Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier: qSDFs4MaWAUJ7xT6W7A0LfYOtgjscTBW1yvqQscd64E=
Subject key identifier: DE:60:86:B2:AA:49:42:B8:30:66:AC:0E:5C:4E:63:24:01:F9:66:05
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 01987908864CBD1BC72B21690876BE4B4BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number: 15AA
Signing time: Tue 05 Aug 2025 07:00:58 +0000
Manifest this update: Tue 05 Aug 2025 07:00:58 +0000
Manifest next update: Wed 06 Aug 2025 07:00:58 +0000
Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: uwyzPvD26w+WExh++lWCqSLIHyMJAvpfpagb431F3UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:86:4c:bd:1b:c7:2b:21:69:08:76:be:4b:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Aug 5 07:00:58 2025 GMT
Not After : Aug 6 07:00:58 2025 GMT
Subject: CN=de6086b2aa4942b83066ac0e5c4e632401f96605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:af:44:99:a6:cb:f3:52:5b:41:b0:26:0b:
89:50:88:1f:07:d2:bc:5d:a2:17:d5:c5:67:05:a7:
c5:5c:ea:a7:93:a6:e1:d8:dd:98:25:e6:b1:c2:e7:
ef:d6:85:52:ca:f1:8e:fb:75:27:82:fc:11:e0:6b:
b3:a7:2c:62:22:5a:8d:b6:47:69:ad:01:d5:ec:46:
a0:b5:12:83:0a:35:27:9e:d9:e9:53:97:b6:12:e4:
37:b9:37:30:fd:b3:a1:67:eb:ee:59:1b:6f:67:f5:
d5:a1:ee:c4:0c:6c:91:85:6c:9c:05:1b:50:97:79:
ac:4b:bf:b9:8b:8e:04:18:7c:7a:fd:e5:24:f1:2f:
64:78:36:42:39:23:37:d7:f0:2a:0d:05:f1:11:37:
05:b6:2e:bf:e9:f3:e1:5e:14:f3:21:8c:31:6d:ac:
8a:f5:cf:c7:f4:0b:42:1b:66:2b:d2:20:ce:fa:02:
bf:9a:e9:3b:b1:4e:68:98:01:39:8d:32:e6:c9:10:
54:47:8a:90:99:9a:68:47:2c:26:d6:b6:b6:9c:03:
78:08:58:af:fa:57:ba:3e:52:c2:1d:e2:ce:48:2e:
ba:a0:44:c6:f0:74:4c:6b:fd:f4:22:43:00:53:0a:
13:3f:ce:df:f7:5e:1f:27:32:c5:5b:f8:17:3c:9f:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:86:B2:AA:49:42:B8:30:66:AC:0E:5C:4E:63:24:01:F9:66:05
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:83:60:ef:a9:b4:99:c8:55:23:5c:29:4f:df:1d:0b:b1:
43:ef:bf:fd:b7:f2:a7:b9:44:b0:51:fa:7b:86:68:54:e2:b0:
2b:da:13:5f:0f:16:f4:0a:34:7f:1b:5c:22:3d:0f:b3:cd:3f:
3e:c2:ca:b3:26:2e:cc:ce:cc:48:cd:2d:8c:69:3a:5c:59:ca:
0d:8b:8a:03:10:01:f4:a4:09:be:12:33:e7:11:85:f4:91:12:
da:5e:5a:1e:c1:55:b4:f6:7d:92:e7:7a:6f:c1:91:d4:6e:c8:
24:3e:c2:10:c5:3f:21:92:02:18:d7:80:9e:67:73:77:f0:bd:
e2:80:53:5d:3d:ef:08:f4:0f:55:b0:47:55:4c:f2:65:f4:40:
34:73:94:fa:f7:48:93:12:e5:2f:9a:f6:02:d6:ef:e2:31:8a:
7c:86:a5:9b:e5:95:94:f7:ac:40:cf:cd:cc:46:9c:d7:d7:70:
2e:2b:fb:e3:bf:68:ef:6b:6f:2b:6a:ed:9f:76:4b:83:00:57:
80:33:ed:04:f8:4a:d1:3f:fb:cd:87:8e:4b:2e:65:83:24:5d:
85:0c:be:6d:a7:26:12:76:7e:dd:32:6d:16:cf:bc:45:bd:c8:
cc:f8:54:81:17:a8:83:04:b8:38:26:bd:e8:da:b0:f6:24:28:
ec:83:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:20 2025 by rpki-client