Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: spFd+J/m3iQyjNNO8ngKK1/t63plTuPtuWzOC6gY4PQ=
Subject key identifier: 49:C4:C2:20:51:77:73:14:0C:2A:AA:37:BE:98:9E:77:2A:D3:27:0A
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 0198D472E44A644AFF66EF31149C8E4E0CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 1520
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: rffw6sSdU5tCAYdJkT1nMMaUC3wSZDVOEUZ+OLonSnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e4:4a:64:4a:ff:66:ef:31:14:9c:8e:4e:0c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=49c4c220517773140c2aaa37be989e772ad3270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:56:f2:cd:ee:8e:01:71:68:e5:f1:b5:0f:
4e:da:bd:6c:19:a1:54:ce:80:eb:03:72:50:0d:c6:
28:c3:2d:da:a2:1d:ab:e6:3f:75:cc:fd:cd:b1:56:
48:d0:30:9e:4a:b3:7e:00:23:8e:22:f2:b7:ea:76:
d8:25:64:c0:3c:99:c4:5c:00:44:b8:b9:4c:81:b2:
70:95:f9:7a:61:4e:6d:bb:fa:f3:86:93:b4:16:98:
74:56:31:6b:e6:a2:b7:ac:f5:3a:1a:19:94:a5:96:
76:fe:65:2c:a1:8b:07:de:99:31:6b:ae:b3:72:02:
54:f5:74:4a:25:1f:5e:4a:04:03:b2:56:07:02:bd:
d5:a8:21:c8:68:27:d6:11:ee:84:8a:00:cc:ef:bb:
df:94:06:66:10:95:f7:47:f7:a3:9a:83:08:73:e4:
33:78:17:98:b5:6c:cf:9d:4f:f0:4e:f3:5d:43:0a:
31:85:6e:a5:cb:5d:69:9e:21:ac:a6:40:da:e9:5d:
5b:0f:b6:36:28:b6:ac:c6:7b:37:c3:22:c8:8e:25:
9a:15:05:12:9c:0c:92:55:84:81:65:dd:a4:52:0b:
52:0e:96:d7:3c:9d:87:74:04:95:5f:0d:c8:53:dd:
64:da:64:9a:f2:24:6d:7a:2f:31:1f:10:cb:59:fd:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:C2:20:51:77:73:14:0C:2A:AA:37:BE:98:9E:77:2A:D3:27:0A
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5f:54:09:71:ec:28:46:0a:0f:4a:cd:7c:f2:1c:30:ff:39:
6c:5c:bc:7c:41:d7:22:46:27:e5:99:38:f9:78:9e:6b:62:ae:
3b:41:d0:73:58:53:fe:0e:10:52:a7:ef:15:d3:ff:1e:09:09:
17:7d:13:fc:b6:e0:00:e0:0d:98:8c:bd:77:34:11:2e:fb:dc:
74:4a:9e:53:fd:b9:f0:46:f8:63:b0:4d:8b:74:de:e5:fb:2b:
3c:f1:57:18:da:7a:47:e9:9b:d7:62:8c:f5:43:40:98:6f:33:
bd:e9:ea:ff:5d:ac:1a:05:67:a1:8d:13:b9:71:a0:20:22:ca:
82:20:31:6f:4c:73:f4:97:24:66:6c:4e:d9:56:1b:ae:4f:bb:
69:b1:b0:bb:3c:ee:6a:9f:47:19:2e:a0:ce:a7:82:87:83:76:
f7:82:d5:05:34:9b:f2:d1:12:d4:8d:db:fa:02:4c:e4:31:2a:
89:68:f4:47:46:df:97:4e:f7:37:94:3f:a5:67:31:56:57:10:
3b:3f:1a:0d:7a:b4:36:6e:b9:32:15:34:c6:b6:c9:2d:bb:64:
a8:3c:b4:5c:9e:99:52:1e:dc:92:bb:66:c0:44:f3:e6:5e:0b:
01:9a:2a:d7:59:f7:67:98:44:6d:21:e7:cf:4d:ae:c4:51:56:
7a:f5:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:37 2025 by rpki-client