Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: t1MXpvC9YyB11ejl3Oaj3LIMQNcOMpj/bTkyJgUhfY8=
Subject key identifier: C3:FC:23:67:DE:28:24:C7:9F:34:4F:87:03:CA:BB:0F:0F:80:5E:CA
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0197B890785EAA708A64F055F2739DF95B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: zxjrpk2V/r2rIgzNjBZ41QL0B4wnnPsXEtziVH+0sDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:78:5e:aa:70:8a:64:f0:55:f2:73:9d:f9:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=c3fc2367de2824c79f344f8703cabb0f0f805eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:2e:9f:5b:22:9a:d6:4e:71:b0:ed:6e:7e:
80:87:99:40:9d:c2:15:30:14:05:4f:c6:d8:53:18:
4f:3e:81:47:6f:89:e4:5c:4f:bd:e3:88:03:34:38:
8a:b3:40:a7:af:62:66:4b:ec:2a:20:a0:27:2d:af:
c7:bc:7e:16:fb:8b:56:5b:f9:cf:77:ec:7f:cc:a2:
bf:b5:e8:85:d4:74:06:da:6b:fb:ed:b3:91:e2:e4:
75:0c:de:9c:ba:87:16:99:d7:0a:50:75:1b:15:dc:
ac:f8:ef:bc:c7:cf:97:48:9d:58:01:60:ad:b7:9d:
b6:42:c9:8a:07:38:48:9c:94:d2:a7:72:7a:f5:e0:
3e:c0:26:1c:c7:e7:86:91:eb:b3:1a:a5:16:ab:3a:
95:86:f5:01:09:40:2c:42:09:38:52:79:dc:a5:24:
b7:64:ea:67:bb:66:3b:50:46:bd:6c:a5:ce:fb:cd:
5b:10:23:8d:c2:e0:c0:1c:37:61:4c:48:91:a7:25:
a8:e1:84:6f:2b:a0:ab:1b:52:4b:71:90:19:16:2c:
ca:15:e2:16:9f:f8:90:07:47:f0:43:ec:81:b3:fa:
c3:91:6a:3f:fe:ca:50:63:9a:1e:b9:3c:1d:7f:9f:
50:0d:78:b4:ab:2f:80:dd:41:4d:f5:02:c5:30:4e:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:23:67:DE:28:24:C7:9F:34:4F:87:03:CA:BB:0F:0F:80:5E:CA
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:14:61:6a:ec:74:df:9a:f7:56:e3:2e:a4:8d:ec:3a:6e:
8f:8c:b6:31:6f:45:f4:5e:46:b5:58:b6:59:a3:df:73:cf:15:
fe:eb:4f:00:70:f1:84:b4:06:9b:f6:6f:20:d3:2a:8e:d1:db:
88:a9:5e:3f:9e:7c:05:9c:d5:27:e8:bf:c0:2e:9a:7c:7d:8f:
5d:77:bf:14:16:bb:ca:d9:b8:ff:62:56:41:ca:68:46:75:bd:
8c:dc:d0:d3:58:40:b7:5c:39:7b:ca:a6:15:c4:14:c8:a0:41:
af:72:8f:7d:69:16:d9:19:b5:06:25:c5:61:5a:aa:18:ba:70:
3d:7b:dd:93:da:1c:03:36:d7:49:0c:53:52:5f:a9:c8:63:c9:
79:a9:be:c6:e7:70:81:9a:d3:07:8b:7b:ab:d1:e0:f6:61:9a:
35:7e:5b:10:fa:2b:5b:91:0a:a9:72:00:26:e1:5c:c2:8d:c1:
68:64:e2:89:ee:ea:f8:39:db:15:bf:1f:46:c0:3c:42:eb:68:
87:ce:eb:0f:fd:5d:92:17:7d:99:81:78:00:42:29:77:01:40:
8d:5e:cc:75:ec:9a:91:e3:12:b1:8c:b0:41:48:3a:4a:5d:aa:
bd:4e:28:ef:24:52:f7:e7:9b:4b:b4:94:d6:64:64:59:05:b6:
39:16:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:21 2025 by rpki-client