Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: n/W8U28e0oy84n0UWD6coeQ7xVPuIrDUV8d0WlC78LU=
Subject key identifier: 8E:CB:EF:A8:13:44:65:B8:D2:B5:5B:B5:85:20:96:FB:86:DE:76:FE
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 0197B7EA3A6520DD071AC8CA078D6506DD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 1062
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: 8VLgENQqZDNSdrIXr8mNgdqBDdSFYkw7OiwlZJQTLoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3a:65:20:dd:07:1a:c8:ca:07:8d:65:06:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=8ecbefa8134465b8d2b55bb5852096fb86de76fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:50:db:71:24:97:fa:4a:82:a6:fe:a8:3b:
c1:bd:24:e4:5f:7c:66:a7:6a:db:70:e3:d1:11:d7:
cb:bf:b2:2c:59:c7:ec:97:b5:8c:49:8b:03:b4:92:
13:9e:6c:98:f3:fb:73:56:8c:42:6f:e2:ef:15:28:
6b:8c:6e:ac:9f:bd:26:2a:39:75:7b:fc:48:66:c5:
c1:25:f3:a7:bb:41:7d:50:ad:a2:f0:33:d4:80:22:
f1:63:81:42:de:ef:80:cc:dd:b6:a1:3e:e8:8c:4d:
2e:41:94:bc:14:56:28:e7:ec:47:a0:e8:3d:7f:a4:
01:0b:3b:cd:15:fd:2b:ac:04:bd:25:9a:a6:07:a9:
a2:40:8f:cb:e8:97:bb:39:eb:63:36:7b:b9:1b:68:
0b:38:a6:d9:3e:0a:38:8b:35:19:01:9a:7a:cb:03:
6c:8a:5b:4a:4b:dd:da:f1:e0:0e:9e:8e:21:9e:aa:
0e:c4:92:90:35:6b:45:ab:07:52:8c:0d:7a:e2:45:
c6:e0:aa:cd:a7:ba:f5:66:ec:c6:f2:f8:d2:cd:db:
a9:8a:28:11:48:06:ef:f8:d4:16:af:dd:1d:66:e0:
fb:81:fa:92:94:48:29:2c:99:dd:92:0f:43:a1:f5:
89:a1:d4:49:b0:65:02:42:fa:6d:08:04:09:c7:7f:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:EF:A8:13:44:65:B8:D2:B5:5B:B5:85:20:96:FB:86:DE:76:FE
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:09:b3:c6:70:f6:85:86:64:0d:3e:8a:54:72:41:3f:44:47:
a9:82:b5:a8:9e:5f:f0:e6:5a:1a:42:bc:d0:13:27:48:33:18:
77:08:d4:cd:44:60:f6:b5:6a:6c:d2:0c:4f:fc:93:2d:a8:82:
ff:01:25:94:31:ae:9c:0d:00:0b:ff:5f:91:6e:56:70:31:8d:
3a:fe:d4:f8:c1:b9:89:c6:8a:74:65:43:0c:d1:e2:f5:ff:6d:
5e:fd:19:34:83:0f:eb:17:08:2c:e9:64:31:9d:c2:c2:6e:5d:
7c:63:55:aa:dd:d9:23:32:05:1e:4c:35:89:8a:ae:55:9d:80:
68:93:94:ed:44:1c:20:d5:86:8c:6e:91:89:0c:5a:a9:b8:76:
19:9a:3f:06:e8:71:4b:e2:95:6c:5e:fb:e6:c7:6a:e4:ff:c9:
42:e0:4f:eb:78:2c:ee:70:41:b3:55:e9:49:c7:6a:a8:86:f9:
9a:6b:fc:de:4a:76:38:b4:ad:3c:44:4a:97:6b:12:75:27:46:
3d:3c:1e:24:2b:97:d3:00:3e:97:2f:1a:ce:0e:2c:a8:53:fa:
3a:ae:03:91:5d:e8:09:b2:58:6f:86:ed:06:0a:ab:3f:6d:fe:
f2:77:9d:2b:bc:05:0a:34:26:f0:9d:24:ad:a0:62:82:7f:ec:
7e:aa:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:52 2025 by rpki-client