Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
File: gXSGHd7wagc1I8mTkWjVtxadaHU.mft (raw, json)
Hash identifier: dvrf0anB1fR+1E6Sof29nyZb0ihWq2o8j7JkaxfAyhU=
Subject key identifier: 30:C1:D8:DF:E4:41:3A:D9:B7:BE:E2:AF:6C:4D:44:F0:D5:DD:86:70
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial: 0197CA27681AA2585D2CAB3C730A68C9DEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
Manifest number: 07FE
Signing time: Wed 02 Jul 2025 08:01:09 +0000
Manifest this update: Wed 02 Jul 2025 08:01:09 +0000
Manifest next update: Thu 03 Jul 2025 08:01:09 +0000
Files and hashes: 1: E-w5M4eQP91wEOXM7w1SR0QOmxg.roa (hash: +jFSsPpUEMM2UeClDBFj9F6a9KDL4VbEDLgdyScKqB4=)
2: gXSGHd7wagc1I8mTkWjVtxadaHU.crl (hash: 2vkCDXgrPuhNQpdDAvlbCbo6TYOkoAF744SED9C6Yq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:68:1a:a2:58:5d:2c:ab:3c:73:0a:68:c9:de:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
Validity
Not Before: Jul 2 08:01:09 2025 GMT
Not After : Jul 3 08:01:09 2025 GMT
Subject: CN=30c1d8dfe4413ad9b7bee2af6c4d44f0d5dd8670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:c0:6b:58:01:82:58:66:39:74:8b:45:7a:
e8:0d:6d:ce:c3:81:97:49:07:1e:c8:5a:2f:8b:eb:
35:5f:50:4e:28:04:2f:dc:9a:18:b4:fd:b6:9f:bd:
1b:e2:e4:90:7b:d6:b1:ed:93:a4:86:d9:78:a3:81:
1a:ef:70:a9:bc:ce:ec:c5:d8:a9:60:5a:22:08:44:
ea:11:fa:44:6f:0a:66:be:f8:1e:cb:11:99:1e:c9:
e2:c5:53:a8:93:0d:47:9a:c3:30:38:d4:43:0b:4b:
40:7d:17:0d:d9:64:3d:97:8d:c0:4e:cc:c2:63:87:
d5:1c:41:7a:af:c2:84:ce:82:a9:fc:21:37:ac:97:
58:90:0c:f9:4a:5e:c8:a2:03:4c:69:2d:7a:29:82:
78:78:43:17:b0:33:0a:a5:c9:cc:73:a8:e1:c8:ae:
8e:d5:23:ba:67:ca:15:a3:c8:cf:5c:a5:95:7c:6d:
5b:b7:46:81:9c:f5:34:11:9f:5b:a2:4c:f2:04:b3:
2c:ac:17:52:40:18:39:03:0b:09:3b:27:8d:52:63:
50:2b:1f:a9:57:9b:03:96:d9:17:21:f3:d6:bc:c1:
35:c4:0e:49:10:5b:cf:9b:f4:a5:43:3b:57:dd:ef:
fd:60:ba:da:6b:e5:ef:a0:da:00:d5:8d:5f:50:10:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:D8:DF:E4:41:3A:D9:B7:BE:E2:AF:6C:4D:44:F0:D5:DD:86:70
X509v3 Authority Key Identifier:
keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:56:4c:07:9b:f3:49:55:9e:7e:19:4a:49:8d:1d:3d:b9:
0e:90:0f:52:09:3e:51:d5:3a:ed:f4:5e:ab:41:61:73:58:cd:
84:6d:b2:17:2b:73:f1:9c:f9:db:0f:d3:50:ad:e5:5b:53:b6:
2c:57:50:4d:4b:e9:77:77:9d:ac:e3:55:1e:1f:56:95:3a:87:
0c:be:fd:7d:4e:f1:d3:ed:fd:f8:2b:10:1f:e3:b6:3a:5a:b6:
87:24:4e:7b:45:b7:a3:a0:32:80:24:a6:99:a0:71:3e:19:22:
24:ca:31:dd:fc:c1:72:6a:fa:a3:81:91:77:cf:9a:cd:67:3c:
e8:ce:8f:5a:a1:c4:d3:4c:2d:75:8f:e3:4d:f9:00:7e:d1:4d:
b4:c7:13:49:32:1b:3e:b9:93:ec:73:4c:1a:6c:f2:bc:59:5b:
05:df:17:c4:66:40:53:fc:33:3f:08:c7:b1:75:67:c4:9e:14:
e4:b9:a6:ad:61:91:04:42:b2:2c:c2:9c:98:2d:5d:07:8c:9e:
7d:fa:80:8e:45:ce:e5:57:6a:cf:6b:9b:05:2f:d1:4f:79:a1:
ca:29:31:ab:41:5c:7c:b5:25:65:76:a5:f9:8f:18:ee:b9:2e:
45:b3:62:44:73:ae:90:09:cb:68:7d:8c:ed:d7:47:57:5c:b5:
6a:69:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:19:35 2025 by rpki-client