Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: /6LlpEV+ADDhvkyGXoel9iLpZ4h42jzpzogaAJ/aaoM=
Subject key identifier: AA:76:BB:42:23:28:D2:D3:93:2A:37:35:62:45:EA:26:9A:FD:5D:E1
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 0198D6982D11D539C53BD9F7647BD900D4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0954
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: Eqhh5TPaJRln+A8lGpyLvXXMiH9q+6wVrG3B4UkY8nQ=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2d:11:d5:39:c5:3b:d9:f7:64:7b:d9:00:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=aa76bb422328d2d3932a37356245ea269afd5de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:a3:a2:8c:51:60:02:a7:75:29:6c:ec:4e:
e2:0f:78:a0:18:37:e4:ef:ff:09:d3:ad:9a:3c:41:
a1:e3:fa:cb:7d:11:1f:a3:fc:5d:19:4d:a5:23:ff:
2c:d9:73:34:17:f2:e3:cc:e3:26:40:07:2e:b2:ad:
02:84:1a:6f:3f:89:74:a1:da:c0:2f:4e:bf:e3:79:
4e:e8:30:bb:90:c9:47:7a:a7:14:6d:92:bd:98:26:
f3:86:89:a9:45:d5:ec:0f:6f:8c:4e:7a:2c:25:c5:
c2:8b:bb:a1:e8:b9:a9:15:8f:fa:43:e5:54:af:72:
68:d1:e5:ad:eb:ef:42:92:49:be:b2:5b:ff:c7:86:
73:60:c5:8d:36:7a:0c:0a:58:a6:3c:2b:ef:d0:be:
8c:44:38:27:a9:c3:9d:29:33:1e:a7:01:c4:71:50:
50:87:23:10:0c:10:a9:13:29:5a:6c:5b:84:07:b8:
56:46:ce:cf:f8:69:c8:d8:1a:37:df:d5:39:d3:9d:
83:48:21:07:48:81:9c:62:e5:71:1e:64:7d:e3:73:
c9:a2:14:93:51:c2:8b:90:90:00:b6:1b:df:59:6f:
a6:d6:0f:15:ab:2c:1d:55:9c:34:ec:e3:22:5c:5c:
d9:88:e5:ce:63:36:6a:3b:fc:2a:1d:ad:b3:4e:34:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:BB:42:23:28:D2:D3:93:2A:37:35:62:45:EA:26:9A:FD:5D:E1
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:89:f1:5b:ea:5e:e2:b6:f9:1d:fa:f7:f1:9a:59:f8:77:
fd:d6:48:ce:da:1e:2a:ea:6a:a7:73:08:38:10:1f:c3:8a:fd:
18:a0:eb:4c:03:50:9f:55:3f:34:8e:0a:c5:a2:10:ca:b2:8d:
38:85:63:59:c8:97:df:42:72:a0:4d:b9:1e:c9:bd:c8:0d:5f:
ff:8f:10:04:68:f4:e0:3b:b7:07:63:f8:fb:a0:57:42:16:c6:
0d:d1:10:ce:4c:d0:f3:0e:a2:09:58:3f:91:38:9f:47:e3:41:
6d:78:79:cd:0b:aa:17:01:2f:23:72:17:fb:3c:4f:0e:83:89:
85:da:b0:5a:33:65:ba:b6:76:66:e1:21:82:07:df:8b:15:d1:
3a:0f:31:67:2f:1d:5f:f5:24:4d:28:ea:fc:09:fe:d0:fe:95:
22:9b:0b:64:3a:9f:56:29:9a:4c:d2:d4:46:2f:1e:82:75:d4:
6e:2b:7d:9c:ef:a7:9c:ef:06:4a:d7:1e:19:3a:7b:22:4b:10:
5b:c8:61:54:9a:23:a2:56:e2:4c:c9:3b:11:b9:4b:99:62:bc:
df:cb:57:42:3a:d3:8e:74:bb:43:0f:b2:e6:ee:03:5b:a3:0e:
e6:2e:5c:61:70:fb:20:30:5e:59:64:93:2a:05:3b:51:f3:f4:
d5:f3:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:30 2025 by rpki-client