Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: MqTvYXOnpMGMr/5/SqAH9GvstV7QFb20PqQ9Xgo2AZA=
Subject key identifier: C0:C8:89:E8:06:B1:15:59:01:50:2E:3F:46:9B:68:68:A4:03:AD:59
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 0197C19229717147A5C655CA1BC5A295D7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0FB2
Signing time: Mon 30 Jun 2025 16:01:10 +0000
Manifest this update: Mon 30 Jun 2025 16:01:10 +0000
Manifest next update: Tue 01 Jul 2025 16:01:10 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: +xJKUVLjLIQ2CfHxPS38pFrx6mzYCpIltmT1hxDkof0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:29:71:71:47:a5:c6:55:ca:1b:c5:a2:95:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jun 30 16:01:10 2025 GMT
Not After : Jul 1 16:01:10 2025 GMT
Subject: CN=c0c889e806b1155901502e3f469b6868a403ad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:48:6c:5b:39:ee:cd:65:b5:7c:98:68:54:
41:3e:38:72:10:79:06:ab:bf:ad:da:7e:e9:9d:91:
94:3c:55:45:5e:a3:f4:94:c5:b7:3b:4b:f2:bb:b8:
42:68:1c:36:b1:86:50:b9:84:89:d6:7c:d3:77:97:
86:38:24:c5:02:33:55:61:b3:c4:68:23:f0:26:f6:
fb:96:b0:7f:1a:04:dc:d1:7f:f1:94:d1:9c:63:fe:
7b:0b:7b:ce:e7:a3:e6:39:61:65:00:a5:9b:bd:d9:
41:0d:e1:e2:c0:d3:2e:da:8d:12:81:6d:cc:71:61:
6c:8f:bb:ea:74:36:a2:6b:8e:38:31:7a:f5:23:fd:
2d:10:93:67:06:8b:c0:70:1a:a4:ff:6f:0f:e7:71:
5a:0a:79:fb:8a:c7:a4:e6:44:43:75:5b:a5:29:62:
b2:25:cb:c7:01:d4:64:6d:17:f0:84:da:74:0a:eb:
80:e6:3c:61:c7:72:f4:88:a8:bf:05:27:4a:d0:4e:
91:88:46:21:fc:14:a0:e5:aa:37:da:d1:0f:b7:4b:
be:63:b3:39:e8:df:72:01:23:73:bd:b4:79:49:c0:
d6:3d:e1:15:d7:2e:fa:ec:ab:2e:70:2d:bc:13:f9:
67:73:46:06:d1:8a:7b:6e:69:aa:8d:f9:18:51:35:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:89:E8:06:B1:15:59:01:50:2E:3F:46:9B:68:68:A4:03:AD:59
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ed:0e:7e:93:f4:50:92:75:ea:5e:c4:d6:00:38:ab:be:a4:
04:c6:b1:71:da:fb:e3:f2:07:6d:a1:18:eb:16:1a:72:eb:29:
28:6b:f3:d7:f2:7f:a2:59:b6:d7:45:36:f8:ee:c4:0c:8a:ef:
00:b8:fb:64:e7:95:0c:6c:c7:09:c1:70:38:25:75:01:82:1d:
de:5c:0e:35:82:fd:f5:4c:86:f8:17:6f:a6:9d:69:92:23:7c:
35:6e:10:83:d9:0c:3f:8f:6e:83:e0:56:7c:30:5c:86:26:e6:
15:64:b2:f1:d0:de:04:3b:5b:5c:ce:7b:96:73:f1:eb:12:a0:
5b:17:8a:f7:2f:cd:51:00:67:43:28:84:7f:c8:2f:77:95:70:
2f:02:4b:53:97:f8:e2:66:ba:43:ce:78:84:5c:ed:16:98:4b:
96:91:96:e8:77:58:b4:5c:cc:53:50:d9:6c:92:b4:30:f8:26:
46:1c:0f:cb:c5:d6:fc:5d:61:11:bf:0e:59:46:55:1f:04:ed:
97:54:fc:24:25:47:91:3b:bc:8c:61:0a:44:d1:27:33:73:2c:
26:d8:ef:f6:b5:cf:85:14:09:1d:de:50:bc:26:12:58:ca:bc:
80:60:21:e9:b5:d0:fd:62:fd:71:14:80:c3:3d:f9:05:38:c7:
2b:1d:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:26 2025 by rpki-client