Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: rC76vzfWi0TTdI1aRc0Uv0pHHfHe+XC9cUMW5BSOXcA=
Subject key identifier: FF:E9:DC:2B:20:15:F0:BE:21:8D:4B:7F:EF:71:3B:23:A2:CE:FF:4D
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 0197B745209D614C288B6A9DDD1771876013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0506
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: C2wTI+g6AOUiTO06NW7hVy3H4KWowc86P1NXBu6ANGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:20:9d:61:4c:28:8b:6a:9d:dd:17:71:87:60:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=ffe9dc2b2015f0be218d4b7fef713b23a2ceff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:f5:9f:c0:d0:53:e6:c8:5f:2d:f8:cf:23:
7e:45:c6:1b:47:bf:80:98:8c:5f:93:90:dd:89:e4:
e7:a7:3b:8f:cc:63:79:44:96:c3:59:f8:93:e7:8a:
c9:9d:49:ee:dd:56:59:18:ae:f9:df:99:b8:6c:a0:
54:82:66:97:03:e6:4b:e1:25:bb:2b:e5:d5:17:6c:
fe:0e:b4:c5:93:69:11:bf:ac:28:d2:7a:13:43:a4:
a8:72:34:ed:25:06:b3:ae:7e:93:f3:bf:4d:68:dc:
2c:8e:38:0a:40:0f:5c:e2:18:3f:b8:d8:b7:8c:e7:
8b:01:4c:f7:89:59:19:9e:5e:80:96:28:28:85:9c:
3e:8d:47:a9:99:2c:a1:a1:81:b9:8b:3c:f5:8e:70:
64:79:a5:08:86:ca:42:96:79:2c:97:a2:c3:d9:3c:
d0:58:88:7d:fb:b1:2c:55:62:b2:c7:50:ea:6a:ed:
01:a5:74:af:f2:e6:db:e8:b8:7a:4c:3f:90:1f:26:
d3:21:9a:58:99:f6:ff:c6:b7:5c:08:99:29:b2:f0:
2e:6c:b5:b8:4c:69:b8:0a:a4:7f:ef:8b:64:4d:66:
b4:c0:ca:a5:0e:f8:01:b6:15:a3:f6:03:5f:d8:af:
5e:bc:f3:9c:64:3e:88:87:3d:ca:75:22:2a:77:37:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:DC:2B:20:15:F0:BE:21:8D:4B:7F:EF:71:3B:23:A2:CE:FF:4D
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:cb:f0:d9:4f:07:1b:4e:25:a5:7b:eb:e4:94:e1:25:28:
c6:b1:cd:57:63:5a:6b:51:cf:59:33:0f:d9:89:8a:9e:06:4d:
ae:30:ec:20:97:2d:4a:a5:fa:73:c7:aa:61:93:96:76:13:d4:
a7:4d:3d:04:c8:cd:67:6c:51:ce:3d:bb:e0:cc:99:5d:00:dc:
5b:f1:bc:9b:30:64:dd:7b:66:bf:22:ab:a1:1e:05:de:ee:db:
33:b7:cb:24:25:e4:83:c9:3a:83:f8:d2:60:d1:ae:50:fb:d0:
a2:1f:40:4d:54:94:c4:c6:07:76:cd:c4:49:28:bf:3e:ff:3e:
de:84:39:57:f8:09:b5:82:15:2a:33:9c:26:9a:c9:c5:a6:05:
56:8e:41:9a:ed:8b:2f:46:8e:61:64:91:dc:c5:d5:90:84:58:
2c:3e:d3:24:c3:b7:29:d6:f8:91:0f:53:39:fb:c7:9b:8d:ad:
81:cb:e1:2c:69:56:4b:82:ef:01:d7:19:ca:ca:70:46:b4:24:
79:bc:11:43:29:44:1e:6f:7c:f2:e8:6d:99:d8:13:c1:96:26:
50:3f:22:03:b3:69:ac:98:85:1f:23:57:e8:a1:d2:31:fe:50:
42:55:02:80:47:30:98:c4:cd:f8:d9:41:e3:f9:ce:df:7d:e7:
47:87:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:41 2025 by rpki-client