Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
File: gJXgzG5Kjeis07B8zl6gwEDEf_E.mft (raw, json)
Hash identifier: PA1/pDUh7espMuiKtVzbk4MiToWWA5elSfMavBAo/mQ=
Subject key identifier: 68:78:69:87:E5:0B:1C:63:B2:B6:03:2F:A8:84:80:D1:20:F2:D2:3E
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 0198D4E0B3EFE3DC92A851F012B0C17DC093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: 5BEa602wZYpMxTuh3zw8qo0mrK4.roa (hash: +ORzsbOhqz/jkJrclx5p3HM7N8Z+T1SUhWKkKSdLD+M=)
2: gJXgzG5Kjeis07B8zl6gwEDEf_E.crl (hash: xqky1CxnNY+Zrr1Bm2KargS8wdWTVwO72CFnuHpVpuU=)
3: jWNTJ1FpKEnE4-XV0f-LwaNjgGw.roa (hash: uelleaLEyblsE/O04BBgVrwIcj9C3h4Y81oJVkNhBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b3:ef:e3:dc:92:a8:51:f0:12:b0:c1:7d:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=68786987e50b1c63b2b6032fa88480d120f2d23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:ad:43:22:bd:ec:b9:cc:4f:b7:38:fc:ff:
73:07:73:10:52:a0:29:40:55:83:bd:fb:4a:50:af:
e5:af:8c:e9:4a:cf:42:42:a9:80:45:c4:a8:84:9e:
16:65:f8:a0:63:29:e7:73:39:08:4b:9e:42:ee:0f:
b4:84:80:a1:ae:08:34:20:3e:f1:e2:1f:a3:ba:3e:
0b:ef:02:1d:9d:ad:b8:74:68:f0:74:a5:83:71:c6:
cc:42:fa:6e:90:b7:1c:60:35:ee:16:ac:5f:fb:1a:
44:ef:24:be:50:ba:81:9f:2d:d2:fa:90:0e:d0:d2:
e1:33:10:02:76:9e:03:64:af:9f:94:fa:74:35:4e:
7e:42:01:35:d3:a3:66:ad:7f:b2:4d:14:c0:29:50:
82:cc:cd:c0:a9:d5:fa:60:28:f5:af:8e:58:f2:44:
f7:c7:d9:16:e0:e6:66:bf:84:19:c3:a1:00:3f:d3:
67:cd:91:32:71:79:98:54:97:d3:6b:10:5c:2c:8a:
34:91:ff:53:83:3b:a8:2a:50:90:8e:47:1c:c9:57:
20:35:ee:62:ed:bd:66:bc:07:29:26:b1:69:41:a7:
e8:e0:99:82:de:e9:be:b4:b3:68:fd:41:36:66:9d:
db:cb:57:5a:5c:6c:29:47:44:a2:0d:97:49:81:42:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:69:87:E5:0B:1C:63:B2:B6:03:2F:A8:84:80:D1:20:F2:D2:3E
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c7:9e:f9:e4:64:0c:6d:7a:44:9d:bb:1c:9b:3c:37:f1:8c:
1a:21:3e:90:d7:e3:ed:eb:12:76:98:e1:2d:34:dc:2f:c8:e9:
e7:d2:60:8b:bc:b1:5f:93:32:1e:61:fa:9b:e7:6f:cb:e4:dc:
87:59:66:33:77:75:75:29:75:73:21:57:92:ac:9a:44:65:d9:
9d:54:d2:c7:10:6b:09:c9:ed:61:68:a6:b6:81:f1:1e:6c:c2:
5c:56:01:30:0b:73:3b:87:24:d0:9e:99:8b:15:ad:05:6b:05:
c2:c8:c5:7b:7f:3b:2a:be:c7:56:f0:49:d5:b1:aa:57:c4:2d:
3d:83:24:78:42:8e:63:5a:d0:a3:cb:f3:e7:e2:e2:ef:4e:3b:
18:33:4a:25:75:55:f1:3a:c2:7a:d9:48:d4:64:69:56:5a:cd:
24:8d:9d:cc:ad:b3:1d:20:5f:7a:27:ae:a6:b8:c0:5d:fd:f2:
73:2b:ff:f4:22:a1:9a:a6:23:57:d7:ed:70:7c:c9:75:78:8c:
f3:a7:79:aa:a4:23:48:4c:7c:6f:aa:9d:64:0d:91:8e:37:4f:
a7:c5:e2:9b:26:47:ed:38:74:41:0b:c5:57:73:1d:8d:f7:5b:
fa:b0:45:3c:2c:3e:c6:8f:95:cb:11:a3:48:26:50:39:95:52:
ab:f1:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:01 2025 by rpki-client