Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: hXedbmYXzabayZ3hebGxyQuW55ja8V3Kz4XqxaSF4Hc=
Subject key identifier: A0:B4:6F:F9:B3:83:1F:CB:5E:1C:54:60:BF:22:FB:E3:F3:49:3C:5F
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0197B745B7853D3E4A96405EB8EFF0AAAAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: jVr7nEbNPR4X8j+wGe/tVGzh7P0o6iyT2pLjnQkFRLI=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b7:85:3d:3e:4a:96:40:5e:b8:ef:f0:aa:aa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=a0b46ff9b3831fcb5e1c5460bf22fbe3f3493c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:e4:98:65:a2:5f:51:c1:b8:d2:a6:68:99:
a4:0b:07:0e:3c:68:74:97:bd:96:5f:da:5a:7b:e7:
5d:e5:26:ee:56:da:cc:67:4a:c4:86:43:58:cb:50:
3a:1d:fb:f5:7a:25:de:d0:7b:de:10:e3:44:80:7a:
05:f2:8e:75:cb:72:13:ae:1f:b3:3f:a5:59:af:af:
48:cd:82:91:2b:1f:52:29:cf:73:97:0b:97:08:af:
a3:49:9c:fa:33:e2:a0:85:d8:13:ec:77:43:8a:08:
b3:cc:3f:e1:ba:d3:b4:3d:c6:cc:86:11:bd:db:97:
f4:1a:97:9c:b0:5b:53:eb:85:ab:6f:98:a0:fc:3d:
5b:d2:08:4b:3a:5f:ae:d9:e0:a3:11:1f:a2:c7:32:
28:cf:9e:8c:88:ee:aa:6a:dd:4c:3e:ba:ab:2e:1c:
49:88:1e:6c:96:27:95:6c:ea:b3:f6:10:81:f7:56:
72:ee:fa:d6:84:c6:17:fc:be:33:b1:6c:25:58:eb:
9c:4c:58:92:4a:7e:cf:06:c4:46:48:a6:bd:e5:ef:
49:7c:fc:dc:0b:8e:3a:62:9e:2d:74:0a:06:ce:6b:
86:22:9a:1b:ec:58:7f:d0:fc:84:85:83:58:27:78:
b7:04:ad:9f:7e:e1:b1:8d:bb:2f:92:8a:8b:e6:be:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:6F:F9:B3:83:1F:CB:5E:1C:54:60:BF:22:FB:E3:F3:49:3C:5F
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:07:79:e8:6b:fa:2a:2e:30:e5:4c:23:c3:fd:bf:7d:36:82:
c7:f4:0f:52:87:65:a8:8e:40:ab:b5:18:45:f7:fd:9b:39:6a:
be:b0:27:1f:7e:b4:9f:59:50:2a:05:66:1b:92:6a:17:24:b7:
4f:ce:36:c4:53:a6:20:79:da:7a:88:3e:5b:7e:40:9f:da:40:
09:14:cd:9f:75:8f:c2:c1:4a:6d:17:c7:c4:b0:63:53:6f:77:
52:6a:31:df:5a:8e:a9:eb:69:7a:79:e9:3d:eb:96:f1:c9:a7:
5f:bf:1a:f4:b4:4b:fb:01:53:fa:b1:46:0d:7a:54:dc:61:b1:
ff:46:b0:3d:0e:93:b0:47:ab:5b:b0:29:75:fb:d1:65:46:3b:
86:33:ca:07:70:ea:9f:ae:bc:af:9c:d7:21:80:69:28:e7:f8:
3f:53:1c:f2:49:23:bb:e6:c0:0c:39:5b:56:21:f3:d2:4a:2b:
5a:60:fe:70:1d:6c:56:4c:e4:c5:95:06:c1:bf:ab:06:df:d5:
30:0a:a6:2b:85:73:a8:25:7d:f6:44:6e:b2:dc:59:27:c0:f7:
6c:5f:f8:a6:f3:78:62:fc:87:73:90:ae:0c:52:1f:29:cf:77:
c9:3e:fd:cc:36:2f:80:dd:86:09:9f:89:1c:97:89:b6:40:8d:
16:46:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:40 2025 by rpki-client