Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: rwY034EwkiFXgXwHl/yaCHLTL5EhxPrHyWQ+MumUX7U=
Subject key identifier: 08:B5:E0:B6:DD:62:8D:73:E7:6D:7F:3F:A1:82:81:F6:E7:3E:4F:A3
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0197C6B8CE52F2534B9960992671630A4ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 16:01:29 +0000
Manifest this update: Tue 01 Jul 2025 16:01:29 +0000
Manifest next update: Wed 02 Jul 2025 16:01:29 +0000
Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: 6hsH0/T6rY8Dc+BkPv/HNoP4TfdX8yIh/w303R3vhYU=)
4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:b8:ce:52:f2:53:4b:99:60:99:26:71:63:0a:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jul 1 16:01:29 2025 GMT
Not After : Jul 2 16:01:29 2025 GMT
Subject: CN=08b5e0b6dd628d73e76d7f3fa18281f6e73e4fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:ec:ff:67:38:ee:90:4e:49:73:0d:75:7a:
d3:0f:6b:12:c7:ea:43:c9:6b:4b:23:23:f7:0a:55:
3a:c3:1c:6b:d0:f3:01:b6:6c:94:6a:ec:6f:e4:61:
78:be:e9:63:e6:2b:95:01:36:5f:50:59:d6:83:b2:
90:9d:96:ca:fd:6d:d7:22:42:90:8a:5b:0a:f5:60:
4b:b9:85:d3:fa:6d:c9:42:68:ea:cf:e6:80:14:7a:
ac:56:00:e6:d2:d0:1c:6c:c6:39:a5:76:58:4f:7a:
2a:9d:b9:e3:72:42:c2:96:60:91:f0:ed:d6:8e:ef:
3b:64:4d:4a:79:3c:52:8b:ff:35:b6:ca:4a:98:c0:
5d:c9:be:d2:77:22:37:1f:84:c0:46:f0:90:12:4b:
9c:14:25:7f:19:b4:2a:35:be:49:a0:69:01:b2:76:
ee:d1:5a:c1:73:7d:62:00:7a:a8:fc:66:33:2a:ca:
ed:0b:fb:63:91:99:6f:24:59:53:2a:6f:b9:20:ed:
92:74:3a:c9:10:d3:4f:44:8f:6a:f8:1f:94:4e:fa:
41:21:af:c1:c6:0e:11:cc:3b:0d:34:08:8c:95:d3:
5f:f4:bf:1a:05:52:cf:0a:8c:88:73:25:53:ed:da:
3f:97:f0:41:24:f6:1a:a3:db:45:d3:5b:e6:21:0c:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:E0:B6:DD:62:8D:73:E7:6D:7F:3F:A1:82:81:F6:E7:3E:4F:A3
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d4:ef:0c:b5:30:e2:cf:cf:10:fd:82:b5:89:d2:94:bc:d0:
82:9b:8c:47:42:30:ed:7e:35:62:13:d7:81:f0:3d:b9:4c:cb:
c2:26:44:c6:f7:92:77:e3:79:7c:fc:d2:d2:7d:43:51:d6:56:
e4:92:14:47:f7:fe:47:e9:58:64:f7:24:a8:b5:cb:cf:41:ab:
ad:7d:14:ee:ef:a1:95:70:ec:7e:36:dd:d5:46:ac:01:ed:82:
84:c9:82:5a:27:dc:3f:33:01:5a:e4:37:19:5f:bf:6d:d8:7d:
19:eb:47:ef:f7:4c:39:4e:16:e7:f9:3b:f4:37:8a:58:df:f4:
cd:bc:6c:2c:01:d0:8d:76:0b:02:51:56:21:70:14:cc:8b:fb:
46:59:c0:b3:25:aa:00:6d:40:29:5f:9a:de:ac:28:1c:52:fd:
3a:b1:c1:7a:a6:ad:8c:44:7b:54:63:be:3c:0f:e8:53:b0:f5:
3f:07:73:77:18:d6:a9:b5:82:f8:8b:b6:36:74:f3:ef:03:7d:
62:2c:86:d4:aa:16:da:9b:60:7f:cd:b2:b3:6c:0a:f8:03:44:
d4:fd:00:fa:2f:bf:ec:47:b5:ee:43:74:74:47:42:0c:69:ca:
df:a1:58:c3:cb:d0:ac:d4:ed:e3:38:b3:c5:ef:3a:ee:60:9b:
0d:fb:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:05:43 2025 by rpki-client