bf:ab:12:c8:17:6b:85:
e7:33:5e:ea:93:d3:26:45:0b:f8:e5:b6:f4:fb:73:
7e:28:5d:e5:79:55:aa:51:87:8b:6d:61:a5:8d:08:
e4:80:9b:33:63:a4:e0:fe:f3:58:f4:e6:bb:cc:47:
91:00:5c:d0:52:0b:2e:65:d0:cd:a1:37:8c:bf:7b:
7a:00:02:94:8c:07:7a:62:55:91:72:2e:d0:84:34:
42:a9:dc:92:d9:bb:3d:71:ee:bb:90:40:12:70:32:
96:5d:68:52:fa:6d:53:69:8a:da:a8:e2:a7:87:e1:
3f:e5:db:5d:83:a3:cf:d6:51:d4:a1:f8:18:90:f9:
d8:e9:9e:63:06:f8:79:21:fe:d9:0b:7d:17:5c:1e:
8c:0a:9a:ca:24:22:76:0f:09:c3:30:e0:4d:0c:74:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:E4:1C:8D:2E:C9:6E:86:7D:EC:73:E4:B2:72:CC:15:33:68:4C
X509v3 Authority Key Identifier:
keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:8f:a3:c1:bc:39:e6:a9:52:a0:ed:60:4b:76:ff:32:82:
7e:73:47:0f:f0:cd:45:fc:2f:f0:09:de:76:94:22:20:e3:28:
f4:15:57:bb:b9:45:01:2b:e8:fa:0d:4b:a0:c9:81:7c:f8:cb:
8e:03:d7:2b:8a:b5:1d:27:c2:ec:12:19:c2:41:38:ff:79:99:
fd:40:b8:41:46:76:81:76:4c:79:76:f6:c3:45:a5:68:8a:f9:
ba:bc:fe:50:5f:71:e2:bf:70:80:4a:e5:9c:db:7f:86:58:ed:
88:ac:ac:df:1a:0f:f0:da:12:ce:49:4a:cb:16:dc:2e:b7:a6:
29:79:21:d0:50:84:43:34:42:a9:63:cf:3f:68:9b:c5:8f:fe:
29:47:c8:e2:bd:c8:f6:26:75:30:f5:56:4a:59:ff:c5:15:6b:
a6:7f:72:4d:36:61:43:ce:6a:53:7f:63:f2:67:09:09:c9:ca:
40:23:53:59:52:c2:fa:a4:b4:05:8e:78:67:6e:24:47:08:99:
6a:2f:a6:c8:66:82:23:ac:6c:b8:a9:1c:1a:ab:26:6f:86:cc:
3d:3a:f4:ff:53:ae:ee:91:f3:f4:0a:0e:1e:4f:e1:df:a2:bd:
e6:e2:95:03:b6:2a:b1:07:fc:d9:41:79:e2:ca:eb:4b:4f:39:
6a:9a:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:26 2025 by rpki-client