Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: Wj/K/GOjvoAjAti+ZQnEN6IUPW36/3jC0lPyrxf+kmA=
Subject key identifier: 5F:D5:95:9C:39:C3:E0:9B:9D:9F:E8:49:D3:68:DC:FE:93:AF:CE:0E
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 0198D515ADB34571154043B2B897FD5CB46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 098C
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: U0vb8xmqTGbMUcK4G3ZLX545XhrQjcOUGvjip4avyGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:b3:45:71:15:40:43:b2:b8:97:fd:5c:b4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=5fd5959c39c3e09b9d9fe849d368dcfe93afce0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2f:5d:66:4d:54:1d:1e:98:9b:40:ce:5a:4f:
f4:05:4b:60:ba:42:36:59:ba:fa:b0:e9:0f:d4:3a:
f9:0d:44:2d:c3:9c:00:97:87:cc:b5:4e:52:f3:ea:
58:62:ef:c3:63:a0:a0:97:33:76:69:04:63:6a:ac:
35:69:f3:8f:be:5d:bf:24:77:5c:91:40:64:f3:49:
98:36:2b:b8:36:e4:7f:7a:2c:52:a0:44:26:33:7f:
48:ae:54:3c:9b:f1:b1:9b:f9:ae:1b:48:7c:66:33:
5d:1b:20:25:0f:b6:07:40:8c:d1:d0:90:85:a3:94:
2f:00:c0:34:89:e6:45:88:40:e4:43:3a:d0:6f:df:
39:e5:b9:da:8a:9e:6c:b7:87:82:20:47:b3:b1:5a:
22:e9:1c:83:11:58:9b:0e:d1:d5:48:2e:5b:fa:3c:
63:e0:31:fa:22:f2:de:c9:51:ae:b6:ee:c3:52:44:
19:15:0c:77:51:ea:04:b2:e6:ed:be:68:a9:ec:ef:
a2:78:23:21:8e:56:25:a2:a8:b3:d1:01:46:d2:de:
d7:f1:1b:e5:a7:90:b4:e5:5f:fe:9d:d8:39:90:81:
5c:82:6f:e5:e9:58:8a:59:4a:69:56:c1:a4:f9:2f:
53:ca:89:34:4e:4d:53:14:a4:d1:d5:ba:62:c4:94:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:95:9C:39:C3:E0:9B:9D:9F:E8:49:D3:68:DC:FE:93:AF:CE:0E
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:05:7f:31:26:57:04:69:14:e9:f0:f3:61:db:71:c1:3b:a3:
6c:9e:02:ae:29:1d:e9:db:74:eb:25:71:37:ad:2c:62:96:91:
e2:73:f7:66:f9:e6:fe:32:b7:48:be:28:5a:c1:ea:20:5e:14:
5b:da:2a:be:48:1c:a7:e7:06:0f:37:4d:63:15:5e:50:bf:0d:
b1:7a:26:d1:08:46:50:25:1c:38:dc:df:b3:64:04:6d:5b:00:
38:5a:60:b2:17:80:ac:48:ef:f2:e7:2c:e3:1b:99:18:22:62:
1d:ea:06:aa:09:76:dc:db:78:8d:f5:6a:b2:ad:86:c8:87:d2:
61:50:21:e6:f3:8b:7f:e2:e9:9f:f5:d9:4f:47:74:9b:e9:7e:
12:22:8d:0d:b8:27:4b:89:15:92:fd:95:63:db:b7:9d:4c:1e:
d8:64:9f:62:e2:c3:17:48:11:82:5b:e1:e2:17:3a:ec:3e:17:
b9:d2:c6:b2:cc:8b:8e:2f:e9:44:73:86:b7:f4:d4:df:39:02:
7a:ed:0b:53:28:1b:23:06:82:41:c8:8b:20:89:c7:2b:58:f1:
c5:44:e7:75:33:47:77:74:85:a8:c2:6d:f7:57:5f:7e:00:e0:
2a:ca:03:6a:e7:69:a8:d9:40:19:cf:aa:a1:f5:ba:92:41:c3:
c3:6b:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:40 2025 by rpki-client