Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File: xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier: aWUjG0EV4Yvwf00C2BX/jQEp+hlDKXwcaeh8YkrRnpU=
Subject key identifier: 92:E6:9A:DD:35:D0:96:7F:1B:F8:19:D7:52:86:ED:02:6E:78:3E:51
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 0198D4E07FC00CFF8CCEF5C19A21FD655917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number: 01D7
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: pPDQg5f5kGuSR2hkeIKBHPaAVhU.roa (hash: boloPLWJ4z64JM9lq0HxvkObLTMsuc1bJU2GdWq92GM=)
2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: 3lffbvqrmLcSUetTe4br/nF2nmVmGzw39OqcAfbxXsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7f:c0:0c:ff:8c:ce:f5:c1:9a:21:fd:65:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=92e69add35d0967f1bf819d75286ed026e783e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:b3:5d:05:ba:b1:d4:c5:a6:7d:89:bf:fb:
73:74:07:de:52:fa:37:4c:f1:d2:b1:19:df:2e:84:
a7:3f:ee:39:af:63:9b:c1:b6:ae:0d:1c:d0:be:fa:
94:b0:ea:54:48:f9:5a:f0:bb:d0:e2:82:e2:dd:3a:
d3:9c:81:bd:43:e2:80:0e:25:18:3d:29:d7:e5:75:
72:60:57:6d:c0:23:71:12:f2:ec:ca:98:93:28:b2:
39:35:a4:e8:d8:62:ee:ad:c1:56:fa:ad:68:0b:a0:
1a:2c:64:28:bd:e5:30:e0:ce:3c:58:54:53:a3:c7:
a2:26:87:56:5a:89:32:01:0a:07:23:ed:fc:ed:ee:
ae:c9:20:9c:d2:63:c3:84:84:09:a9:96:b1:62:07:
a8:ea:e3:f2:33:ca:79:c5:fb:b1:09:e5:34:e1:0a:
52:fd:c3:da:93:4c:1f:34:73:11:d7:e0:77:99:cc:
76:e5:cf:33:9f:16:ab:fc:d0:00:0b:aa:6b:0e:42:
d2:63:a8:83:e3:02:5d:8b:31:87:9b:e8:c0:05:92:
49:ad:1f:95:be:dc:8a:d9:3d:2f:b6:39:fb:fc:17:
c2:93:e8:d1:72:3d:14:ff:df:09:a6:ce:52:2f:7b:
2b:9f:d4:9d:5b:2f:db:4b:0c:39:90:4a:c3:cc:79:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:9A:DD:35:D0:96:7F:1B:F8:19:D7:52:86:ED:02:6E:78:3E:51
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:b3:55:b7:80:47:a2:e3:7a:78:e9:e4:a2:14:ab:4f:de:
09:3c:e8:b5:1a:30:d2:ec:c2:47:57:e1:81:89:ad:c2:be:46:
23:c3:94:a1:9e:58:c0:a8:9a:ad:71:4d:dc:ee:e3:5b:2f:62:
6f:36:8c:e2:ba:06:f9:a1:49:0d:f0:83:ce:87:f8:ce:18:f5:
1a:0a:fd:39:eb:ba:c8:ef:cb:1a:5c:af:fb:20:bc:c3:37:07:
4a:96:bd:3a:8b:f5:fc:6b:80:6f:60:11:a0:59:e1:0f:44:12:
98:14:4d:fa:e8:da:02:b0:17:83:be:d1:f9:b2:04:ad:ef:5f:
23:ac:18:26:7c:11:21:32:e5:fd:9d:e9:62:3d:5e:ca:fc:4f:
1a:ca:58:0c:6a:30:df:0c:81:27:b4:07:b9:05:82:57:63:5a:
a6:6e:04:49:60:f7:82:c9:41:3d:8a:68:e9:9e:b2:d2:b1:83:
f0:eb:dc:3d:c3:08:9a:a5:3e:c8:d7:d5:6d:48:e9:94:1f:a4:
f5:e4:ac:f2:56:d0:af:f1:bc:c7:35:15:34:45:70:40:82:48:
43:61:fa:4b:f5:4c:c4:b9:08:a4:48:74:da:41:5c:bc:96:18:
84:4e:de:49:ae:b9:d4:a8:81:2f:33:2d:a5:64:70:a2:a0:00:
19:fc:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:43 2025 by rpki-client