Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: UXlpacrn/cVvqAO+qWOWFCA40W/I0yBaLpZOQWe6VAU=
Subject key identifier: C9:91:03:DA:3C:4A:93:EB:B7:69:F2:2F:FD:C6:4C:CB:E2:A4:0F:6C
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 0198D65F2BF572A16A6846F334506CE9D5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: jvisVCHavZF+F90MZZHofxiRIxJFyLcfD0NGNyaVfAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2b:f5:72:a1:6a:68:46:f3:34:50:6c:e9:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=c99103da3c4a93ebb769f22ffdc64ccbe2a40f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:fb:7f:e3:11:0f:06:5e:4f:4e:8c:3f:9a:
b3:61:c6:96:92:3e:a0:ce:1d:11:83:b1:4e:e6:47:
eb:4a:57:0d:67:4a:ce:4e:ea:3e:dd:d8:6b:e9:d5:
94:c5:3d:a0:1c:10:00:79:63:b1:6b:b0:6c:a3:9b:
34:81:3b:c3:75:18:86:60:13:f0:80:44:34:a4:78:
eb:a1:a1:25:ec:10:8b:b7:27:3e:17:ab:c4:d6:9d:
95:01:8a:80:03:85:17:43:55:95:4a:46:56:e6:df:
64:76:52:6f:9a:8c:b9:07:06:3a:2a:c4:4a:7d:b0:
eb:19:7a:96:f7:23:70:1f:b2:8d:2b:b4:c0:7c:79:
c8:04:89:7e:75:a8:20:63:6e:6e:77:55:1e:e9:db:
39:6b:92:60:2c:38:ae:de:11:bb:17:25:14:21:3f:
88:2a:a8:7b:98:e7:53:f0:53:06:f6:d1:80:1b:26:
e0:24:4d:71:59:5e:4e:4c:13:92:b5:d7:df:2c:2a:
65:91:fa:df:b0:8a:a0:a1:a1:18:96:8f:27:55:cb:
b5:ee:f5:9d:d2:12:ad:e1:38:e9:4c:40:69:27:ac:
84:f9:1d:d9:d8:be:9e:10:6f:37:b6:ad:5c:0e:5c:
32:4c:de:b0:e4:80:7f:3e:0b:7a:58:de:2a:e7:b1:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:03:DA:3C:4A:93:EB:B7:69:F2:2F:FD:C6:4C:CB:E2:A4:0F:6C
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e3:2a:43:a5:88:22:15:94:8c:a1:e3:0a:bc:5a:31:b1:78:
70:f6:1d:d1:96:b4:b9:a7:51:c3:b9:96:a8:e6:59:6a:76:26:
7a:dc:7b:92:96:d8:30:5a:3e:ac:50:8a:52:6c:65:0f:d7:2b:
5d:5f:c3:ac:57:79:8b:4e:3e:63:82:59:44:4e:b1:47:f5:cb:
0b:4b:92:07:61:75:82:f0:b5:14:c2:e7:96:55:d6:65:3a:f0:
97:16:42:19:0e:db:70:90:be:b8:fe:b6:23:4f:ca:d5:4b:32:
fb:13:1f:41:e7:81:a2:37:80:dd:11:a2:1d:81:16:c4:3c:7b:
0a:45:39:da:7c:7a:35:eb:e7:98:76:34:d1:b9:ad:ae:c2:13:
b9:cc:43:8c:b8:35:76:df:41:fc:90:ac:e1:aa:e5:f9:ae:94:
4e:c0:3b:94:95:29:e3:04:81:d4:b6:cb:81:1f:e5:b1:e7:16:
b3:55:6b:04:6d:bd:48:a9:b6:61:4a:c4:0c:35:62:6d:5d:5b:
85:38:5d:88:74:2e:cb:fe:4a:a1:b9:be:bb:7c:49:ba:01:bc:
37:be:1b:51:b5:20:d0:80:27:b2:3d:7d:0b:b6:fb:ee:21:05:
0a:93:88:85:95:14:40:cc:31:43:6b:a2:cd:eb:2c:53:8a:3e:
06:33:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:57 2025 by rpki-client