Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: lVvsCDqI26TiTiJVOeMqCnwo38ydWWQmE/Vj1cJwcdI=
Subject key identifier: 3F:63:38:02:5F:43:7C:E3:04:8A:8D:2D:D3:15:41:05:26:6D:02:85
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 0198D7732C259635152ADF672E14AB8DB84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:01:46 +0000
Manifest this update: Sat 23 Aug 2025 15:01:46 +0000
Manifest next update: Sun 24 Aug 2025 15:01:46 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: fs4qg9FgfAnJzh+hLWyacszZRTJfZ3oRFMd0JfWn7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:2c:25:96:35:15:2a:df:67:2e:14:ab:8d:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Aug 23 15:01:46 2025 GMT
Not After : Aug 24 15:01:46 2025 GMT
Subject: CN=3f6338025f437ce3048a8d2dd3154105266d0285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:3f:a8:36:61:de:47:1d:36:f5:20:e1:23:
b1:2a:a6:1d:c7:f1:52:70:c3:80:88:54:4e:89:ab:
8b:95:40:0e:72:81:f0:aa:03:aa:70:81:ad:0a:e8:
7c:a0:be:64:60:d5:eb:2d:de:a8:61:39:c1:c7:6f:
2b:a0:ab:b9:8b:8e:ae:29:b4:30:5f:68:1b:50:33:
89:c4:72:56:03:bb:93:43:b4:d5:98:b4:ef:bb:6d:
a1:48:cd:de:38:5a:ad:0a:09:58:20:97:93:6e:ee:
2c:b4:2e:bb:6f:b4:2e:67:90:25:0a:eb:6a:bc:0c:
7b:6f:19:37:ec:b2:5d:89:e8:1d:f6:cb:43:aa:34:
e3:20:ef:49:1c:b5:5e:18:04:25:73:33:c3:38:3b:
27:e6:55:7a:8b:f0:08:af:76:05:1c:d0:a4:b4:c2:
0d:c8:c6:35:5b:a9:8d:84:6a:6c:e7:86:e6:c3:a0:
ee:12:73:13:ba:2b:01:99:55:39:f0:ce:1b:c0:2c:
16:09:14:69:50:90:81:c2:37:f4:ef:b4:d0:34:2d:
30:1c:0d:a4:1f:6d:d6:7d:88:d2:8b:5a:4f:46:82:
e2:c1:e6:9a:82:4c:92:02:b7:56:6f:51:6e:76:9c:
d5:44:96:29:82:bc:fb:e9:2d:af:cc:bf:f5:29:5c:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:38:02:5F:43:7C:E3:04:8A:8D:2D:D3:15:41:05:26:6D:02:85
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:47:cc:38:24:6c:97:69:55:e9:76:56:61:30:a9:d8:97:5c:
e7:17:7f:03:8d:a9:08:79:7c:2c:4c:aa:c4:18:96:44:a8:11:
52:56:bb:6c:a3:9d:a1:80:a5:c3:56:f2:1c:3f:90:6a:eb:34:
3c:3f:01:c5:58:10:1a:ff:ce:c5:91:e6:c6:4b:5f:49:75:91:
81:49:8e:2f:2a:78:d3:ec:7b:34:9f:23:f1:28:f2:05:18:2d:
e9:c9:9b:33:0f:df:c1:66:bd:dd:1a:8d:93:08:6d:97:22:2a:
6f:7c:6d:19:d7:78:fa:35:fa:0b:b1:06:17:00:73:d5:3c:96:
bc:ec:c4:02:d2:b1:b1:63:f0:8f:d2:13:e6:36:0b:ef:46:a3:
e3:b6:10:61:b2:0f:19:41:b0:f8:cb:1e:66:80:d0:ed:fa:00:
98:a1:18:74:53:2c:85:fd:93:32:93:c4:0e:3a:7c:d1:3b:d2:
c2:bf:45:da:4b:ab:4f:e0:4b:48:80:8c:f5:eb:80:07:10:ad:
b6:f5:4f:4f:dc:05:bd:88:07:ca:d9:ee:4b:a3:a6:6d:0c:66:
8b:89:e4:5f:07:18:b4:27:42:4e:b0:7e:06:e6:d9:27:6a:4c:
6e:2c:99:a3:d9:bb:56:c1:56:ab:b2:87:4b:b3:80:54:38:8d:
06:dd:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:17 2025 by rpki-client