Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: n0SV8Ux5IG4Rkz8En4t9VCtlR7H1UptWW/jEQS2cOY4=
Subject key identifier: ED:CD:60:19:17:43:CF:43:1D:FD:92:70:72:01:C1:D4:9C:23:43:32
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 0198D4E0939F88645EAB75F9E76AA669442A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: 1jvUepy7Azip7AW3r0gmvQ4XpozlbNTPOqREpyBGjA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:93:9f:88:64:5e:ab:75:f9:e7:6a:a6:69:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=edcd60191743cf431dfd92707201c1d49c234332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:3f:91:20:4e:c0:07:e2:9c:de:f8:7e:4c:
cd:a4:98:dc:ee:b6:5b:68:1e:f4:cc:97:2c:c0:0c:
30:17:76:7e:4e:ed:ec:42:70:f6:fb:57:52:6d:cd:
3e:5e:de:ca:7c:85:8c:4f:47:14:78:c7:42:1c:36:
be:db:f2:c8:21:3c:dd:ee:c7:12:12:70:28:4f:30:
3b:7d:18:3a:e6:bf:10:5e:58:cc:79:9a:20:25:e6:
45:94:45:d3:53:46:26:08:1c:8b:61:1b:57:9c:52:
8b:0e:8d:a0:ce:ef:11:ac:1d:82:35:eb:6f:fd:b8:
3b:02:0a:6f:e0:c7:4f:e7:c6:74:22:32:15:ce:f2:
46:76:fd:e9:0c:ed:cc:14:0b:2e:05:fe:72:7a:fe:
3f:2c:ee:80:61:f4:c8:60:a0:b7:98:37:82:77:ca:
f8:d0:0a:e2:db:3f:69:54:94:0d:1d:00:c8:7a:a1:
ee:9e:9f:25:6a:e7:48:c9:d9:29:23:c7:eb:af:35:
39:e9:ba:54:32:4b:62:ac:6e:b5:cc:4d:07:6f:f3:
d7:f9:4e:aa:9d:bc:bb:34:2b:5d:96:c9:7d:49:18:
c3:95:df:f7:eb:c9:2b:ab:cd:86:ac:27:f0:b1:0a:
21:2e:78:be:ed:39:e9:b6:1b:14:2d:2b:9f:a4:66:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:60:19:17:43:CF:43:1D:FD:92:70:72:01:C1:D4:9C:23:43:32
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:60:ad:00:53:86:a4:ae:77:1b:c5:2e:b3:f9:0e:b3:e0:
da:ca:eb:52:f1:1d:82:b4:8d:af:c0:22:7d:33:73:c3:fe:05:
ab:47:01:16:8a:99:4f:84:6f:30:cd:4b:a5:69:f7:49:b7:d1:
b5:2e:67:b5:04:0a:1d:de:17:39:6b:a2:66:f6:0c:fc:db:2e:
1d:2d:a0:ce:bf:32:bf:a5:c9:04:95:54:ef:67:d4:f1:34:9f:
6d:79:00:ca:ee:72:1c:3d:4b:6a:c7:d8:df:95:4c:47:f4:fe:
89:48:b0:ce:6b:ef:5c:1e:08:64:41:3f:c1:c4:db:14:79:3b:
b1:c4:22:fb:31:7b:27:31:14:22:ba:33:f5:df:1b:6e:0f:4c:
f2:ed:33:e5:80:d4:46:7e:ca:de:c1:04:e1:bf:cb:26:c1:48:
96:4a:d6:0d:64:2f:f8:90:a9:a3:c3:17:3e:ee:76:1d:14:8f:
ed:42:d4:be:c3:4e:4a:89:3d:71:c4:30:df:3e:54:f1:f3:d9:
4a:58:27:9e:70:85:de:60:67:df:4d:2c:31:3a:5c:e2:80:65:
de:86:94:a9:05:7d:2a:46:44:da:d4:e3:47:98:01:f7:13:af:
7f:de:ce:5f:07:6f:7e:4f:f4:b7:ff:ff:99:7f:8d:42:89:4b:
c1:a9:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:21 2025 by rpki-client