Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: 3lft2N1/FLCbNF6KM13JoITwN9483DMBbjBJqnPifvQ=
Subject key identifier: 2A:A5:2A:D0:8A:62:1C:E8:D0:C9:76:3C:D4:93:DB:25:06:90:22:87
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 0198D6298DE44B05014BA16BDF73D610C19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0156
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: f+Hz+1+UYDsn7BvAFF+Y3bSQwzbG15n9nGRPib9J/j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8d:e4:4b:05:01:4b:a1:6b:df:73:d6:10:c1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=2aa52ad08a621ce8d0c9763cd493db2506902287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:65:d1:d8:66:e3:21:7a:2b:ca:25:dd:02:
2f:cd:11:00:cd:3e:7b:b0:83:02:52:8b:8c:65:26:
be:b6:1c:cc:f4:3a:5e:49:d4:e1:c0:f5:4f:23:72:
dd:10:10:0b:be:d0:84:f3:ec:1e:ab:85:21:c8:e9:
6d:d4:26:2e:b5:96:e8:87:16:06:a8:af:cd:19:a2:
de:4a:bb:3d:43:c0:d2:8a:db:ea:53:3e:81:ff:66:
b0:e8:e1:08:4f:37:5d:3b:e7:fe:b2:f9:8f:6b:18:
37:54:74:c9:96:40:ff:e2:23:2e:86:73:23:bb:39:
bf:e5:38:fe:cd:28:32:d0:fa:3b:e2:5a:7a:48:8d:
75:c6:01:e9:16:3a:89:4f:15:29:5c:62:12:12:13:
30:bf:21:76:ca:eb:27:90:c8:f7:6f:98:4b:16:10:
ae:98:3a:00:5c:8e:2e:22:92:98:81:08:74:73:f1:
4b:37:5b:86:3a:8e:33:af:05:03:06:37:bb:b6:7e:
76:a6:70:f4:da:3b:f0:24:8c:2b:97:1d:4b:ff:2f:
5f:58:82:39:d9:04:33:b5:b5:5d:08:81:01:74:dd:
76:ee:ea:9c:3c:65:65:fa:c9:97:d7:e6:5e:8f:78:
f4:ee:d2:44:67:f7:13:2a:75:06:39:2e:8d:9d:03:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:2A:D0:8A:62:1C:E8:D0:C9:76:3C:D4:93:DB:25:06:90:22:87
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:0a:e8:f9:e1:e4:f9:06:f7:65:28:4b:64:16:bf:6c:ea:
a3:19:38:a2:fa:f9:d2:b1:8e:f8:af:b3:e7:5e:0a:20:90:96:
02:12:25:fe:b3:0d:be:0d:16:c7:e8:21:e5:ec:b3:85:69:7f:
ab:62:aa:6e:7d:c6:b7:b0:d8:5c:6a:fb:d7:62:f8:4a:81:62:
b1:26:a7:63:cf:a8:ac:5f:bc:1b:1c:d0:a6:43:5d:d7:a1:1b:
24:9b:f4:12:15:5a:20:09:42:0a:b2:c7:0e:7e:b2:bb:c0:6d:
c8:0c:f1:04:d5:5a:bc:9c:44:8f:95:96:cb:b5:bc:c7:99:72:
be:b5:1b:66:46:30:90:1f:cd:a4:47:82:21:81:df:b1:5f:43:
46:6d:1a:1f:ae:b0:e1:09:86:a1:a5:cc:5c:e4:11:3f:d8:f7:
3b:8b:21:66:24:78:e3:c2:b8:95:af:53:b7:43:aa:5b:4d:2e:
72:d5:b3:5f:05:1c:4a:15:0c:9f:cd:10:2c:08:12:ab:35:50:
a0:72:90:7a:43:34:c8:fc:0b:72:17:e9:bd:9f:eb:75:25:12:
11:c7:7a:3f:89:fc:d5:4b:9f:22:d9:43:d3:a2:42:34:5c:e4:
d8:a9:58:07:04:6e:ec:4b:e0:01:ad:33:8a:21:57:35:5d:42:
c6:b7:5c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:22 2025 by rpki-client