Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: lBHoETV6F0NlACoymP/RCUHxTKHs1nmfn/oNhCaEeYE=
Subject key identifier: FD:05:42:5B:2C:30:00:14:80:FA:7B:EE:0D:3B:25:3C:72:C2:27:C4
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 0198D773BEC4FE982BB8027297701CEACAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0A1D
Signing time: Sat 23 Aug 2025 15:02:23 +0000
Manifest this update: Sat 23 Aug 2025 15:02:23 +0000
Manifest next update: Sun 24 Aug 2025 15:02:23 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: Y3RyucQrU7XW+Uua6gBswUfwHfrE89JvepjU2IUHt0E=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:be:c4:fe:98:2b:b8:02:72:97:70:1c:ea:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Aug 23 15:02:23 2025 GMT
Not After : Aug 24 15:02:23 2025 GMT
Subject: CN=fd05425b2c30001480fa7bee0d3b253c72c227c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:55:b2:d7:6a:bb:2d:35:30:7d:dd:23:17:
3a:ee:67:9d:02:bd:7c:02:6c:fb:c0:88:ed:58:45:
0b:41:d0:3f:c3:7e:7e:29:86:47:33:3f:b5:f4:5c:
76:a9:ba:73:a8:69:0d:24:10:31:e8:8a:61:0d:ea:
62:0e:9d:e6:2c:fb:38:f8:6e:40:9d:c3:e7:ba:9e:
b1:91:7e:28:de:27:2c:21:bf:3a:c8:8d:24:0d:3f:
89:e3:95:a3:09:cb:49:80:f8:8f:fd:4a:a3:7b:ed:
73:c6:a1:5b:95:d2:0d:bc:81:40:9a:77:a5:3e:73:
9b:96:08:4e:45:2a:15:43:b9:46:c8:bd:b9:e8:87:
57:43:0c:81:fc:11:58:ef:74:cc:b3:3d:5e:0a:0b:
da:37:21:7d:9c:3a:96:a0:4f:93:a5:02:b8:38:5b:
44:27:35:c0:c3:d6:f5:06:9c:d6:f2:d7:93:4c:76:
8f:32:f6:02:bd:15:d0:f9:67:52:48:cb:09:69:ab:
e1:7d:68:e9:82:d2:ad:30:73:b8:b6:38:f1:f8:7f:
e0:73:e0:78:bc:11:73:f9:3d:e8:63:13:4d:af:a8:
87:62:86:96:39:27:62:66:87:8d:f4:21:3c:2d:5a:
c5:5c:07:1c:82:a8:cb:24:dd:3d:fd:92:50:99:12:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:42:5B:2C:30:00:14:80:FA:7B:EE:0D:3B:25:3C:72:C2:27:C4
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3c:ee:9d:78:66:fe:03:fd:bb:01:a7:af:61:3b:a3:11:2b:
15:35:10:42:47:c8:c4:ab:6f:10:6c:45:bf:fd:94:d3:47:26:
be:25:39:77:1d:23:b1:ee:75:92:b7:fc:76:0e:17:19:fc:a7:
0b:43:db:3e:a2:06:8e:1a:11:01:9e:de:7c:87:6d:9f:ab:07:
47:bc:10:b8:02:cf:fd:cb:1a:e8:b7:fa:a6:e4:be:4b:52:9f:
e2:ff:0b:a3:b6:5b:c9:46:c4:89:2f:2c:52:c8:a4:f1:a6:e0:
17:4e:31:0d:5d:0d:bb:62:f6:a7:0a:f7:08:97:e6:be:48:81:
8a:6d:d3:5e:b4:28:53:15:6a:94:c2:5b:fe:45:63:ce:58:90:
63:53:c3:66:8e:0b:93:29:28:16:8c:59:7f:f8:77:80:ef:0d:
1c:95:fb:65:f7:26:8a:22:92:7e:bb:7e:94:78:f7:f0:ad:3b:
32:f2:a8:82:a7:ba:ca:be:5b:3b:7a:9e:10:5e:05:80:5c:bd:
f9:d3:5c:b1:03:25:eb:42:6e:79:50:1b:d6:22:dd:de:42:56:
de:96:c1:88:e0:48:cf:fc:cc:26:fb:bb:9a:0a:18:98:77:c9:
4f:e7:9a:97:78:ca:35:44:fa:57:8c:6f:94:c9:de:ad:da:d3:
44:2d:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:44 2025 by rpki-client