Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
File: gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft (raw, json)
Hash identifier: uZ/O/AD0nezWdS9BwXmW+51f8cheAAqwBzXzEqjafY8=
Subject key identifier: 4D:77:DE:1B:2F:AA:15:FC:E2:7B:77:57:E3:3F:CB:72:B7:4B:2D:F2
Authority key identifier: 80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
Certificate issuer: /CN=80eb71d019a483225c324c88c6c48020ef9f1168
Certificate serial: 0198D515D93AB3813099CC96713943FD2FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:35 +0000
Manifest this update: Sat 23 Aug 2025 04:00:35 +0000
Manifest next update: Sun 24 Aug 2025 04:00:35 +0000
Files and hashes: 1: gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl (hash: Kdz99wgzOP/ex5oftNTsJwicaV89uWgTpnkLCbLKcSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d9:3a:b3:81:30:99:cc:96:71:39:43:fd:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80eb71d019a483225c324c88c6c48020ef9f1168
Validity
Not Before: Aug 23 04:00:35 2025 GMT
Not After : Aug 24 04:00:35 2025 GMT
Subject: CN=4d77de1b2faa15fce27b7757e33fcb72b74b2df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:f6:16:9d:a6:48:e3:c8:5a:3b:2c:49:24:
0b:f3:e0:c5:26:9e:d6:d9:da:57:de:77:ff:99:a4:
58:04:6f:9e:2f:e1:c8:ab:52:f1:44:59:f3:c6:4a:
cd:5f:24:e5:e3:22:60:0a:66:4b:70:b6:8a:75:57:
34:81:33:7f:dd:93:5b:6d:5a:87:b0:df:29:c0:2f:
c1:68:ad:18:40:c6:d8:de:2d:d6:0e:e1:7f:9c:af:
96:6a:c9:d1:74:b6:1d:b5:c5:4a:fd:87:0f:8d:80:
d5:1a:1f:f4:e5:be:9a:a1:c1:f4:8b:df:4f:9a:70:
34:55:23:b8:eb:89:2f:bf:fd:3d:78:65:d3:09:8f:
86:b9:22:7a:6f:35:5f:fc:e3:a1:2b:04:72:31:cd:
4e:3c:1f:e7:21:6c:ee:40:17:5b:d5:d1:12:1b:c1:
91:c6:c6:78:b2:fc:0a:48:ef:71:3f:2c:7c:38:66:
90:63:0e:cf:9b:bf:ae:5e:fa:c9:2c:b3:80:92:c2:
e5:b7:14:98:17:c8:c8:f6:09:ec:cf:1b:be:7e:2a:
cf:20:d5:62:c2:78:c7:27:01:7f:6f:c5:21:c4:7d:
5f:19:73:db:5e:72:88:f3:9d:b8:44:61:61:c3:47:
84:cb:82:48:b5:48:b3:94:58:14:2e:51:a5:94:33:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:DE:1B:2F:AA:15:FC:E2:7B:77:57:E3:3F:CB:72:B7:4B:2D:F2
X509v3 Authority Key Identifier:
keyid:80:EB:71:D0:19:A4:83:22:5C:32:4C:88:C6:C4:80:20:EF:9F:11:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOtx0BmkgyJcMkyIxsSAIO-fEWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/290789-1922-4eb0-8ad4-fed89d170da4/1/gOtx0BmkgyJcMkyIxsSAIO-fEWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:14:43:dc:08:29:25:8e:12:01:76:03:8c:15:1c:91:db:
4c:42:dd:32:96:1b:75:3f:3e:a3:4e:aa:36:5d:2c:b1:80:53:
7a:ce:81:b2:59:a9:c1:18:3b:25:c5:1e:bb:36:05:ba:d5:62:
80:f2:8b:39:72:47:0e:bb:ad:7f:a0:15:54:9b:cf:fd:ae:c9:
44:ab:d4:1c:09:06:fd:c6:19:db:9a:e4:63:10:25:a2:54:16:
89:99:1f:56:77:26:2b:7f:12:ea:83:ca:6b:70:a8:78:e9:b2:
0b:03:30:8b:fa:2e:7b:25:a5:24:3a:2a:8f:76:2a:5b:a2:74:
26:dc:5f:ea:21:ed:f7:f9:65:05:b5:01:ae:09:0e:f0:b7:6d:
9a:69:c1:4a:87:42:63:dd:bb:bf:6e:20:f3:b2:fe:5f:1a:ce:
b1:71:7d:a4:e9:20:04:96:84:01:b2:e0:54:92:b6:23:42:22:
1f:f4:49:76:f9:42:42:32:f5:0d:b8:ef:7b:da:32:7b:87:fb:
20:24:64:0b:56:cd:68:34:85:a5:5b:08:46:3e:8f:05:b3:dd:
b6:fa:48:12:53:f1:41:dd:10:3d:f6:16:ba:17:29:ef:7a:a9:
0a:dd:01:84:5c:2a:b7:fd:1d:9f:78:4f:47:04:51:85:bd:4b:
f6:4c:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:52 2025 by rpki-client