Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: gew4DsbT8PKd/T+Zi6whp3btApANPhdHZptznw4PT+4=
Subject key identifier: 71:D1:A9:B6:E3:42:4A:3B:B5:CF:15:F6:11:95:CF:D9:96:6C:FB:C9
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 0197B6A1B99DDB57CA8A8CB9A554494EEEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0C96
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: CxpId2eZPXWU+2nvSH7CwA3YSGZ1XM4Tjwzq5saT+/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b9:9d:db:57:ca:8a:8c:b9:a5:54:49:4e:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=71d1a9b6e3424a3bb5cf15f61195cfd9966cfbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:c5:ce:21:b1:86:66:f5:38:d3:27:6f:56:
e0:99:a8:87:57:fb:47:00:93:52:83:c1:61:e9:5a:
94:2d:c5:85:8e:47:7e:7e:42:61:94:ca:77:67:48:
c7:95:85:66:c0:b0:10:1a:fe:5a:bf:a9:1c:10:b8:
3b:9a:f8:58:3e:1d:db:25:9f:e1:70:9b:76:98:af:
3e:25:67:71:ab:6f:30:06:e5:4e:7b:2e:47:23:aa:
86:5c:69:8f:91:85:da:64:af:98:f4:57:b2:67:46:
11:65:f7:42:78:65:a0:5d:b5:70:9a:e2:ec:7c:64:
9a:09:87:7c:bf:d5:44:8e:87:f2:3e:fa:ed:8d:c8:
6d:8d:8e:92:f3:1b:dd:2f:9a:9a:c6:89:cc:14:6c:
c5:d8:11:06:87:f4:58:2e:a1:ae:14:5b:69:c5:6c:
0e:8b:81:33:5a:8a:c5:5f:c2:8a:5b:33:2f:2e:1d:
95:ae:84:b9:bc:b1:9f:c8:ae:c7:36:f8:9f:4b:58:
77:8f:c8:d2:25:98:f4:0b:b5:22:83:2c:a4:a4:16:
3d:54:d3:31:54:2a:be:6e:75:bf:4b:a8:48:13:e2:
08:a0:03:c3:33:9e:13:fd:05:5a:45:fc:70:ca:61:
3f:6d:c5:c2:65:e4:dd:44:b7:29:da:47:11:a1:03:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:A9:B6:E3:42:4A:3B:B5:CF:15:F6:11:95:CF:D9:96:6C:FB:C9
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:07:51:15:bf:27:67:f2:c4:ac:be:57:82:ac:91:09:b1:e6:
5a:09:38:0a:68:ff:1d:76:71:a7:11:0e:b2:49:83:e2:5d:32:
f7:f3:1a:e1:59:5b:04:a6:67:f5:74:f1:0a:cc:93:20:a2:74:
84:dd:9b:f0:d8:8f:06:dc:82:4b:e5:68:0b:40:74:53:ae:3d:
eb:2e:09:c3:03:29:c0:54:94:d6:9e:3f:8c:15:c0:b0:e9:c8:
13:a2:11:75:7a:16:9d:8a:05:fb:a1:8f:04:fd:5e:83:dd:56:
57:d8:7c:f2:45:c7:6d:0d:c3:58:6c:a6:21:1e:64:92:2e:a8:
2d:12:b7:cb:9c:aa:52:b0:77:dd:ed:40:44:48:a6:cb:eb:e6:
2a:86:5b:7d:01:ae:d0:87:94:34:ef:ca:0a:58:08:1d:2b:5d:
ae:b1:0e:2d:26:ff:27:ef:ec:30:1d:cc:00:32:d5:27:8b:da:
2d:97:eb:7b:bf:73:db:39:02:83:f2:9a:85:e1:c5:1d:55:62:
36:fa:d7:df:ca:3a:35:bd:ca:7c:b5:e1:9b:a8:61:b9:9c:8b:
50:3d:1b:cd:ce:01:75:55:9e:33:a6:24:82:77:90:a9:aa:77:
af:d7:78:c8:00:84:90:0f:0a:30:15:7d:95:a3:c2:3d:3b:a4:
9e:f3:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client