Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: UO9GsALVOXg1+KaC0HpD/vza1ObnVd+9eZA1W13aW6w=
Subject key identifier: 7B:E8:BF:5F:51:32:10:33:53:17:D3:47:9C:BF:B7:FB:C0:F4:32:80
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 0198D47388926C0E39C9E6F21D959FFE0780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: z+bZxLY8gho7XSeamrdyoEb63hzXweaB3dfxiSoU88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:88:92:6c:0e:39:c9:e6:f2:1d:95:9f:fe:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=7be8bf5f513210335317d3479cbfb7fbc0f43280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:ae:66:ff:a8:69:7c:26:6b:9c:c9:6c:64:
f2:75:90:bb:c3:b2:f2:d7:61:55:b5:88:5d:fc:70:
21:0f:d8:ca:b1:47:cc:16:6b:cb:f8:7d:8c:3d:16:
a4:5a:8a:64:32:15:77:31:8f:63:aa:d9:a2:b1:f7:
d1:eb:fc:b3:8d:4d:ee:ba:99:fc:95:77:2f:8e:bb:
09:c6:9a:39:15:3b:2a:28:f8:71:d9:c6:8f:75:7d:
75:73:d9:ee:87:ce:69:b9:8f:09:66:1e:ad:6c:fd:
d1:c2:cb:15:a4:88:34:d6:df:5a:d8:92:92:04:7b:
26:8a:75:fe:fd:0d:39:77:c3:a7:a6:3d:32:6f:26:
87:9f:ba:59:c3:38:6e:b0:6f:e1:55:bc:a7:ab:8a:
ff:a4:f8:5e:c1:fb:79:17:77:25:9e:f1:fe:83:64:
b2:c8:95:f3:ee:1e:ba:0e:65:dd:9d:28:45:8e:48:
ba:2e:b7:e8:f3:17:96:d9:c3:d9:24:32:9c:6a:fb:
96:f7:94:c3:40:27:98:5e:59:fa:ba:25:1c:5f:dd:
ad:0b:7c:df:e5:97:9c:ce:7b:99:b8:73:1d:e5:74:
c2:fe:93:ea:ab:41:8f:5b:03:d4:0c:4f:b6:67:5c:
55:8c:2a:c9:3d:14:c4:c7:49:cc:90:a4:eb:6d:1b:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:BF:5F:51:32:10:33:53:17:D3:47:9C:BF:B7:FB:C0:F4:32:80
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c7:74:51:c6:de:81:1d:dd:00:2d:24:b4:d1:d1:6c:12:84:
87:b0:0f:89:39:13:b9:bb:44:a5:5b:20:0b:ed:4d:a3:80:71:
17:6c:15:46:3a:c6:6f:a6:f9:2d:53:cb:d5:fa:96:82:6f:c3:
23:2c:98:23:9a:66:c6:65:5a:a4:34:a8:45:bc:bb:ee:e3:03:
e3:89:fb:69:b1:b7:02:66:73:29:3c:80:b2:dc:ce:1d:8d:26:
77:9d:2c:6b:d4:b9:e3:ca:22:62:9a:13:a0:16:7b:bf:fb:8a:
d2:23:66:1e:f9:29:97:cf:44:df:b1:7e:c3:50:ad:8b:3b:a0:
74:fb:9c:92:99:7b:d9:dd:65:da:6c:76:cc:9b:07:cd:c7:03:
fe:6b:d9:25:70:1b:c9:09:be:d9:a5:57:27:d3:fd:93:0a:3d:
4f:08:44:51:6e:9b:46:0e:53:4a:d5:84:45:b3:b8:2a:88:8a:
61:df:31:f1:ad:2c:df:85:fe:be:d5:75:4d:b8:fa:c7:b8:18:
ec:95:73:70:95:a2:78:df:8a:0f:1e:9d:b1:13:b3:d9:d3:4f:
3b:21:ab:27:68:73:a5:66:0c:51:8c:c5:af:5a:2f:91:b8:e2:
7b:12:ae:3a:bd:da:a5:2e:46:b1:38:4e:f9:6f:55:d7:30:8e:
30:d7:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:23 2025 by rpki-client