Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: RgCGhAc1c1D4ppBFzQkmMUiECqysPh23QTVhi2Pgio0=
Subject key identifier: 93:AE:C0:19:39:4B:BB:07:52:C4:29:02:00:A4:78:2D:14:C3:CB:4E
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 0197C87038CBC2B9DA986774BC744E54472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 125C
Signing time: Wed 02 Jul 2025 00:01:27 +0000
Manifest this update: Wed 02 Jul 2025 00:01:27 +0000
Manifest next update: Thu 03 Jul 2025 00:01:27 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: s5f+ZAxSqnGoHSGya423W0MiAYrBpChcsmg3E4oMDLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:38:cb:c2:b9:da:98:67:74:bc:74:4e:54:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Jul 2 00:01:27 2025 GMT
Not After : Jul 3 00:01:27 2025 GMT
Subject: CN=93aec019394bbb0752c4290200a4782d14c3cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:d1:82:56:2d:5f:52:73:f1:70:ed:14:58:
b6:e0:5c:99:72:9f:e6:b4:a7:a0:df:06:73:17:42:
af:bf:dc:bb:ad:2d:bb:ac:27:53:58:5f:99:d8:f1:
e7:b2:34:04:03:6c:cd:18:8b:dc:71:50:7b:60:08:
9d:6a:76:b1:b3:6c:0a:07:b4:5a:8d:23:6a:9d:7f:
6e:df:00:e1:2d:ad:06:88:88:ef:d3:ab:97:58:36:
bd:70:4c:e1:6f:3a:a6:ec:e6:c9:11:7a:b7:08:66:
5c:1f:96:7f:62:a9:66:43:08:27:5b:2c:c1:4d:4b:
77:ae:1f:a8:47:bb:90:e2:a6:72:ad:ed:1d:46:0b:
59:d5:56:97:3a:38:dd:6e:48:45:46:bd:b4:d9:b0:
71:71:3e:9a:81:bf:3e:4d:ac:30:56:98:2c:45:7c:
99:68:6e:1a:b7:da:e0:33:a4:42:dd:38:f9:4e:19:
65:71:25:20:f3:d8:04:4e:15:99:a2:36:ac:12:3a:
ae:77:9a:bd:ff:4a:8b:20:3e:1c:c9:bb:8e:84:1b:
61:15:cb:96:fc:af:f4:5f:9b:81:c9:6f:22:68:db:
df:43:d8:b5:2e:90:46:ca:de:61:6f:76:d1:cc:2d:
aa:bd:f6:2f:d8:e3:3f:6e:43:ce:3c:3c:89:88:0e:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:C0:19:39:4B:BB:07:52:C4:29:02:00:A4:78:2D:14:C3:CB:4E
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:bc:99:c8:3a:c1:d4:65:70:f2:43:40:65:a0:fe:47:cd:
50:14:aa:f6:7b:36:e2:a2:bf:48:8b:df:d4:02:d7:f6:a5:fd:
da:4f:2f:f8:19:93:24:17:1b:41:a3:8e:e1:ee:6a:71:17:fe:
0b:5e:8b:77:22:02:a2:aa:09:e3:5d:e4:db:c6:fc:fa:f9:81:
96:c4:a8:dd:1b:19:db:84:0d:6c:3d:8a:aa:85:61:62:0c:a9:
d7:66:b6:e2:08:0b:1b:a5:9c:99:86:29:0e:8e:ca:98:36:40:
25:64:4e:54:45:27:fb:0c:f8:7c:fe:97:f7:5d:92:f9:b8:c6:
4f:92:31:a8:65:c4:fc:88:9c:38:06:39:36:bf:76:79:d7:bc:
66:5d:6f:b4:82:d4:98:3f:d8:ba:cf:0e:31:40:45:39:8e:e2:
9a:60:78:a8:5e:a2:02:a0:8f:8a:5c:a3:53:46:85:49:71:d2:
60:93:80:42:8f:16:84:8e:49:b7:92:d1:4c:ca:1c:ba:82:08:
c1:03:49:41:07:43:97:3f:62:71:03:3f:e0:46:ce:df:e7:2b:
29:69:f9:0e:7e:96:2d:2f:e9:67:e5:a9:2f:aa:e2:aa:f3:5d:
2c:64:9d:c4:9c:0a:40:cd:c7:3a:9f:6d:5a:97:5c:d4:97:a2:
8d:e5:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:39:51 2025 by rpki-client