Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: w20Nr6g2QM1tLKqyxWLEn2iMmPiL1F3Bk47xCrNPZP0=
Subject key identifier: 15:90:7F:54:AF:41:F0:9B:D8:C6:BF:FA:B4:F5:1A:63:32:42:AB:24
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 0198D4DFF5B6391F387B55064C1B9B7B3125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0EE0
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: PDOWLum/RVMFLu2Dxy1R2SlfpCAuCHlCSdrclTMIewc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f5:b6:39:1f:38:7b:55:06:4c:1b:9b:7b:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=15907f54af41f09bd8c6bffab4f51a633242ab24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:ff:e1:9d:f6:80:0c:9d:96:b2:a8:ee:94:
57:45:e4:1d:4f:38:5d:33:07:f4:25:9e:a3:93:4f:
f3:35:98:88:eb:58:0b:5b:18:73:15:5d:93:ec:37:
59:ac:d4:b4:dd:0f:f4:48:2c:59:79:42:f9:ce:5e:
d5:4f:c9:9e:d3:00:a6:27:29:3d:23:5f:af:79:d9:
62:52:67:4d:d5:ba:76:4e:15:9d:13:41:90:e6:c4:
87:9b:b6:c6:67:41:4a:3b:d8:c2:1f:d4:4e:47:11:
c5:e7:79:10:b9:4f:34:25:4d:f3:8e:53:41:81:03:
ec:10:b7:73:ce:a7:be:a2:92:ab:ab:55:a6:93:44:
b2:9f:f7:e0:4d:25:c4:73:83:9c:28:79:25:a4:18:
e0:12:9c:9f:8c:02:af:9f:97:18:81:97:7f:20:ae:
41:1f:31:a2:9d:99:78:79:7e:b4:c1:b9:bf:5f:b5:
3e:b1:2a:d9:de:1d:ea:3c:be:af:9a:bf:7e:b0:ae:
e8:88:a7:11:3d:0a:21:80:5a:86:22:a0:1c:32:c1:
cb:16:b8:de:e0:08:d3:ce:09:69:25:61:f6:ff:59:
af:68:9a:b9:f0:37:c0:95:99:ba:2c:59:ba:b4:d4:
1c:23:0c:5f:02:74:24:ba:c8:b3:8d:e4:77:6a:af:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:7F:54:AF:41:F0:9B:D8:C6:BF:FA:B4:F5:1A:63:32:42:AB:24
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:57:3e:10:90:85:c2:51:85:e0:d2:3a:3b:ff:53:f3:5a:9e:
85:f3:7f:95:92:fc:40:3e:22:aa:74:d3:2e:ab:cc:28:51:9c:
01:21:f1:1e:0d:a4:81:c4:35:bd:9b:49:02:c7:c8:3f:b0:be:
25:f2:e4:75:61:02:87:de:77:b8:69:cd:d2:bb:a8:d9:e6:b8:
3d:a1:27:db:b4:e1:fb:f0:1f:ff:e3:5a:60:0e:79:62:7a:60:
a5:9e:fd:d1:28:58:a4:3b:8d:db:ff:b4:9f:95:b1:82:03:f6:
76:9e:eb:8a:5e:19:31:c5:8c:a8:04:36:c0:b9:c2:c7:50:61:
90:c4:b6:d0:d7:1e:87:78:27:a5:02:a0:ce:f2:ac:3f:81:a6:
d6:36:ee:be:ec:66:db:c8:c7:85:d8:29:27:8d:cd:69:07:cf:
87:85:6f:6a:5b:52:fb:01:dc:66:3a:75:03:90:cd:26:12:96:
8b:a6:1b:50:35:e1:bb:aa:e5:68:53:18:b1:88:c0:f9:0b:b6:
72:f9:7d:b6:f9:67:78:6b:6a:99:7c:e7:68:12:ec:32:b8:e2:
1f:b4:c1:ec:19:f0:2a:33:9e:8a:3f:00:64:80:6a:0b:a8:ab:
79:f2:91:5e:a2:00:da:a4:a6:e2:40:50:5d:dd:68:11:81:33:
5e:c4:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:55 2025 by rpki-client