Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: gb3LlpsOexbQ03A9F9yCCRGMi1iNxbaQ2Yb2e1QBSsA=
Subject key identifier: C5:62:63:4D:2F:0C:E2:24:2E:8E:53:CD:FA:13:7D:82:0A:B6:B3:96
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 0198D7A8D66EEA534309FADE4CE50A161557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 02CE
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: BTw57jbMz470r/xBEkOCMp7/M4xQKnmftINKRFpJGj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d6:6e:ea:53:43:09:fa:de:4c:e5:0a:16:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=c562634d2f0ce2242e8e53cdfa137d820ab6b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:06:c6:48:65:49:c3:30:82:e8:e1:d6:50:
75:2d:15:a0:bc:19:f7:95:8b:1f:6b:33:fb:cf:c8:
63:30:82:f9:d4:6c:e4:42:0c:28:95:7f:83:34:96:
55:2f:4e:f8:e5:32:be:78:d1:4e:3d:a0:11:aa:f7:
92:f0:e6:4d:58:ab:37:67:77:b6:d4:c0:b5:76:89:
a1:4b:98:e5:a8:61:9e:6d:7e:0f:9f:4b:ea:47:cd:
65:62:0e:ad:e0:9c:37:86:9c:c1:74:a2:ee:04:ac:
c1:e3:2e:06:46:2d:06:38:5d:2e:bc:f7:1e:1a:0a:
d9:10:ad:2e:86:ba:77:7b:ba:a3:d9:bb:36:c5:16:
23:a8:e7:d8:53:a3:43:00:ba:d1:62:64:01:67:4f:
9a:53:b3:a4:c2:35:04:77:ac:73:96:03:dd:04:f4:
25:33:13:38:f3:c2:35:9f:92:a9:0d:5f:1e:08:a8:
16:12:4b:b6:39:06:9c:fa:74:f4:2d:ff:37:40:e4:
46:3b:b4:b7:4f:2d:f0:aa:a9:bc:96:dc:ab:22:d1:
a8:1e:11:3c:5d:7c:d0:52:9b:ca:56:91:af:7b:ac:
87:ec:43:d7:a2:c1:2f:16:52:c4:17:5c:f6:2f:d6:
9d:fc:67:a8:ec:69:4b:d6:ea:9c:ab:a8:2d:bb:fa:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:63:4D:2F:0C:E2:24:2E:8E:53:CD:FA:13:7D:82:0A:B6:B3:96
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:0f:b3:dc:1e:04:9f:d5:64:c3:e6:4e:a8:62:f8:74:90:
fd:ca:68:4b:18:04:6c:f9:3d:8a:df:eb:61:fa:84:5c:a8:7a:
a1:24:ef:1a:ca:e2:bb:20:4a:07:33:0d:b6:32:88:b3:13:f0:
96:65:22:6e:e4:02:ee:82:8f:cf:a0:92:09:17:49:1b:df:73:
87:f0:7d:56:39:d8:0c:ed:5d:9a:b5:ea:6d:b8:ea:ba:6b:77:
79:10:3b:7b:45:34:42:39:c3:54:e1:b7:4c:dd:f3:f2:b9:16:
ee:66:19:0c:4a:4f:4b:13:65:37:dc:1d:35:84:ae:42:8d:41:
cd:d8:5c:7d:63:70:05:af:ce:63:67:67:a5:a6:4b:6e:2a:fd:
b9:ee:73:34:7d:2a:96:85:ed:bb:3d:05:8b:9c:0c:f6:86:40:
38:95:bf:0d:3c:1c:32:d9:d4:8a:bf:7d:5a:70:2d:5b:a6:cf:
97:73:d9:3a:6f:84:1e:38:1d:bd:44:ca:3c:8f:23:19:bc:6f:
fb:60:df:bd:56:e9:3d:1c:a3:49:eb:85:b6:88:47:72:a6:3c:
a9:b4:d9:71:78:8d:90:30:b5:14:d1:56:d4:cf:de:53:30:4e:
e3:f3:98:1d:1d:12:51:f7:ab:32:97:5b:24:f4:93:29:21:e9:
41:aa:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:10 2025 by rpki-client