
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: cH1qtyP+OiAMYGtUypWt97m9mtmIRYjCUkBi4h6gc8c=
Subject key identifier: 7E:B8:9C:53:33:5B:73:38:2E:AF:3E:13:45:26:76:7F:5D:A9:0F:48
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0198D9993495DCEC70FC75911EA69BD49A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 164F
Signing time: Sun 24 Aug 2025 01:02:32 +0000
Manifest this update: Sun 24 Aug 2025 01:02:32 +0000
Manifest next update: Mon 25 Aug 2025 01:02:32 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: lccvr3hmUft5F8+LnLq1wkiIxfZabH2VHChz65XpjzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:99:34:95:dc:ec:70:fc:75:91:1e:a6:9b:d4:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Aug 24 01:02:32 2025 GMT
Not After : Aug 25 01:02:32 2025 GMT
Subject: CN=7eb89c53335b73382eaf3e134526767f5da90f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:aa:fc:cb:9d:11:6e:e3:fb:91:22:a6:80:
20:b0:26:81:c6:02:64:91:2f:c2:c4:71:82:74:9c:
19:4e:9e:ea:75:e8:f3:96:10:61:57:60:8a:a7:9c:
bf:da:99:ae:99:49:87:30:ec:26:19:ca:ca:12:2b:
08:61:18:0f:13:d6:7e:7c:92:ad:26:27:ab:5d:7e:
20:e2:be:55:39:35:ab:3b:f5:45:41:b1:45:a0:e0:
46:b4:71:76:9b:e5:71:3a:52:6e:d2:07:f2:ad:e7:
ec:eb:22:1c:f0:cf:34:44:e5:96:61:27:98:f2:91:
04:13:75:9e:f3:8e:9e:4d:93:9d:33:db:90:74:6f:
ca:1f:da:2f:83:85:db:8f:f6:c4:0c:73:b5:c9:04:
00:ef:0d:97:be:a9:c4:0f:a8:ed:01:0b:2e:e0:ba:
a9:36:b9:10:44:a2:ef:ec:ca:5f:01:b7:3e:e9:5d:
42:08:96:ec:2b:0a:71:7d:43:b9:a0:01:08:22:7a:
60:d6:db:a3:ba:53:31:d3:31:bb:99:57:21:79:82:
3b:b4:0e:0f:45:ce:ae:67:d1:9b:e1:76:8d:cd:21:
e1:53:3c:f6:b8:f8:9f:b2:b9:bd:d5:6c:14:38:01:
a9:a6:e0:00:85:7f:ec:d9:b5:38:71:19:08:79:2b:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:9C:53:33:5B:73:38:2E:AF:3E:13:45:26:76:7F:5D:A9:0F:48
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:00:98:bf:52:f8:3b:3f:3c:2e:cf:be:eb:ba:1b:c1:41:
4d:20:e2:57:fc:47:de:a6:8f:6d:53:71:05:cb:1c:ff:4c:1c:
6c:79:e8:15:0f:f8:88:20:70:2d:e6:56:64:54:49:26:d0:68:
71:06:3d:85:eb:5c:be:9f:13:49:96:c1:4e:61:df:a4:d1:60:
9d:09:f1:dd:98:29:b3:d5:fa:c7:4f:5f:a2:07:f9:bd:06:b3:
28:d7:1e:0d:05:70:00:11:ce:a8:1d:3f:36:81:ca:a0:e4:c1:
33:79:eb:b9:08:f2:05:d9:95:d0:13:6a:de:47:49:a0:40:13:
a9:0f:db:7c:f3:2f:35:c6:26:48:69:74:ae:35:0d:35:6a:d7:
af:29:74:2b:8c:cf:74:d2:5e:e2:62:c1:54:13:ff:b0:dc:32:
9e:0c:0b:63:d8:97:42:3d:b9:4e:23:6c:17:88:bb:6d:06:e4:
09:99:33:3e:0b:b7:4b:e9:96:bf:bb:d4:52:99:15:08:f2:62:
7c:96:94:69:91:55:2f:64:47:d6:b2:ed:cb:e4:09:5d:a2:98:
1d:86:aa:98:6d:85:a8:a4:55:20:1a:0c:29:82:a8:29:c8:46:
6f:3f:70:dc:fb:11:c4:07:1b:02:19:54:5b:a9:cd:fe:92:f4:
85:92:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:37:23 2025 by rpki-client