Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: ZkHU9yajeK6vzX2uT7D/EP/WEwBiS02wdDyfIK8fWUE=
Subject key identifier: 42:D9:B2:FB:07:22:41:0A:E4:7A:B2:5E:4E:94:2B:C6:0C:33:04:38
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0198375EC1053BBBC2AAA7566B62CAC5DAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0D28
Signing time: Wed 23 Jul 2025 13:00:13 +0000
Manifest this update: Wed 23 Jul 2025 13:00:13 +0000
Manifest next update: Thu 24 Jul 2025 13:00:13 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: b5nCxlFCnetZgoqkQesISmqEUK4pUEgE5l/aKqesLBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:5e:c1:05:3b:bb:c2:aa:a7:56:6b:62:ca:c5:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jul 23 13:00:13 2025 GMT
Not After : Jul 24 13:00:13 2025 GMT
Subject: CN=42d9b2fb0722410ae47ab25e4e942bc60c330438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:28:35:42:78:f0:ea:15:eb:34:94:2c:49:
eb:71:c1:ad:63:94:12:be:f6:aa:e3:fa:e8:f6:7a:
5e:9c:8a:29:3e:aa:7f:4a:92:a2:4f:9a:8b:f4:dc:
2e:4e:c3:50:39:eb:5d:46:f5:38:53:21:69:82:05:
f2:43:26:46:39:6c:e6:63:56:21:4a:0d:47:ac:c7:
27:fa:66:22:2a:89:48:84:19:44:ad:1b:8c:2d:13:
24:7a:2a:4e:bf:46:d7:bb:63:4a:a4:12:39:1f:b3:
5e:b0:c6:25:e3:bd:6e:21:8e:67:19:80:c5:4f:a6:
98:fb:31:b5:cc:e5:ab:7b:3e:75:74:a5:93:c5:4f:
64:55:dc:a0:21:bf:1e:3a:65:84:b0:bc:fe:ad:05:
d3:1d:8c:4e:b5:19:e7:30:21:0d:eb:84:21:ff:3e:
a6:d0:a7:2e:8b:1f:d0:cf:1e:07:99:7e:b3:87:ea:
de:9e:cb:ba:9e:3b:cb:7f:9e:b4:1e:90:b5:14:58:
8b:68:a8:e1:b0:a9:16:f8:ee:f2:58:da:96:1a:d2:
38:db:57:62:39:f5:d3:44:05:42:da:01:aa:51:b8:
3a:b6:ef:36:77:09:1e:95:79:45:0b:3c:1a:d5:c8:
12:c7:b3:90:96:7b:76:0a:2f:dd:0d:ab:39:6d:68:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:B2:FB:07:22:41:0A:E4:7A:B2:5E:4E:94:2B:C6:0C:33:04:38
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:c6:0a:a2:0d:76:66:2c:7f:d2:26:60:6e:6a:ca:5e:bf:
13:14:14:8e:55:b4:54:87:d3:0e:b4:12:af:d6:6a:1b:f2:26:
a4:a9:2e:b3:ad:9e:00:ff:88:00:d0:00:98:01:6a:0b:03:20:
67:b4:40:9c:74:b2:77:70:db:4b:22:d4:a2:3d:9b:aa:7f:04:
a6:30:92:23:4b:d3:1f:cd:4b:8a:8e:3d:d7:96:51:35:f5:41:
c5:78:99:db:34:ec:0c:46:b0:e4:fa:8f:e7:84:22:66:e3:a2:
e4:e2:ba:77:eb:98:58:71:c8:49:dd:76:52:7a:80:43:b7:e8:
0f:ec:1b:0e:28:a0:e0:09:8d:36:09:89:a3:0f:15:6c:87:3d:
45:4b:4a:a7:18:f1:c4:ef:88:0d:2e:8f:98:dd:d6:c3:fa:db:
d7:1c:cc:0c:d9:e5:8f:48:50:c2:4b:c7:d7:bb:f1:17:ee:2f:
20:ab:20:f0:51:a7:63:e5:09:15:65:72:7e:b7:79:99:68:71:
10:cc:de:f8:a7:32:76:3b:d7:27:e1:e1:73:45:b3:ce:ee:ec:
ce:58:f5:e1:d3:de:2e:c4:cf:09:d9:2d:9f:de:67:ee:df:0b:
24:6a:1d:f8:a2:9b:17:44:43:f3:4a:88:ce:99:9e:19:90:40:
cc:d6:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:54 2025 by rpki-client