Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier: rPrS1d2YSz8W11nyYZZhpQ8Jr2VZJ/EmUWYRzQxKyI4=
Subject key identifier: 38:24:D0:B6:D2:04:3C:21:6C:6F:E1:86:34:B4:D1:BE:80:66:B2:5F
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0198469B0AB0C3934D470B8934834274DB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 12:00:22 +0000
Manifest this update: Sat 26 Jul 2025 12:00:22 +0000
Manifest next update: Sun 27 Jul 2025 12:00:22 +0000
Files and hashes: 1: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (hash: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=)
2: FaVvxalLzbpJd7lGg-gIZ4RSuqw.roa (hash: Vq9OXxCy4cXw387lqVrsEZN9rZ1lStx9VD3OgQ3YBXs=)
3: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: TjnqSCe5eMNKPojwphgFr6x18nm/YLXMkmvkERba3MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:0a:b0:c3:93:4d:47:0b:89:34:83:42:74:db:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jul 26 12:00:22 2025 GMT
Not After : Jul 27 12:00:22 2025 GMT
Subject: CN=3824d0b6d2043c216c6fe18634b4d1be8066b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:5d:04:9f:9a:7c:4c:f2:30:d5:a2:b5:42:
e8:21:4c:07:23:1e:d4:4b:44:98:5f:bd:0f:0d:b6:
1a:00:2c:24:1f:a4:48:7d:ce:b5:e7:6f:4d:d9:24:
d2:c6:25:45:0d:e5:c8:9c:2e:94:0d:5c:c3:90:06:
f9:cf:bf:d2:04:d8:cf:90:65:61:4a:c0:84:e4:99:
86:61:43:3a:44:58:41:28:bb:7d:37:3e:77:fb:15:
7e:99:58:8e:72:ba:9e:bb:75:9d:df:ea:d7:88:54:
73:fd:ad:1d:7c:13:83:0f:39:37:3c:7e:22:70:99:
12:1f:db:14:f3:85:3e:be:67:6f:8a:e0:a3:59:b6:
5a:ba:7a:17:da:e2:bc:36:7d:5c:5d:57:08:3f:2c:
46:df:d2:b9:f0:43:21:0c:35:3d:9a:2b:da:b5:51:
1a:e8:ab:43:e3:9d:4d:34:20:a3:b5:69:1a:a9:a5:
ef:fa:54:0b:d5:cf:28:4b:88:61:0c:0d:4a:f5:1b:
3e:24:d8:44:fb:bd:19:24:70:45:31:fe:cc:be:c4:
ae:3e:7b:79:0a:15:5b:1a:32:cc:5a:91:36:10:c5:
0e:2b:8e:09:cc:50:b1:bf:a0:88:bc:38:32:cb:41:
3e:5f:7b:de:84:10:b0:5b:d6:87:76:67:36:29:7f:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:D0:B6:D2:04:3C:21:6C:6F:E1:86:34:B4:D1:BE:80:66:B2:5F
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:38:a9:a3:4c:5a:5f:17:fe:07:af:19:ef:0c:79:15:80:c1:
5f:1d:10:fb:65:ad:c1:a1:76:71:9e:95:35:c0:f9:21:79:0f:
d1:5a:fb:c9:ba:00:9c:cc:26:d3:3c:b7:fd:45:8c:b7:de:11:
91:f9:c0:47:e3:91:26:a9:95:ff:ec:2e:35:bb:bb:c1:2b:7e:
be:2c:e4:e1:16:2c:e5:89:b7:b3:9a:68:c8:50:00:5f:16:e7:
30:03:cf:da:a3:b6:0e:14:5a:41:04:cd:c6:60:ef:e2:4d:97:
6b:b5:e9:5e:d7:2e:8c:f4:7d:3a:ef:94:25:43:69:ea:ee:3b:
eb:0d:a3:16:2b:d2:f3:76:7a:c7:47:52:47:d5:59:b3:35:9e:
c8:81:45:a3:b8:7b:4a:f5:55:60:65:8f:2a:36:1d:69:42:29:
b4:f2:a3:73:ab:76:64:2f:7e:57:f1:f1:98:e5:7e:85:56:90:
ca:35:e0:03:4c:24:88:24:77:80:ed:4b:86:0b:92:b1:dc:7c:
79:fb:62:83:b0:25:93:8a:90:71:a3:8b:90:80:38:e3:a6:ef:
ef:1b:45:5e:27:2f:1a:c1:ce:88:6d:34:f8:bc:f5:f3:92:40:
07:f2:75:be:7b:41:b8:a7:ca:39:92:b5:4c:cc:e1:f5:0a:78:
4c:d9:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:50 2025 by rpki-client