Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: QCF+m0yy88asUzt0iiTyFVAQaoHGrbLjR9ahWewHFYw=
Subject key identifier: 1B:04:18:CA:8E:BE:DF:4C:B9:86:3B:FA:B7:E9:B3:42:3D:D5:40:15
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0198D6CD1391A754DEBC2491650BF79DD51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0770
Signing time: Sat 23 Aug 2025 12:00:20 +0000
Manifest this update: Sat 23 Aug 2025 12:00:20 +0000
Manifest next update: Sun 24 Aug 2025 12:00:20 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: VQNUX6uALPGCmyTvSC3z1rwGTxD/dmdQ0ssIQO/2zn4=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:13:91:a7:54:de:bc:24:91:65:0b:f7:9d:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Aug 23 12:00:20 2025 GMT
Not After : Aug 24 12:00:20 2025 GMT
Subject: CN=1b0418ca8ebedf4cb9863bfab7e9b3423dd54015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:4e:ab:d1:6c:7a:2f:4c:d8:f6:7c:dc:1c:
54:03:7e:b2:58:44:86:1e:ba:69:fd:0c:7a:50:10:
e3:04:b1:18:67:1b:41:91:79:b8:a9:5f:3f:ba:f5:
76:4b:3f:8c:e7:fe:29:b6:2d:b1:ae:ad:c0:99:12:
fa:85:40:a3:55:dd:8b:81:88:71:a4:c6:2f:cf:52:
90:a5:ef:e5:29:99:db:46:72:30:cf:73:c1:22:47:
3e:2e:b2:96:0b:a2:64:4e:52:20:67:a9:39:5c:77:
5e:aa:b6:8b:9d:ff:49:e5:8c:f8:ef:d7:79:c2:4d:
64:ea:fc:3a:82:0b:6d:4c:0d:77:86:4a:88:54:ba:
a0:fa:49:54:a5:0d:27:60:2b:77:28:d4:98:dc:98:
9d:24:c8:c8:25:54:ee:2e:d6:8a:ef:1d:94:4b:80:
3a:63:a8:79:72:5d:87:2c:23:67:64:9f:b5:e3:00:
11:21:9d:f7:6b:bb:59:45:5d:90:f1:3d:5b:ea:8f:
88:93:69:fb:64:10:e3:29:7f:e9:09:1d:7d:14:43:
ca:7a:e6:14:eb:1d:06:d4:67:c5:19:a0:82:09:89:
3e:5f:29:60:5c:ad:c1:d7:83:26:9d:fb:f7:b2:bf:
eb:a1:f9:58:e7:81:6a:55:d5:b7:37:72:18:f2:1a:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:18:CA:8E:BE:DF:4C:B9:86:3B:FA:B7:E9:B3:42:3D:D5:40:15
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:26:14:43:79:ed:84:03:84:65:2b:fc:ee:76:5f:71:c7:
ae:29:2a:26:03:c0:1a:87:b3:e3:49:b3:96:fd:a0:c4:67:70:
88:56:fb:b4:ad:fd:a3:ce:38:61:24:e7:fc:6f:6f:ab:d2:ad:
af:f3:7c:b4:75:f3:2d:f8:44:b3:c6:ea:02:a5:46:3b:25:d9:
0d:da:6f:b1:41:8f:ca:78:00:2e:1b:d7:98:e3:8f:5b:9f:78:
c0:f1:5a:72:98:0c:90:65:23:8a:df:66:0e:14:a1:48:a3:d4:
8c:f6:02:b3:2b:40:10:5d:e4:1f:0a:1f:b7:82:b3:fb:e1:dd:
1f:8e:03:d8:70:f2:5f:6f:3e:0a:85:a7:d6:d2:ff:f0:d4:a3:
b8:3d:0f:29:68:ee:c2:f7:96:0c:00:95:19:c3:bc:b7:83:78:
5d:68:58:77:80:56:0d:3c:5b:c3:27:24:50:60:c9:1d:1b:89:
3f:44:a2:5a:9b:b3:3f:33:91:7d:64:3d:25:0e:a5:da:15:9d:
ae:fd:16:b5:9c:13:0a:31:0a:92:1d:52:96:dd:df:07:9a:8b:
02:4a:35:1e:9d:0d:1d:2f:4b:fb:e6:8e:ee:0e:77:73:bf:b5:
40:b9:64:81:b8:14:7f:23:c4:02:5a:06:29:53:1d:fe:61:25:
f6:d9:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:26 2025 by rpki-client