Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: M8bLK6/eezS9sWHrw+gGqzWG0/5EeNOjNpj3L/PSYpw=
Subject key identifier: 53:B9:16:1F:C7:6F:8D:DD:84:14:83:72:0B:DB:4C:1B:B0:65:C1:8B
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0198D4E0B139003381ED48C522DC7560B8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: qGZGxXAyP5WRRJ0QImxI5GLWMinvkGAkclGpTqoLydg=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b1:39:00:33:81:ed:48:c5:22:dc:75:60:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=53b9161fc76f8ddd841483720bdb4c1bb065c18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:10:a9:6f:58:61:1e:70:5d:9f:81:eb:93:
f8:e8:f7:3d:22:92:27:91:7d:56:db:eb:ed:df:41:
05:69:b3:26:3f:a8:c0:20:79:6b:7e:cb:14:23:fe:
ca:8b:fd:4f:ea:18:ce:65:38:08:c2:41:87:d9:0b:
82:eb:a5:7e:36:9b:8d:9b:7c:b9:fb:76:c8:57:a9:
66:24:00:7c:57:5d:a9:03:a9:04:a3:dc:51:4a:09:
70:66:19:51:17:02:99:5e:40:48:42:eb:f6:0d:63:
9b:8f:24:75:6d:e5:a7:6d:5b:6c:02:4f:48:64:9d:
f0:2d:53:f0:ea:6e:c9:76:08:85:2e:2b:46:60:00:
e6:16:75:2e:b9:ec:10:8b:79:9a:44:af:f4:a5:6d:
3f:6e:c8:3a:37:25:a3:db:de:8a:9f:70:00:ed:0d:
55:ac:59:3e:0a:8b:2e:56:bb:3b:c3:ce:c8:79:39:
9b:5d:02:5b:3a:5a:b3:fb:97:44:75:a8:46:4f:a1:
ae:c0:3d:66:f5:ab:c2:62:23:e3:d7:50:9c:0c:0a:
f0:b5:62:40:20:70:b9:4d:39:16:53:0a:f9:c7:9c:
07:ba:d1:fc:5b:8b:60:f9:9a:ea:6e:aa:6f:63:e0:
65:3d:3d:e5:09:4e:d8:e1:4b:46:06:c3:06:d8:c1:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:16:1F:C7:6F:8D:DD:84:14:83:72:0B:DB:4C:1B:B0:65:C1:8B
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:9d:6a:c2:62:6e:27:8f:b8:d4:75:2a:79:36:ff:20:eb:
c8:71:50:4d:ba:21:b7:14:ae:10:33:e1:93:f8:c0:cf:37:57:
26:71:0e:a2:47:08:10:f1:f3:f9:61:77:d9:e3:78:2d:6b:37:
3a:23:66:49:b7:4e:5c:7b:c5:58:a8:b8:22:c1:c8:a4:60:ef:
d3:57:5a:9b:5c:00:0c:9b:64:aa:23:b5:e3:a5:20:d0:c9:00:
b7:fc:d7:3c:27:7f:23:a0:57:5a:8b:5f:ad:fc:3a:d1:75:7b:
58:c1:54:3f:94:aa:00:ae:6a:9c:f2:9e:5c:2a:c2:89:2b:a8:
91:78:c1:f0:2b:a5:75:04:71:b0:86:01:22:54:73:e6:c5:13:
27:03:55:07:24:51:4e:5a:76:e9:fc:c8:4e:c6:e9:79:47:39:
d4:f1:98:eb:c6:9c:c3:7c:58:7b:52:bb:a1:e8:fb:7b:ac:ac:
69:08:dd:7c:9c:ed:1a:c9:77:af:71:16:4c:d8:fd:a3:14:18:
72:76:99:52:e2:9d:5e:0d:98:75:cb:dc:79:8f:f3:cb:4a:55:
cb:df:cf:da:3e:34:42:70:21:5b:5c:9c:a8:9c:88:44:a8:c4:
de:38:b3:09:d4:09:f6:d2:46:55:74:bc:bf:11:85:01:8b:f8:
41:db:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:14 2025 by rpki-client