Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: FolDiUXc7DhTzy6Wj6J34bzRTA2yGePjdlEvsk/VeEo=
Subject key identifier: 21:32:12:73:FB:9B:86:30:E4:81:BF:AA:C4:77:33:C2:49:BF:B5:4A
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 0198D5BBFE259FD8D70B340CAC23312709A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: 4WWMcDYreNms4xHDXZzbNDZpl9HEAqZ6sht8kHYSSZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fe:25:9f:d8:d7:0b:34:0c:ac:23:31:27:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=21321273fb9b8630e481bfaac47733c249bfb54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:42:84:6e:b3:ae:ea:d7:77:37:da:65:83:8a:
6b:7f:96:ee:79:2a:58:4b:f5:87:8a:fe:a8:0a:22:
e6:4c:d7:12:d8:98:d0:57:ee:3f:19:e4:1c:99:77:
9f:66:5c:e3:04:a9:81:76:b3:bd:a7:bc:b0:22:59:
f8:42:98:7a:d3:d0:9a:ae:7f:a8:ab:ee:3f:62:40:
d7:77:40:98:6d:6e:b6:9b:74:8c:cf:e4:e8:df:02:
04:58:41:ce:6a:dd:f4:dc:57:11:77:b0:0e:97:9c:
f4:23:6f:a1:d5:94:6e:69:84:86:25:6b:34:d3:18:
3c:88:da:d6:6e:8d:8d:7e:6d:1b:74:01:63:00:63:
c1:27:81:5b:ca:37:ec:5f:63:8b:92:f9:b8:a2:ac:
b1:63:3f:22:99:30:97:76:ea:af:6d:79:15:dc:71:
4a:25:ce:c1:d4:32:94:4b:64:49:4b:e9:68:6f:bb:
27:14:03:24:79:05:ce:39:b3:22:2a:39:fc:52:75:
fb:6b:36:11:5e:30:2f:c9:81:99:ef:a0:15:26:4e:
12:65:8d:a6:36:c5:b1:35:18:f4:2b:2e:ca:47:80:
23:1c:a8:35:cd:c9:f9:87:7f:6f:38:3d:1f:d3:5a:
38:46:fa:bb:6b:10:2b:62:de:71:05:96:e6:99:0e:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:12:73:FB:9B:86:30:E4:81:BF:AA:C4:77:33:C2:49:BF:B5:4A
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:83:68:07:b4:4d:a4:78:97:0e:49:3f:15:d2:51:71:c5:
3e:bd:c3:ce:04:92:5d:39:53:1f:ef:55:b3:22:7d:bf:ba:e0:
eb:91:8c:e2:c3:ee:86:28:a9:7c:16:4e:69:8d:01:01:53:cf:
95:af:22:dd:55:92:3e:9f:61:3c:61:28:5d:5d:df:64:4d:a7:
4a:6e:e3:73:f3:a0:52:89:30:11:f3:57:8e:61:22:47:b9:2a:
39:46:b0:37:3d:19:1c:19:d2:64:c0:e9:07:9b:d6:09:e1:7b:
49:16:61:6b:b1:4a:1a:6d:be:4c:4e:1b:3c:b9:17:f2:92:c3:
02:8f:3c:cd:5d:4e:dd:d6:c8:a3:87:00:92:be:5a:f4:c3:6e:
0b:66:31:bc:a0:51:9b:43:36:24:be:b9:18:1c:ef:75:b6:c3:
e2:a9:1c:4e:17:8e:ac:b2:ee:9b:6a:a9:67:fb:7a:de:b3:d6:
ca:ac:c9:58:75:6a:ec:0d:d6:4b:81:8b:82:19:50:13:0a:ed:
7f:53:9a:6f:94:44:d8:a5:01:5c:98:f0:99:42:81:f1:09:e6:
24:dc:e0:fd:8a:cc:ce:d0:56:7b:dd:07:30:e4:c7:59:b9:d4:
fa:14:df:5e:6a:51:46:e9:5c:0c:07:14:dd:a4:1f:3a:b6:f3:
70:4b:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:52 2025 by rpki-client