Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: qdoERbmRuproOYRWwIV4GQCuriy58dOgfjtfkjUESH0=
Subject key identifier: 77:AC:64:9B:18:1D:A5:78:AB:5C:7C:23:DB:6F:9E:04:03:C7:13:8E
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0198D66117A7C354EB6F84A76744CE4CF9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 10:02:23 +0000
Manifest this update: Sat 23 Aug 2025 10:02:23 +0000
Manifest next update: Sun 24 Aug 2025 10:02:23 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: wUDnJkDBtoQE6wVmOb/ZdIkT7PW4j2uK4XQkJ7cW83c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:17:a7:c3:54:eb:6f:84:a7:67:44:ce:4c:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Aug 23 10:02:23 2025 GMT
Not After : Aug 24 10:02:23 2025 GMT
Subject: CN=77ac649b181da578ab5c7c23db6f9e0403c7138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:aa:62:5a:f6:e4:11:ea:93:ea:47:89:30:
5a:e3:43:b3:25:fc:cb:c9:c8:7c:6e:0e:02:64:a8:
65:23:27:7e:2c:aa:3a:8e:eb:22:c6:9e:32:37:00:
fe:a6:91:38:d2:6e:d5:7a:b3:c9:aa:2b:17:ed:5b:
ce:87:5e:ef:73:4f:ec:a3:1d:36:58:eb:33:59:05:
3c:e0:78:8e:3e:5f:1a:31:3d:25:e3:12:c9:0b:27:
92:74:b4:69:73:1b:3c:73:75:54:26:3f:38:91:9c:
2d:cf:ef:fe:43:88:1e:7e:46:b5:7c:37:44:0a:07:
b6:81:cd:e2:ad:3c:c0:7c:27:f7:18:5d:c1:33:2f:
66:13:47:96:91:ae:02:b2:1e:e1:27:a7:42:e9:18:
e8:b0:88:54:53:32:e1:a9:31:fa:3c:74:8c:53:22:
17:78:d0:df:1d:a0:c7:dd:15:ae:f6:3a:22:c5:9b:
9c:b6:da:df:81:1e:3a:36:3d:ed:dd:7d:d4:db:1b:
36:57:8d:35:4e:c2:fb:05:27:13:9b:d7:cc:c1:64:
0c:24:a3:aa:7e:f3:5c:f5:15:37:5d:83:07:f0:37:
a5:c1:36:9b:11:f2:b0:41:4e:71:2b:98:16:8d:19:
f9:e2:dd:49:fa:b0:1d:15:e7:02:fc:c7:30:1d:2d:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:64:9B:18:1D:A5:78:AB:5C:7C:23:DB:6F:9E:04:03:C7:13:8E
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f8:7e:04:e9:64:5c:39:ac:26:f8:34:6c:f8:84:bd:75:2e:
fd:ac:c8:46:e5:34:7c:01:b2:4a:ab:18:00:a4:a4:89:cf:c7:
67:b4:6a:01:2d:81:9c:75:49:dc:74:aa:06:34:32:0a:46:a3:
33:6a:65:63:7d:ec:9d:48:d8:53:ba:7c:2c:d8:04:4c:7d:d4:
c2:b2:f5:2e:45:d9:7a:4d:a6:cd:fa:a1:7f:82:46:5e:2f:ca:
14:54:11:8e:2a:f0:eb:8b:12:f6:01:e4:64:97:01:6f:22:ed:
19:51:46:7a:48:98:32:30:a8:e7:ac:3b:e1:c8:c5:47:6d:91:
1c:e3:2a:24:21:74:7c:a4:66:16:02:8c:3a:53:c0:5d:6a:29:
2a:fe:4a:b3:49:47:12:a4:ee:61:80:0b:8c:c4:1b:be:52:e7:
5d:6e:d0:90:7a:d6:c3:fc:08:bd:56:af:39:5e:07:79:2a:1b:
be:4a:f7:9c:c8:c9:27:b1:f7:54:57:a8:2b:5d:4b:d6:35:34:
26:e1:7b:ca:80:e2:2d:32:cf:4a:37:b3:d8:aa:ba:53:8f:2d:
cb:59:46:98:92:a8:b8:3f:61:a6:e3:86:29:b4:e8:12:e4:86:
e6:84:0e:55:31:06:bf:e3:d7:43:93:84:61:aa:d0:38:fe:56:
4b:8b:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:57 2025 by rpki-client