Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: NM+V+mAauyuseFyl3uR1K0aeOCM3YClU4miAcGSCgOM=
Subject key identifier: A6:65:CD:6C:8A:95:DF:4F:C0:42:BB:93:83:79:69:AB:86:71:B3:F3
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 0197CC4D5565B020930A3762346F7B2C3DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 15C0
Signing time: Wed 02 Jul 2025 18:01:49 +0000
Manifest this update: Wed 02 Jul 2025 18:01:49 +0000
Manifest next update: Thu 03 Jul 2025 18:01:49 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: yEz+1yFYIGaJBAcTMHjqupWE0Vca237wKi9tt2qhG3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:55:65:b0:20:93:0a:37:62:34:6f:7b:2c:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jul 2 18:01:49 2025 GMT
Not After : Jul 3 18:01:49 2025 GMT
Subject: CN=a665cd6c8a95df4fc042bb93837969ab8671b3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:2b:b2:e0:9f:9e:38:73:94:3b:8e:2c:f4:
e5:3b:dc:a6:fe:ee:c1:59:06:3b:c9:b1:9d:5b:48:
c0:74:bd:75:4d:e2:fc:94:04:ef:b2:5b:19:e3:12:
72:6d:87:4e:c7:57:76:25:93:ec:9f:d5:fe:3e:ba:
be:45:8c:ed:f7:ac:89:eb:21:ab:af:93:78:dd:f2:
5b:a2:65:1e:70:4e:a3:5c:89:db:43:ac:06:32:c5:
81:e0:0d:41:b6:a7:62:7c:61:3b:c0:7d:aa:8f:f7:
d4:01:a2:f4:1e:70:59:f1:e0:8b:f4:b8:5b:2c:e6:
72:b0:16:1e:2d:67:54:27:94:25:5b:75:4d:b2:5d:
18:52:2c:6b:99:c0:ef:4d:cd:35:67:d8:ac:6c:50:
15:0e:c8:88:f7:df:88:c4:80:5f:d4:5d:ca:50:2c:
70:c4:b7:dd:02:f6:20:96:44:de:0e:20:22:9f:7f:
f9:14:2f:3e:c2:52:e0:b0:0e:a1:c8:92:cf:91:af:
b0:ed:1a:90:3f:24:4f:c1:47:33:be:43:6c:d1:32:
39:c8:ce:37:a3:2d:9f:02:09:13:ca:79:83:8f:bd:
f0:c6:ba:5c:86:17:f1:1d:ad:85:32:90:38:c2:d6:
a7:7c:8f:5d:e7:db:84:92:c5:94:4e:ba:43:f7:1e:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:CD:6C:8A:95:DF:4F:C0:42:BB:93:83:79:69:AB:86:71:B3:F3
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:c6:9d:e4:9f:f9:99:71:6d:8f:e1:de:b0:dd:85:67:23:
98:50:a5:2a:67:cb:46:a9:f9:99:d7:40:8f:ed:a6:83:e7:5c:
68:ed:21:0e:de:39:74:07:52:3b:c1:cb:4a:e7:60:09:97:cf:
4c:d5:14:19:fd:7e:b0:4d:48:f7:78:d0:48:29:67:89:e2:f7:
44:17:60:a0:c5:b2:bd:a3:67:00:1d:31:70:60:0f:83:34:78:
d7:47:55:f0:48:80:c7:a9:70:82:a5:07:9c:82:28:7e:4f:93:
da:75:ea:f7:8f:14:75:76:21:fd:f1:63:20:bb:38:89:4d:33:
8c:9a:70:c5:ce:04:e0:7e:e3:e0:34:4f:1d:e0:04:7f:79:6c:
6f:ac:e9:1e:fa:ee:74:ae:ee:59:92:e5:ed:df:ff:90:d8:b9:
7c:b5:0b:89:5e:57:93:f7:f6:d0:4f:96:83:fb:1d:f1:82:0e:
bc:12:24:91:e7:00:b5:d8:54:a7:52:11:81:1e:bb:dd:33:3e:
49:60:50:41:53:b9:a5:67:e1:d4:05:ad:03:df:e6:79:94:09:
16:33:8b:e9:87:5e:bf:d0:8b:f6:d0:fc:4d:7f:3d:51:cb:eb:
d3:a1:33:9b:fb:3b:56:ba:fd:d2:cd:86:49:5a:b2:f2:5a:cc:
f4:5d:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:23 2025 by rpki-client