Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier: CLkALwTcZzOteHqjy+xlaF7mQrpeqJU6rx0h4CaFdrM=
Subject key identifier: 69:36:3E:42:F0:C0:83:E1:08:80:4A:9B:2A:4C:38:F1:27:F0:CE:C8
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 0198D5F1BC816A05D2387859AA93DD380CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number: 0DD1
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: 20H8eXENiKSEx5QAbBO/iZDvoCSBcIRjthi3BEW5Wk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bc:81:6a:05:d2:38:78:59:aa:93:dd:38:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=69363e42f0c083e108804a9b2a4c38f127f0cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:78:2a:88:4c:92:54:5f:54:15:b2:c1:3a:
0c:b2:23:88:40:70:8f:be:ba:e6:19:45:f2:a9:04:
55:31:91:a4:56:e7:f2:f6:d8:cb:fb:72:82:d0:bc:
83:58:10:2b:e3:0a:9a:55:4b:7b:67:ca:42:1c:9d:
f9:4a:a4:55:4b:39:36:e7:dd:2e:10:e1:0e:46:56:
be:6c:97:b4:df:ef:22:e5:0b:72:16:ee:b9:e9:5f:
54:f3:96:9b:f5:19:7b:37:e8:bc:a6:8c:07:25:20:
34:33:15:f2:bf:f5:00:0d:95:cd:d2:1d:0f:66:64:
89:1b:6c:a2:3f:04:15:4f:5e:46:c2:08:b6:01:22:
b7:82:3b:d1:01:96:56:f3:90:e0:f6:ba:e8:e6:85:
60:c7:02:7a:32:eb:f0:ba:c3:36:ac:92:73:8c:0d:
b0:01:49:b5:30:96:64:e9:43:8a:6b:a0:99:b4:3f:
e6:48:b8:99:44:24:9a:15:19:0a:5e:67:94:23:ae:
d2:93:02:6a:c9:1d:3e:66:99:64:cd:4c:43:b4:7d:
41:40:b9:ce:91:f1:c3:6d:0e:d7:e6:ee:49:e7:12:
05:46:39:95:42:3f:5d:7c:69:06:e3:d2:e1:be:a3:
68:e7:d7:cb:63:8e:62:f9:0d:8e:8b:34:a3:43:83:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:3E:42:F0:C0:83:E1:08:80:4A:9B:2A:4C:38:F1:27:F0:CE:C8
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:7e:51:38:51:b6:77:a1:c3:9b:64:d1:0a:65:e0:e1:eb:
5c:6b:e7:17:f9:52:ca:ba:40:73:08:ba:51:df:43:cf:5d:72:
c2:45:ce:15:ba:84:cd:e9:db:7c:be:04:ab:1f:70:ac:6d:02:
42:4a:e6:f6:53:69:a3:5e:44:e7:8b:cf:da:fe:a7:01:fb:73:
5e:ff:57:55:0c:3e:3f:ad:34:73:3b:9f:f2:28:fe:91:70:9d:
a2:51:96:35:18:0e:2f:8f:6e:4c:8c:ce:37:ca:4a:49:d1:a0:
df:d9:11:2d:2b:99:c5:07:96:1f:e9:43:cc:8a:c9:b9:09:e5:
a2:f4:cc:3d:21:32:27:dd:c3:4c:88:5c:d7:52:4a:ce:9a:50:
88:ab:7d:c5:74:2d:9e:c0:bd:6f:05:44:b0:45:3f:2e:5b:e7:
bc:3f:8e:2b:83:2d:ab:cb:9b:bd:01:a2:bc:ff:f9:58:73:2f:
83:4f:99:ea:38:2b:fa:5a:40:f9:80:be:c5:7b:aa:66:7b:80:
99:ea:84:15:5d:25:55:0e:1c:a5:9b:c5:f5:49:f8:e7:ca:d5:
ae:fe:66:01:5b:84:b7:32:14:e9:fd:6e:11:30:9e:5f:59:ef:
ac:34:4a:ab:4a:17:25:aa:55:d0:bc:a6:2b:31:61:04:e1:71:
91:ce:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:17 2025 by rpki-client