Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: DhqAocqDqkSlbrHdMs973bNBBaz9IECbufa6jkbmf0Y=
Subject key identifier: CE:FC:4C:70:85:83:C8:7D:68:9A:1E:DE:30:37:D2:1C:62:55:73:24
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 0198D4E01B4431297BE942A4214E4B31AA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: C657dFKwoxbui2vjb0s1L5RlLg9Piw1vizVsfkLi35Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1b:44:31:29:7b:e9:42:a4:21:4e:4b:31:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=cefc4c708583c87d689a1ede3037d21c62557324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:c7:36:6a:51:ea:69:ef:0a:02:ae:1e:39:
30:bc:46:88:9e:4d:46:c1:9d:d2:50:08:36:51:e6:
30:70:86:ed:3a:aa:02:32:39:85:7d:c9:25:d8:c4:
07:9c:c2:28:90:b0:f2:06:f5:e9:d9:5b:4f:0c:12:
9e:f3:20:8c:fd:cb:41:12:84:dc:3e:a3:71:f0:f1:
1f:11:c1:24:8a:f5:0f:48:fa:53:0e:ae:68:86:7b:
67:2d:9f:ef:4a:a8:0f:2d:85:44:dc:09:21:90:2b:
ea:7a:a9:e4:98:51:d8:dc:26:21:e9:36:95:2d:4a:
af:10:a4:e4:09:d5:4f:33:f8:2b:c5:16:24:81:45:
ad:26:24:c8:5a:c4:0a:a5:ca:2a:e7:bd:0c:66:1d:
16:dd:53:d8:70:29:07:4d:9a:76:3a:51:20:f2:fc:
15:23:5b:3c:5e:8b:93:56:32:0c:37:07:fe:29:b5:
4a:14:5c:c5:89:2a:45:f8:65:a0:0b:bf:c9:b9:70:
28:5c:4b:d5:29:e3:e4:87:e3:3c:fa:4f:69:65:9e:
2d:63:03:be:74:64:df:2d:36:85:06:b1:7c:e9:64:
74:85:b5:34:92:74:c0:d3:65:58:85:97:b5:49:b6:
11:32:12:b9:0e:0b:cf:b4:fe:dc:f5:e9:90:d7:cc:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:4C:70:85:83:C8:7D:68:9A:1E:DE:30:37:D2:1C:62:55:73:24
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d5:f6:d9:b8:7b:80:58:b5:62:6e:3b:d1:3f:68:aa:fd:30:
bb:b7:2d:ef:b1:04:ec:55:02:22:0c:88:f9:e8:e7:27:38:0d:
f5:42:50:c2:25:b7:9d:6b:ab:02:f0:5f:b5:a5:a2:ed:d5:7e:
70:73:7f:4e:10:3a:50:52:bb:80:32:43:91:36:82:de:77:91:
e4:61:0f:57:2a:92:2a:c4:2c:31:fd:e7:6b:2b:49:2b:28:75:
b3:47:75:fe:22:a7:a5:2d:82:49:70:ce:a4:b2:0a:1d:6c:ea:
de:ab:de:25:75:28:14:6e:40:37:13:97:6b:72:81:7d:a0:72:
e4:e2:5d:cb:02:03:68:39:5e:66:44:a5:1a:5b:74:f8:bc:1d:
78:6c:ee:ca:a2:5e:5b:56:06:e3:41:b2:15:ac:0f:53:05:f4:
71:73:ed:19:5d:75:ad:a5:9b:45:36:5e:bf:f3:e0:aa:ac:0d:
a8:e3:33:0e:00:57:94:44:30:18:0f:ea:fd:2f:f4:c9:4b:ab:
b1:f7:5a:fa:ff:b9:e2:42:79:c4:5f:56:27:9c:61:a6:17:a5:
ec:a5:00:63:90:6c:ba:8f:e7:de:7e:0a:d0:a8:a7:cb:5e:8d:
40:98:5f:16:8a:79:d9:b8:90:00:95:18:dd:c1:24:f6:3b:c4:
a1:a6:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:33 2025 by rpki-client