Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
File: gNZ6hECc7boCLusDW9itYg1oPqc.mft (raw, json)
Hash identifier: 3MfDVYfAhjnT2R1I83yLTDvW7vypS598WcIq/QQuDGs=
Subject key identifier: 58:BD:62:F6:ED:83:C3:0E:54:47:76:74:8B:D2:40:51:AA:51:EF:98
Authority key identifier: 80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
Certificate issuer: /CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Certificate serial: 01984965AE8C4A88A18A12A40B0C2B655FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
Manifest number: 1596
Signing time: Sun 27 Jul 2025 01:00:57 +0000
Manifest this update: Sun 27 Jul 2025 01:00:57 +0000
Manifest next update: Mon 28 Jul 2025 01:00:57 +0000
Files and hashes: 1: HckIWldHWwqX0CJ7X-XU88JAoY8.roa (hash: 0kYehz1g3idStzqPQ6DNbC0IwoRnTc8QtqRoQ8JJZs8=)
2: gNZ6hECc7boCLusDW9itYg1oPqc.crl (hash: UlVQ+CHW7BiRqIlGt/mbzDjGYCJPKMOZy7ksOSsVlM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ae:8c:4a:88:a1:8a:12:a4:0b:0c:2b:65:5f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d67a84409cedba022eeb035bd8ad620d683ea7
Validity
Not Before: Jul 27 01:00:57 2025 GMT
Not After : Jul 28 01:00:57 2025 GMT
Subject: CN=58bd62f6ed83c30e544776748bd24051aa51ef98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:0d:24:fa:87:25:37:35:60:6d:ef:c3:4d:
5d:a3:a8:bd:d9:2f:a5:5b:a6:04:be:76:ff:6c:8f:
75:1e:fe:17:7f:02:af:0a:3b:c8:0d:95:3a:8e:ab:
3d:01:72:13:38:61:14:13:49:eb:65:3b:ab:80:1e:
66:45:b3:40:44:70:7f:78:8e:84:e1:66:dd:fe:ea:
6e:b4:02:f4:e6:a5:9c:07:9f:0c:c7:a5:a0:10:d8:
46:98:24:dd:a2:1d:84:dd:12:15:5b:c8:5a:1d:61:
5c:07:36:57:a3:23:34:67:87:73:b3:cd:ef:d1:be:
72:2e:2f:9a:aa:b0:27:ca:4e:51:9b:dd:e3:cb:8c:
e8:4d:08:57:7e:32:a7:1e:c0:35:ac:18:1b:f1:14:
40:02:96:1a:ed:30:82:2c:0b:78:75:65:d1:ba:22:
87:13:26:e1:cb:43:2f:8d:a7:2e:1d:3e:44:96:45:
c6:91:2c:66:a9:0f:c7:5e:0b:af:cb:64:fb:0c:0c:
a1:63:22:9c:2f:80:fb:f7:c6:5b:1e:f0:52:b0:c0:
13:58:c8:ba:af:06:bc:07:31:83:8e:84:0b:57:11:
8a:ab:85:eb:3a:c1:5b:16:19:41:2f:f5:af:9a:ee:
5a:b5:3c:4f:4a:da:65:f0:45:4e:86:1f:70:3d:c9:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:62:F6:ED:83:C3:0E:54:47:76:74:8B:D2:40:51:AA:51:EF:98
X509v3 Authority Key Identifier:
keyid:80:D6:7A:84:40:9C:ED:BA:02:2E:EB:03:5B:D8:AD:62:0D:68:3E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNZ6hECc7boCLusDW9itYg1oPqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/gNZ6hECc7boCLusDW9itYg1oPqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:16:e3:6d:d2:ef:3f:d3:7a:b8:8a:7b:8d:10:2f:9d:b8:63:
01:42:b9:19:35:6e:49:bd:52:20:1b:90:df:f5:cd:78:f0:37:
14:ac:db:aa:b0:c0:81:c7:07:92:8b:1c:0c:bc:46:ac:80:cc:
68:10:fe:b7:1d:ec:1d:01:e4:ab:1b:47:26:fe:32:22:69:ed:
ce:dd:10:29:46:3a:b0:e4:e7:41:40:ba:b3:9c:0b:22:a5:22:
c7:73:be:25:46:9f:12:61:2e:14:9f:e7:e7:81:be:a4:62:36:
b2:eb:13:66:63:9b:b9:ad:10:f9:52:40:33:49:9c:4a:d5:69:
c1:26:1f:27:15:e7:2a:6f:ad:2c:70:7f:b8:a1:10:6f:ba:11:
15:45:f2:a2:57:5c:16:85:0c:26:72:ba:3f:58:b7:f6:e5:62:
d1:bd:ed:9e:16:38:87:89:f1:4e:30:8f:a2:e8:79:94:a9:0e:
20:a9:32:ce:57:55:9e:b5:2c:1c:10:b7:d6:15:2d:ff:1e:3b:
a3:2e:88:54:6c:81:ac:b9:1b:d8:9d:fe:e9:7f:b7:19:b7:ad:
f0:2c:4a:7f:f5:6c:5e:c9:81:53:de:70:e2:5f:97:66:d9:73:
f1:fb:25:cc:aa:9c:56:d5:5a:0c:32:a5:20:a6:2c:37:7c:22:
f9:ca:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:37 2025 by rpki-client