Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: WOO750HhgoEV9NtckvK9HE1uJCTfIKhDVYp3XpMouqg=
Subject key identifier: 53:A3:24:AB:4B:C7:D8:67:94:B5:2E:1D:69:52:78:16:D2:F4:31:D3
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0198D473906D82D33DC28B409D1AECE93908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1294
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: wQCeV/lYNQciysRw1rJgkNtgBKT9HHT6iySFqIbPEUk=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:90:6d:82:d3:3d:c2:8b:40:9d:1a:ec:e9:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=53a324ab4bc7d86794b52e1d69527816d2f431d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:0b:81:f5:16:aa:9d:1a:96:67:cd:39:5c:
58:b5:02:6a:db:3a:0f:6c:3a:08:88:ca:b0:3f:59:
33:6c:ac:64:a4:f0:6e:6e:36:9a:c0:69:63:80:a0:
95:c5:7f:5b:93:3f:8a:66:a4:9c:f2:e5:f2:e4:7d:
72:d2:ff:76:ec:da:fd:41:7a:08:e6:f1:5a:e7:de:
a6:85:b1:f2:b7:16:95:cb:b6:0e:32:9e:e7:8a:b2:
06:54:3d:37:4c:b5:38:9f:1d:ad:f2:13:fb:a3:26:
db:db:55:18:87:96:27:cb:3e:89:34:94:97:59:97:
25:b3:98:72:c2:6a:87:66:cf:c3:e4:e9:97:45:55:
6c:2b:a3:c8:8f:36:0e:59:87:37:d4:16:a1:3e:12:
04:6b:74:b0:60:5a:49:a1:bc:6c:bc:b5:fa:bf:cd:
83:62:20:31:ff:51:a4:cc:ca:5b:87:90:94:a6:cb:
1b:f3:db:32:55:c3:d8:03:9c:0a:8f:eb:25:c4:1b:
20:a7:e8:08:70:69:ec:6c:7e:81:00:42:84:3b:e4:
a4:b7:b5:e6:96:84:ba:03:83:4e:7b:19:86:db:c7:
b8:6b:4a:26:a3:01:dc:ec:24:b8:44:fb:df:2e:eb:
c6:d9:26:24:48:1b:d5:45:d4:2e:f1:4c:03:f2:8d:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:24:AB:4B:C7:D8:67:94:B5:2E:1D:69:52:78:16:D2:F4:31:D3
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:91:dd:f0:4e:d8:a1:8d:02:9d:35:76:8c:64:70:57:7b:
3c:63:20:3a:a6:b4:6a:b3:e0:06:2e:e9:9f:66:7b:84:b2:e8:
08:69:af:30:48:1e:f1:6a:2c:62:ea:3c:5f:9b:84:67:15:0f:
4c:7e:96:3b:4d:65:6d:9b:d2:ff:63:72:6d:09:06:13:d0:4e:
87:14:13:e4:29:a9:f0:c6:e9:48:94:1d:03:87:44:fb:e3:67:
ca:11:23:36:db:71:ce:26:a3:e1:c4:39:f7:b9:4c:cf:44:2b:
b3:f8:08:d5:46:f6:a5:e0:91:0c:c6:00:08:fc:38:75:6d:ee:
69:3d:8e:53:0c:1e:79:c9:df:3a:be:b8:ac:89:aa:5d:2d:b4:
0a:c4:65:4c:62:96:fa:8b:9b:cc:2f:de:1a:1a:4f:63:a0:aa:
31:93:5b:57:65:a5:f6:62:75:94:a0:7f:7f:b0:21:ce:94:73:
18:5c:1d:d8:68:f1:7f:11:70:54:97:93:00:d4:74:2c:6e:dc:
76:d7:8f:2a:77:6a:fa:ab:eb:e8:b2:87:07:5c:4a:98:89:73:
47:2a:07:78:dc:ac:b1:04:60:c2:c7:2e:92:24:3e:4f:50:c9:
f2:8f:ea:34:22:4a:40:6c:45:52:27:20:9a:cc:6c:82:68:e9:
9b:d0:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:13 2025 by rpki-client