Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: 80oVxSGxhyHxDkpxm+wn9FpSjIoXVQmPvL5pqVsgF1A=
Subject key identifier: AE:3F:A3:D8:50:52:69:76:60:4F:07:0D:E6:1B:AC:84:00:18:54:78
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 0198D5BC02C809A78597B67804AD555CB3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0BAE
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: C4Xhbx8j2I5RCLEksgvrXPACObGoxbwHVU4OEwVnP/c=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:02:c8:09:a7:85:97:b6:78:04:ad:55:5c:b3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=ae3fa3d850526976604f070de61bac8400185478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:3b:ba:af:ba:e9:44:d3:21:c8:44:2f:94:
1a:d4:c2:8c:9a:6c:24:2d:3f:31:78:dd:9d:43:6b:
d8:d3:35:48:f4:52:4d:23:07:20:14:b6:03:40:44:
70:1e:0b:ce:06:5d:ce:16:b8:71:33:7c:b6:0d:bd:
77:42:88:50:97:28:e7:54:bf:db:37:b2:15:03:18:
a0:43:f6:40:3a:5a:51:64:ad:34:46:17:54:e2:01:
ca:6d:8b:16:fd:fc:c1:42:ff:d8:bb:e6:1c:0f:5a:
6a:ad:8b:61:0b:4e:e5:55:38:72:57:47:f0:87:b0:
80:7d:77:c3:ba:07:31:d0:63:04:06:61:4a:ea:6c:
96:04:68:74:93:1b:91:19:d0:c1:9b:47:ea:89:af:
e6:19:57:4c:c7:6f:9e:3f:80:00:11:c9:19:bb:5a:
21:99:e4:6a:28:42:1a:dd:a3:29:71:62:31:4c:95:
9f:d6:e1:f1:81:3d:91:93:02:64:4f:19:c2:7b:07:
b9:45:ed:40:b5:ac:8e:b0:37:2e:20:ca:21:a6:be:
bc:0f:4e:0a:d8:a8:0f:04:f7:b4:c2:85:ec:43:46:
54:31:12:35:70:55:65:78:70:3c:e6:07:c3:e4:70:
96:1e:31:55:56:e0:04:d0:f6:48:bc:2b:49:76:37:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:A3:D8:50:52:69:76:60:4F:07:0D:E6:1B:AC:84:00:18:54:78
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:d0:e9:22:94:bf:c4:01:74:85:75:d1:ca:56:df:0b:46:
62:ec:28:5e:38:b0:05:40:9c:86:d9:ea:cb:e4:af:65:ce:a2:
ab:18:e8:ce:5a:e6:8b:9c:db:a6:06:92:1e:59:f7:3c:0f:4f:
f5:3e:f2:9c:f8:72:83:aa:95:c0:23:1a:6f:d1:9d:f3:de:e1:
42:3e:54:92:b7:c2:e9:86:64:31:80:d2:a4:56:7f:d5:a8:44:
bb:8e:c1:af:17:86:ff:0b:4b:aa:be:8c:0b:45:3d:4e:15:9d:
8c:e4:e1:2a:51:50:d5:92:21:0d:30:39:48:bd:cb:af:a7:a7:
0f:4f:f6:07:0e:c4:70:55:3f:63:1f:c1:37:94:68:89:cf:5f:
ec:81:06:df:be:ec:78:40:68:cb:ff:b6:01:03:4a:fb:25:fb:
da:67:fb:15:ec:1a:5f:79:15:a4:90:f6:50:66:33:e3:f7:22:
d5:8b:a5:71:ee:4d:c4:bc:51:16:86:8c:05:d5:6a:e7:ad:57:
30:e2:19:6e:89:67:6b:5d:b1:e5:2e:06:b0:75:ae:56:88:b0:
38:aa:6d:f5:b8:1f:f4:da:70:c0:db:cc:cb:1c:a5:47:54:2d:
0d:81:fd:24:cb:1a:ff:e2:37:98:d7:56:a0:c9:cf:1e:64:75:
1f:0b:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:38:58 2025 by rpki-client