Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: QJEXqDQT4xHqlt8gVXJBcRecL7iY7qXonZG4NhPbqyI=
Subject key identifier: CF:3C:DF:1C:E3:9F:ED:2D:62:22:85:10:DC:2B:D7:16:7C:53:DA:88
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0197C7262BDA7F88A89E784037160FF32E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 15C2
Signing time: Tue 01 Jul 2025 18:00:56 +0000
Manifest this update: Tue 01 Jul 2025 18:00:56 +0000
Manifest next update: Wed 02 Jul 2025 18:00:56 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: fQlhtZ1lIUnk659bldSe8u8MYDZ53kE8di4V2eUh6LU=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:2b:da:7f:88:a8:9e:78:40:37:16:0f:f3:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jul 1 18:00:56 2025 GMT
Not After : Jul 2 18:00:56 2025 GMT
Subject: CN=cf3cdf1ce39fed2d62228510dc2bd7167c53da88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:e7:ee:1d:2c:fb:3b:f6:71:89:1c:57:d0:
ad:85:36:67:ae:ae:ee:93:cd:21:ef:1c:33:1b:3b:
6d:80:c1:c0:39:d8:a3:f7:6c:70:97:e7:d9:48:81:
00:17:80:e3:84:a0:60:a7:26:5d:00:e8:5d:8e:ef:
27:03:41:60:1b:8d:65:03:80:cf:67:0f:6d:f2:5e:
86:62:95:71:70:4c:63:6b:b5:4e:9e:d6:49:4f:c5:
e6:2c:db:2d:d1:ae:b8:e5:f8:05:c6:29:7e:88:ac:
69:41:66:42:e7:e7:d4:ee:64:07:f2:72:e8:83:22:
e6:a5:db:59:d2:83:21:f3:36:d9:c3:7d:47:72:8e:
c9:cc:7f:c3:a4:bb:3c:76:85:b6:c7:d4:1c:d8:3c:
7a:b3:ee:a3:6d:ab:48:13:58:a2:3e:f4:34:ee:4c:
17:a8:88:e9:b2:df:83:9d:68:3c:37:f2:7c:89:bd:
2a:f7:bc:90:2f:00:76:f9:a5:61:8c:8d:40:79:2a:
37:34:85:4c:94:5e:e3:67:2f:97:f3:d8:8d:d6:49:
72:8e:77:20:a4:7b:4f:54:9e:b4:6d:6b:34:79:58:
ec:79:f7:f7:9d:70:74:71:77:d0:92:51:b4:07:c5:
d1:36:00:1d:5d:ad:85:09:61:c9:1a:0f:d3:71:9a:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:DF:1C:E3:9F:ED:2D:62:22:85:10:DC:2B:D7:16:7C:53:DA:88
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:90:fa:e9:b3:4e:42:17:53:b1:ca:7e:36:13:86:4c:f7:91:
36:f7:15:24:6d:46:67:65:f7:2b:b3:73:39:98:de:cf:3d:6b:
4e:49:30:60:a1:d3:53:fe:27:0e:8f:0e:1d:0b:53:d4:2b:af:
e6:5e:4d:b3:5d:99:6b:10:63:02:43:23:ac:67:bf:35:bb:6e:
86:15:77:da:67:56:b2:70:29:d5:53:ed:ff:d6:0a:54:dc:4a:
de:85:55:eb:80:f0:ae:ee:94:6c:12:b2:cc:23:37:42:d7:df:
88:44:5c:37:35:de:f8:51:32:71:bb:ea:a4:25:78:9b:5a:5f:
2c:94:f6:f8:46:6b:75:60:62:11:bf:83:17:17:4b:70:f3:ac:
18:d1:be:ce:93:f4:1d:76:f0:12:96:37:ba:c4:8f:22:56:09:
63:48:c1:0c:17:73:f1:35:17:05:ed:60:c9:ed:71:4e:5a:17:
22:ef:eb:a6:8e:f4:71:a0:d0:fb:51:22:73:0e:d9:db:23:8a:
98:ef:49:43:b5:51:98:ea:59:44:05:5d:79:fe:d2:49:9e:ab:
b8:67:82:d9:ab:7d:25:87:4c:36:03:df:b2:e7:81:0a:5d:20:
b4:1d:15:90:52:8e:79:5e:e6:a4:17:03:cf:80:3a:3c:23:d8:
5f:5d:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:24 2025 by rpki-client