Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File: GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier: PxJ2Re0ykpxHfq/2CiDMh9Yuz6GpAbWuuZQTMfYF7Zs=
Subject key identifier: 83:82:D8:FB:29:E8:50:CE:EE:78:6D:F1:F3:2C:B0:89:B0:0C:95:5E
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer: /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial: 01987C7720889AD4BF104A181BA4A5E7F4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number: 0800
Signing time: Tue 05 Aug 2025 23:00:38 +0000
Manifest this update: Tue 05 Aug 2025 23:00:38 +0000
Manifest next update: Wed 06 Aug 2025 23:00:38 +0000
Files and hashes: 1: 8np8dFC03aZy-NSvKyaibYkoD2c.roa (hash: yH2zRDSO2w0uHZTYPQwRFl05v2muoqWJ+Z0OUk1oMhY=)
2: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: 9wmW5EMSXIxkkD7hbNMA6809DErQQIkufkzX7Nm5WWg=)
3: dl7fBf_Q9iWR2RTbgzduCGEsnu0.roa (hash: eVfjDssVSwbldy+Bqk+kwlieiStmiWJtJAkqUXW89hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:20:88:9a:d4:bf:10:4a:18:1b:a4:a5:e7:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Validity
Not Before: Aug 5 23:00:38 2025 GMT
Not After : Aug 6 23:00:38 2025 GMT
Subject: CN=8382d8fb29e850ceee786df1f32cb089b00c955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:48:34:61:99:8d:37:86:40:13:b7:b9:a1:
f6:15:b4:31:15:cf:6c:1f:f3:f0:7f:47:07:81:f1:
c2:15:ad:d2:58:d5:e1:46:b0:30:1e:a2:06:a2:50:
33:24:37:ef:9f:8b:86:9b:e2:5d:42:40:88:7a:61:
3b:9d:9d:4b:63:cc:a8:74:cc:0e:7c:b6:c4:9f:00:
24:63:5a:3b:04:f9:4c:e6:fe:7d:11:62:3b:7f:5b:
fa:65:57:5d:19:a2:f1:dd:2a:08:79:82:96:29:cf:
5c:30:8f:ec:b8:03:0f:21:93:6b:0a:e6:1a:1a:a8:
21:9e:0c:34:62:de:2b:03:71:92:b4:0c:c9:64:e5:
4a:22:a0:55:b9:df:0a:61:31:09:a9:f4:bc:ec:bc:
9b:79:c4:ee:78:77:55:c3:73:e1:92:63:6f:e2:ac:
72:b2:da:46:63:a7:b0:8c:48:31:a1:8a:73:2d:bd:
20:35:c3:cb:35:a5:ad:d4:bf:14:03:63:23:06:09:
c3:95:7a:d8:10:9a:85:07:97:88:a5:ab:70:fa:31:
dd:fc:63:6c:70:3f:8e:f4:3c:12:f4:d9:e3:48:a8:
c6:82:97:66:7b:0f:3e:b7:f6:61:29:f6:19:b5:f2:
8c:87:c6:b6:56:8f:0b:0a:a9:4b:b6:95:fd:e3:5b:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:82:D8:FB:29:E8:50:CE:EE:78:6D:F1:F3:2C:B0:89:B0:0C:95:5E
X509v3 Authority Key Identifier:
keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c7:66:81:d1:25:62:ac:1f:61:65:bd:af:6c:58:70:94:38:
e6:b4:1e:2d:dd:df:1c:77:ce:a7:e2:fa:20:e3:89:a4:fe:46:
3c:a0:97:ed:75:3a:ee:b6:19:54:b0:14:45:ff:23:43:e6:49:
e9:21:7d:bc:1f:92:3c:3e:03:49:82:e9:1a:78:05:5d:30:cc:
7e:f7:b9:f8:0a:97:2e:18:8b:40:c8:2a:19:27:cb:af:53:26:
39:15:00:de:cf:2e:5a:ec:fc:5d:f7:84:b4:6f:29:12:1c:de:
1e:bf:c8:c1:d0:84:0d:59:9d:94:1a:c7:69:28:75:99:26:51:
7b:4e:38:cb:4b:d7:2b:7a:c9:3e:ee:b5:f3:57:f9:79:7a:00:
08:fa:56:73:1b:6d:d4:7f:0f:2b:0b:aa:7f:df:c1:f8:8d:3a:
95:7f:78:ca:65:19:fe:a4:e7:25:4d:f4:e1:1b:92:07:b9:3c:
7d:06:32:a9:ec:0f:32:05:82:ee:4e:ce:ad:f8:25:18:3c:3d:
4c:2b:91:5e:fe:28:0a:12:d2:58:21:0d:46:70:60:fb:58:70:
11:60:c9:60:77:f2:f5:88:c3:66:ab:8a:2d:71:23:d6:a4:98:
10:f8:89:b4:6c:96:f4:d8:63:ac:0b:d1:a8:64:0d:ed:38:10:
30:24:be:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:39:42 2025 by rpki-client