Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: i3TyJK0bDhXku2Xte0t7ED2PUoSGDGIzGKJKsjqV5bA=
Subject key identifier: F8:63:57:CA:53:D1:FD:BD:BC:AF:EF:2B:0D:AE:18:18:80:31:F2:8A
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0198D54E08DA0FCA2FEB4962AF96D89858EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0BE6
Signing time: Sat 23 Aug 2025 05:01:57 +0000
Manifest this update: Sat 23 Aug 2025 05:01:57 +0000
Manifest next update: Sun 24 Aug 2025 05:01:57 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: cNMPcQzhGxhS1Y9gjoF0IsgSVk9rBh/hXSuJk0sMdok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:08:da:0f:ca:2f:eb:49:62:af:96:d8:98:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Aug 23 05:01:57 2025 GMT
Not After : Aug 24 05:01:57 2025 GMT
Subject: CN=f86357ca53d1fdbdbcafef2b0dae18188031f28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:16:51:f5:d9:a3:3f:ed:60:40:ec:a6:26:
b4:9f:0a:5b:6a:10:55:f0:e2:42:3f:73:23:c6:ab:
f6:86:f9:f5:35:6a:04:af:72:28:3e:f2:05:6a:f7:
6d:7d:f7:71:a4:63:37:b9:1f:4f:ae:b2:e9:5d:05:
b2:bc:be:be:e5:f2:7e:b5:c8:22:c2:6b:b2:fe:a0:
c4:64:f8:59:f8:d3:21:30:7d:1d:bd:b7:0c:66:81:
62:10:6b:f2:6f:77:33:c5:fa:89:2c:11:5a:c1:35:
8f:95:37:f7:a2:eb:31:36:d9:9b:26:ff:11:31:4c:
b5:85:8a:be:51:ab:0e:2d:16:25:35:ff:6f:c6:23:
31:92:96:0a:f1:03:9e:6f:34:15:4a:a4:0d:4a:4e:
4c:5e:ce:f6:22:3d:68:ea:ff:51:09:56:38:b0:2d:
90:a7:54:da:91:3d:84:61:6f:f8:81:4a:95:d9:0f:
4c:b1:69:60:81:4f:e6:13:33:be:36:eb:ff:64:ea:
4f:bb:32:e0:fb:94:6c:6d:7a:e2:8b:a7:8d:04:7d:
53:32:39:fb:9c:76:c2:af:f1:6c:fe:94:a2:a5:87:
56:a0:56:10:27:3a:70:25:01:88:52:09:3b:22:3d:
c0:cc:34:42:e9:b9:11:ea:89:2f:6d:bb:5f:4b:57:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:57:CA:53:D1:FD:BD:BC:AF:EF:2B:0D:AE:18:18:80:31:F2:8A
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4c:7e:88:cc:6f:ef:52:56:7f:8e:16:c4:be:99:ed:8d:30:
e9:02:49:27:e1:68:54:f5:fd:07:be:c9:6d:04:8e:1a:42:c3:
b6:6c:ea:e9:88:00:b9:9f:53:f2:87:35:ae:8a:3e:4a:31:56:
88:8f:7b:ba:6f:f8:24:13:05:62:65:50:f8:69:07:61:de:6a:
38:99:3a:94:a7:69:05:f7:5f:44:b7:3c:53:43:53:ea:fd:97:
b4:67:6e:73:ef:62:32:02:ed:6a:0b:2d:e5:7e:4e:14:d9:25:
3c:8b:9e:c7:1f:ca:49:cb:ee:50:7b:27:e0:5d:0a:23:4f:c7:
44:2c:3a:45:ad:ee:49:4d:b6:32:c6:0b:ea:d8:e9:a4:5f:c2:
bf:92:a6:6b:79:d7:cb:60:ad:f8:98:a7:fa:22:bf:55:fa:d3:
12:81:01:3f:ce:c6:fc:fe:f6:d9:a0:fc:d1:2d:e7:39:3a:82:
5b:08:f8:60:22:59:f8:bc:c5:78:b5:8a:4a:d2:58:dc:03:c6:
ec:c5:ee:86:9e:aa:04:80:92:94:98:3a:fd:32:49:f9:95:4e:
ac:6d:a8:17:0d:ee:27:12:4b:b1:d0:0a:04:33:e8:7c:1c:7f:
9c:a6:09:48:c6:85:99:0f:ec:c9:0e:7d:4c:ae:a7:ad:3c:07:
c2:e5:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:22 2025 by rpki-client