Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier: +Dq4tOI9E6vBCTWq+rHJ0Ocx1MuMV+atbO2HUG4pkMA=
Subject key identifier: E3:CE:53:24:11:08:C4:40:36:B1:6B:95:0B:36:54:6C:E7:2A:38:1A
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial: 0198D65F10D2B018902C00AFF72B14579AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number: 1382
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: zZm7zYroLpctED32GKckKrv7OSjCGhw8Oh5Rxk5Cqqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:10:d2:b0:18:90:2c:00:af:f7:2b:14:57:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=e3ce53241108c44036b16b950b36546ce72a381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:b4:4b:7e:f0:95:e1:c6:13:a6:1f:35:68:
f8:ff:06:55:bc:0d:22:84:30:39:35:dd:78:00:a6:
e9:be:2e:41:d2:09:ef:18:df:e7:9b:99:0e:dc:12:
cf:9e:21:d6:7d:43:db:2a:13:4b:5f:c7:24:64:a6:
e2:b2:2b:48:98:ac:d9:9a:25:39:8a:47:e8:f2:fd:
ff:11:29:fe:23:3a:0f:81:03:6d:eb:43:62:a7:58:
5e:d6:b2:56:12:90:fe:71:5c:73:65:68:20:4f:27:
47:a7:d0:39:05:fc:aa:45:6c:eb:10:3a:56:f5:85:
6f:16:a5:29:75:7d:b4:e3:60:55:11:42:be:0e:df:
4f:54:bb:48:96:52:ec:06:01:1e:0a:eb:65:c9:81:
98:4d:c7:27:64:8b:72:a6:7b:2f:15:e6:04:90:eb:
38:e7:eb:70:88:da:51:ce:41:73:a5:97:11:4d:85:
2c:c9:90:b5:97:49:47:19:2d:bb:7a:0d:9d:4b:09:
3e:03:5f:b0:76:c1:ac:fc:b7:84:92:93:53:ca:de:
3e:18:49:c9:76:40:f3:76:62:3b:d3:40:b3:ee:88:
4c:3b:31:e3:56:9b:9c:1b:da:96:cd:ef:fa:e4:c3:
5d:e5:84:04:9a:5b:6a:d6:68:05:ce:4d:05:d4:05:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:53:24:11:08:C4:40:36:B1:6B:95:0B:36:54:6C:E7:2A:38:1A
X509v3 Authority Key Identifier:
keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:7c:4e:05:5c:d2:85:15:9a:e9:36:f5:3a:47:ab:aa:46:
c7:5c:ae:77:99:8f:19:1d:9d:bb:63:44:0e:5f:18:dd:46:35:
f5:5b:b5:cb:5c:d2:b7:80:61:65:99:e2:e6:b5:3f:da:1f:c8:
d7:c5:4d:9b:bf:d5:ff:fa:77:80:e2:f1:1f:a9:7a:5d:4a:38:
7b:5e:e8:ea:6c:9c:46:7d:2a:4e:3f:fe:44:bf:0b:77:23:55:
ef:c7:ab:57:38:d2:9d:7c:4c:ad:8d:4e:f6:3e:07:ae:ef:cd:
98:3d:c4:91:14:bd:87:9b:cf:0b:89:5d:34:71:47:6e:ed:0c:
fd:b2:90:06:bf:4f:a0:49:74:24:c6:b0:45:b7:69:21:f5:f5:
ec:bd:3b:14:ca:56:98:f6:b1:7e:60:da:e4:f4:3c:d9:9a:a4:
dd:93:4a:72:80:b8:be:fa:3c:bf:74:a7:94:d1:98:d8:a2:bd:
4d:51:48:8a:24:f7:55:21:90:c6:cd:a9:6c:fe:2d:71:4c:88:
99:ac:43:64:dd:97:7a:94:73:b4:b2:0c:ec:59:01:ec:be:29:
3b:c7:22:df:25:69:cf:93:e5:ea:15:2a:0b:66:66:70:99:6b:
5c:e6:51:c2:e3:13:2b:f5:6b:ea:ab:da:a8:c6:cc:e0:49:66:
62:a6:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:28 2025 by rpki-client