Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: ddfHBs5E+mkCxe4jBWvaBbxUJVXoT3OcJJEulhcn4Vs=
Subject key identifier: EE:01:16:61:5D:DE:73:8A:E8:66:47:B7:ED:D0:CD:79:52:46:14:0B
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0198D4A84D87C7661F1726DB3BFC66F9F127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0D2F
Signing time: Sat 23 Aug 2025 02:00:56 +0000
Manifest this update: Sat 23 Aug 2025 02:00:56 +0000
Manifest next update: Sun 24 Aug 2025 02:00:56 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: 9cGdMMI/E6Z5Sbj4OgQeEW4xgw61+8ldpTz8iEI8/uQ=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4d:87:c7:66:1f:17:26:db:3b:fc:66:f9:f1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Aug 23 02:00:56 2025 GMT
Not After : Aug 24 02:00:56 2025 GMT
Subject: CN=ee0116615dde738ae86647b7edd0cd795246140b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:09:32:08:4b:5c:6c:5a:c2:f1:56:dc:db:
5d:f7:71:70:3a:93:91:a3:bf:ba:34:be:05:e8:3c:
12:85:c7:79:39:d0:2c:22:85:fd:25:14:22:eb:e5:
d4:ad:f6:aa:da:34:0e:90:ca:ec:b4:ff:b0:5a:3d:
a8:41:90:0a:96:f3:5b:7c:41:7d:80:ce:81:d0:88:
74:40:e9:38:0e:87:ae:e6:c3:5c:92:33:97:42:7a:
1a:54:b5:2c:4f:62:a9:b4:30:eb:45:26:de:a1:3e:
66:04:07:98:4c:1d:27:20:19:4e:90:69:a4:fd:08:
84:5a:65:b6:e0:3b:5e:c8:47:33:a3:ee:79:a9:10:
60:24:d8:57:34:28:72:95:c9:8a:7f:50:fd:3e:a4:
d2:0a:24:d5:0f:47:0f:ad:4e:bd:02:9e:57:63:95:
7a:74:16:78:a0:02:96:a9:64:d1:76:f4:02:87:19:
78:9d:a3:55:74:ff:5b:05:a4:7a:e4:68:eb:5d:7e:
88:c9:43:1d:a8:68:26:6c:0b:c8:e8:0e:df:6a:ad:
fa:a8:14:48:df:d6:60:3f:83:05:92:89:ef:5f:88:
87:1a:12:df:fc:35:27:1a:4c:01:3d:db:09:58:d5:
60:67:2f:01:26:1d:a0:57:3a:df:3a:b0:b3:9d:bf:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:16:61:5D:DE:73:8A:E8:66:47:B7:ED:D0:CD:79:52:46:14:0B
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:af:c1:04:a5:f7:54:ed:32:0b:c5:ef:2c:3a:f0:58:f5:1f:
38:17:50:66:ba:90:a1:b8:15:7f:6d:73:ce:28:d3:5e:ef:2e:
ae:15:c5:62:78:ab:70:21:7b:ac:06:c9:8a:6f:e1:b2:f0:5f:
66:b3:a1:99:95:d5:45:a6:d8:bc:fa:dc:70:78:72:01:72:21:
97:3a:9c:aa:e9:3e:2f:81:19:8f:f5:e6:bf:b8:7b:a6:37:30:
88:e2:1f:ef:97:d5:23:08:a9:e1:0a:c1:8e:e6:03:06:41:f8:
1e:f2:db:d6:66:07:c2:75:71:ae:26:07:3f:79:35:76:f8:38:
59:4a:7e:b6:4e:73:10:44:f7:d2:b1:d6:5d:80:04:b6:b2:29:
b9:4e:4d:1a:fe:00:13:53:df:18:dd:fa:24:bc:2d:a5:7f:6c:
7b:3a:66:e5:2d:6c:cb:7a:ee:17:b2:9d:02:f6:52:ca:74:bc:
f6:8a:54:3a:2b:ea:75:62:f2:ce:43:38:ec:d9:b0:b6:6a:4c:
20:65:8c:2f:52:48:24:44:3f:f4:a0:25:9d:53:a4:c3:5f:c1:
25:c5:77:df:71:31:6c:cf:3b:da:4b:a1:a3:8b:45:c2:7e:14:
04:16:4c:52:88:47:f4:55:81:02:cd:1f:a8:e4:95:b1:fd:12:
be:83:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:25 2025 by rpki-client