Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: ae6msylZN+kCjwBuP1G2l5S8E6pJffI2KVtmdlPHqog=
Subject key identifier: 35:30:95:30:C4:C6:7C:CC:77:09:C1:D3:83:2E:D3:B9:6F:94:75:0C
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 0198D69800643FC11BB58A608A181D1049CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 0295
Signing time: Sat 23 Aug 2025 11:02:22 +0000
Manifest this update: Sat 23 Aug 2025 11:02:22 +0000
Manifest next update: Sun 24 Aug 2025 11:02:22 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: kfu4NwlBEHchKrlXLRQXG5ccbDnsH+vBPniHOgU/9sQ=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:00:64:3f:c1:1b:b5:8a:60:8a:18:1d:10:49:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Aug 23 11:02:22 2025 GMT
Not After : Aug 24 11:02:22 2025 GMT
Subject: CN=35309530c4c67ccc7709c1d3832ed3b96f94750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:52:90:c2:e3:3f:6a:52:f3:49:38:84:d4:
1b:eb:6e:5e:5d:95:2c:67:fb:cf:3e:63:56:9b:5f:
1c:fb:ec:5f:63:96:83:f9:55:2b:e6:93:a7:ad:d3:
ef:d2:cb:d7:e0:8e:8f:98:59:11:bb:5d:7c:ad:1a:
75:71:3e:20:b9:0d:c4:18:40:04:11:38:ca:77:3b:
7a:a5:fe:37:3b:21:eb:1a:00:3f:b5:8f:86:bc:ac:
2d:d6:ae:31:1b:8e:05:8d:fa:5c:61:1d:68:3c:ab:
13:b6:9d:38:d7:f8:15:35:05:48:78:bb:bd:b5:fe:
58:fa:ee:22:4e:e3:ee:70:0e:8a:3c:cb:0b:6e:bc:
44:ac:5c:9e:11:97:f3:85:78:da:a9:d6:19:7a:8d:
38:ab:ed:49:5b:d5:62:f2:c1:40:9e:38:b7:bf:77:
d5:f6:22:cc:56:48:b4:02:a4:51:82:9f:6c:5d:71:
d7:bf:0c:88:a4:6e:ce:0d:de:12:8e:ab:62:65:18:
bd:b8:90:2f:62:27:54:f8:14:23:7b:b3:b7:46:9d:
b1:9a:b2:97:29:14:e3:ef:21:bb:5c:d6:c0:ce:47:
bf:a6:57:67:55:94:77:7d:1b:c7:52:9a:ec:c2:3f:
42:2c:26:0a:13:ab:f0:e2:67:77:aa:2e:92:99:01:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:95:30:C4:C6:7C:CC:77:09:C1:D3:83:2E:D3:B9:6F:94:75:0C
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:71:32:68:8d:89:d2:61:0d:07:a9:c2:46:08:47:2a:5a:
9a:03:47:d0:f3:75:bf:eb:c9:12:98:4a:56:45:bd:ff:de:b1:
a3:91:fe:32:3d:7e:f8:93:9f:70:de:4a:2d:e9:78:7c:d5:02:
14:58:b1:bc:e0:4f:69:ce:1b:02:b9:9f:fd:0b:9c:b9:cc:3c:
32:15:0c:6e:80:d3:d3:24:27:67:07:4f:59:cf:b6:27:d8:0d:
f0:96:cf:63:0a:8c:0f:0c:e7:30:ff:e3:c0:e2:a2:9f:87:f0:
65:b7:3b:13:66:dd:30:9a:72:fd:be:c1:4a:99:04:35:f2:6f:
31:88:4e:0e:38:df:50:da:d0:12:c6:f6:c0:2b:96:c9:98:66:
96:70:a6:81:12:c4:bd:d3:4b:6c:f3:c4:5f:c7:95:9e:e1:9b:
27:a0:56:4b:e6:14:18:25:cd:d5:72:ab:c9:b3:cc:ec:21:f6:
6c:de:5e:13:2d:33:ce:87:20:ae:46:5f:52:c8:95:b4:2d:b4:
50:19:ae:f3:44:aa:0f:55:94:43:cd:6c:6a:8f:b9:9d:1f:ed:
7b:71:9f:70:41:99:21:e7:0e:5f:f1:22:a8:0f:fc:55:0c:47:
9f:83:27:4c:8e:f3:42:48:43:e9:29:75:18:34:11:b5:4d:e7:
45:1f:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:14 2025 by rpki-client