Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File: gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier: LGooQx846f54pM0szH4rw3rs5R54CEP4UvlPJMAQBOE=
Subject key identifier: D5:E6:AA:14:C6:57:B5:B0:20:72:4C:17:89:43:AF:50:87:5C:68:9B
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 01987419364F0FC09EDBFE41B606999F3E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 08:01:05 +0000
Manifest this update: Mon 04 Aug 2025 08:01:05 +0000
Manifest next update: Tue 05 Aug 2025 08:01:05 +0000
Files and hashes: 1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: BPMbfA5MxjAjY6bsjfbTtHsIDo2tC4j/8WSFVOLKfFY=)
6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:36:4f:0f:c0:9e:db:fe:41:b6:06:99:9f:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Aug 4 08:01:05 2025 GMT
Not After : Aug 5 08:01:05 2025 GMT
Subject: CN=d5e6aa14c657b5b020724c178943af50875c689b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:9a:5d:17:1f:f8:3d:52:2c:d1:d2:1d:d9:
0a:00:a0:8c:bf:a5:e1:6c:f0:a2:76:5b:e5:90:00:
81:04:97:34:aa:4d:ee:c7:a4:d4:a1:43:4c:6d:e1:
31:8e:ce:47:64:2b:d6:26:b2:11:38:2b:60:d6:9b:
1d:96:57:13:ea:13:90:ce:26:d1:65:03:97:5d:eb:
df:bc:ad:6f:3c:af:80:cc:8a:7d:25:13:58:0a:7c:
1a:b4:a0:16:38:d3:13:78:c0:eb:92:10:8d:e8:a6:
34:2c:11:53:bf:b9:c0:9e:1b:0b:c9:2a:da:fd:5f:
3c:f1:0b:91:98:f4:10:e1:92:69:70:c3:62:59:7d:
e9:f6:c4:27:0e:be:bd:06:a6:b5:5d:85:37:fc:62:
c4:08:a8:f7:25:6d:f6:77:45:6c:fe:89:78:aa:a4:
7a:94:2e:b1:d4:97:95:fa:be:ce:0f:03:ce:78:af:
4a:ce:f5:b0:83:53:80:36:ec:cc:9d:34:aa:f2:5f:
49:d3:65:47:bd:b5:aa:bf:6f:3c:4b:bb:1a:63:23:
ca:3d:32:77:dd:52:90:5d:d9:15:1a:56:1b:3d:17:
b5:04:09:31:75:37:3f:bb:3b:06:85:76:bd:77:2c:
d2:d8:a4:1a:63:38:21:c0:a0:c3:1c:a7:22:b1:3f:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:AA:14:C6:57:B5:B0:20:72:4C:17:89:43:AF:50:87:5C:68:9B
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:59:cd:4d:1d:f2:35:43:d9:01:58:1f:3c:bb:22:0a:d9:63:
3f:21:5f:4b:2c:3c:fe:74:6d:81:01:30:0b:4f:a4:b4:8b:b9:
ee:c4:61:ac:57:50:dd:c0:b2:17:cb:42:a0:ad:c8:d6:52:44:
0f:56:81:38:f2:6c:9d:dd:df:c7:50:ec:de:d7:67:c8:a7:3a:
c2:b2:05:8d:70:33:25:b8:15:65:da:1c:72:ba:c5:17:5c:dc:
ec:a8:08:24:0a:e3:2b:73:9e:8e:a3:1d:51:3e:0c:bf:d6:f5:
54:98:11:7d:ca:85:db:50:3b:da:ca:1a:5f:2f:65:98:e9:87:
59:46:47:6a:a1:b9:a5:e2:f0:7e:60:fb:c8:56:ae:01:f3:5f:
10:ea:a7:bb:a1:19:8a:a2:b8:03:a6:66:c0:d0:6c:8a:3d:3b:
57:cb:9a:75:12:6b:15:2d:ee:24:b8:bb:1f:24:59:c2:c2:43:
57:6a:44:7e:37:0c:ef:55:46:23:b4:2c:bc:1b:28:71:5c:aa:
02:a3:54:87:03:2b:31:46:ac:aa:1a:0c:de:8e:44:f4:1c:73:
39:da:47:f3:b6:09:d8:d1:d4:b0:89:a3:0e:c1:de:5a:e5:03:
c2:89:b4:c8:31:28:08:bc:e3:b3:3a:b0:fc:0b:b9:77:07:f1:
51:fe:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:25 2025 by rpki-client