Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
File: gfOofhE2a1RaWhJ7gyh2U7GMilY.mft (raw, json)
Hash identifier: 8whOnQddS33oKpc5lzbDvZJmwAxES/D0vBUvzAHHE/o=
Subject key identifier: DF:6F:93:1A:17:9D:3C:5B:D5:12:5F:11:1A:F4:1D:1D:93:47:24:BC
Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56
Certificate serial: 0198D54EA214460A4914E20F300A665E0741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
Manifest number: 2C
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: gfOofhE2a1RaWhJ7gyh2U7GMilY.crl (hash: 25e+Mz3IVnlTRLzZ8hHXn7XeXCQh9exmkJDyVrq5Tso=)
2: lKUbuVCydMPLYxDoh9127xl2Npc.roa (hash: en7K6suh3CPitlX5oTwC1BzuohYZ/bNPoP5vdVZR6Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a2:14:46:0a:49:14:e2:0f:30:0a:66:5e:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=df6f931a179d3c5bd5125f111af41d1d934724bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:b2:82:ba:32:77:39:2a:a0:d1:e7:78:3a:
8d:f6:98:1a:8c:50:8d:ce:19:b8:8d:2f:eb:b0:56:
f4:d3:24:33:e9:8e:aa:59:eb:a0:9e:f7:c2:57:2f:
5b:a3:a8:7a:0d:68:5c:b9:fe:a0:97:02:28:97:c3:
60:68:fa:cf:b3:3f:93:fc:81:2c:36:c5:95:50:2e:
8c:59:66:20:57:7d:ae:b6:6d:db:c8:34:73:c2:1e:
83:b0:2f:78:63:3e:27:70:a3:ae:c9:06:1a:bb:05:
b1:e4:12:61:75:92:0d:fc:5c:78:f5:68:b1:8a:ce:
f9:f1:25:7b:9b:f5:a5:a5:f3:82:db:71:3b:c5:f6:
a8:1b:5b:f1:ec:c4:18:a6:ce:da:93:ac:86:5b:12:
bf:f6:fe:9f:48:32:a7:b6:d4:7f:a7:00:ed:1f:76:
f1:ce:d9:95:43:2d:a8:c3:82:b2:b1:13:c1:78:1a:
6b:dd:02:27:08:e1:81:2c:f1:89:83:70:b0:75:a0:
bd:cf:93:1f:47:26:85:c6:aa:89:96:1c:e2:9d:47:
bd:ff:f7:0a:17:e7:03:0a:65:41:0a:c4:2f:3c:18:
9b:e8:d2:c2:29:2c:87:3c:23:ee:b4:2a:72:d0:07:
e1:d3:cb:46:95:10:5a:ce:87:f8:78:0a:75:20:20:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6F:93:1A:17:9D:3C:5B:D5:12:5F:11:1A:F4:1D:1D:93:47:24:BC
X509v3 Authority Key Identifier:
keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bc:cb:b7:a2:2a:bb:1b:7a:8d:ec:ab:83:73:1a:b3:88:1a:
5a:ca:bc:b3:36:01:45:7a:f6:44:f4:2b:ae:3b:b2:e7:fa:a8:
e6:fd:2a:9a:59:04:d6:38:93:30:70:5a:8c:62:01:25:84:fe:
b7:1e:b2:09:4f:97:82:45:8c:97:fc:89:40:11:b6:b2:ec:f2:
0d:94:51:0a:23:4d:a2:89:c1:7d:8a:13:3d:56:46:86:7c:c4:
3b:d0:31:3d:02:28:5f:c3:93:d5:00:b5:43:a9:d5:8b:a1:fe:
c3:ed:e3:8c:b2:ca:b9:24:ae:23:de:67:38:55:cb:99:46:df:
ae:9d:fc:41:4e:4a:3c:67:de:f7:2f:27:db:57:86:37:45:66:
63:77:51:8d:cb:1b:81:73:54:bf:32:e0:aa:67:df:da:36:3d:
a9:e5:ce:ae:da:de:4f:d1:66:59:00:51:d6:ff:1f:55:58:f3:
4a:fd:f2:7a:d2:dd:f0:5d:4e:56:98:42:b0:4f:a0:6d:d1:bf:
5d:f9:76:23:a8:0f:6f:ba:89:9a:d5:a2:d2:cf:96:1d:cc:48:
b6:95:01:22:d9:27:a7:50:8f:40:f9:32:19:e0:5e:6e:6a:3c:
d2:98:7a:ad:f4:73:8a:7d:2a:42:04:b3:2e:b8:46:ee:cd:4d:
f5:c7:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:50 2025 by rpki-client