Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: gKYNnFgjpYWUh5wCxdUI6mWAamdpE27NWu9NrZsP/7s=
Subject key identifier: 80:C8:A9:F8:E0:C1:88:ED:2E:0A:84:3F:43:6C:16:AA:3F:B5:FD:92
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0198469B1A4E97CDD813A19E6ADD816E782E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 12:00:26 +0000
Manifest this update: Sat 26 Jul 2025 12:00:26 +0000
Manifest next update: Sun 27 Jul 2025 12:00:26 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: NFtihovK0tQXKaMa6GQctFP13WFrm9Kr//Z8AXXd/gE=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:1a:4e:97:cd:d8:13:a1:9e:6a:dd:81:6e:78:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jul 26 12:00:26 2025 GMT
Not After : Jul 27 12:00:26 2025 GMT
Subject: CN=80c8a9f8e0c188ed2e0a843f436c16aa3fb5fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:15:46:e0:ed:f7:e5:ee:56:b2:3e:ae:02:a0:
8a:ef:1a:7e:29:75:47:3a:37:77:a2:9b:1f:71:1a:
33:94:4b:49:2f:5a:42:18:c2:5a:cf:12:64:c5:d1:
a3:da:9e:9f:89:f7:d8:9e:6e:05:bb:5d:94:ff:f6:
07:e1:56:d6:b5:a1:1f:d5:3e:ae:d7:24:91:ea:54:
9a:bf:1c:31:ea:a7:5a:87:f3:cc:7a:d1:63:a4:c6:
d1:42:0a:a1:7e:40:56:6c:9c:d4:2e:60:a0:e2:85:
6a:7d:7f:d4:04:a7:67:53:c8:7b:70:ba:f6:13:c4:
60:21:0e:f6:e9:e9:19:1f:1c:48:75:de:78:e9:62:
70:a1:7d:cb:9d:b5:30:3b:c9:0d:19:9c:c5:79:88:
79:a1:ea:19:21:06:fd:07:eb:96:4f:24:d0:34:28:
1c:79:20:f9:bb:1e:b4:33:51:6b:cf:c5:44:04:a6:
77:3c:13:8b:4a:71:d8:4e:7a:35:a0:0b:c4:26:4e:
5a:4f:96:b2:f0:e0:08:49:0c:a4:4b:cd:67:f1:9f:
f6:b8:7b:12:d4:cf:db:94:b1:4c:ea:c5:35:1b:34:
a7:b1:c1:f1:60:c2:59:2d:4e:b2:e6:89:6f:d7:b9:
ed:af:a4:72:29:3f:7f:32:09:5c:e6:f1:ef:5d:bb:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C8:A9:F8:E0:C1:88:ED:2E:0A:84:3F:43:6C:16:AA:3F:B5:FD:92
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:b7:4c:ab:37:b3:d9:77:88:4b:ee:13:8e:c4:9d:34:20:
87:05:74:17:a2:3d:e2:1e:06:83:55:a6:02:08:1a:9a:91:bf:
b7:a5:35:0d:e1:c9:6b:9d:95:d0:1a:69:08:4a:ba:2a:79:3b:
d7:ad:dc:e7:bc:03:40:94:de:b1:72:01:aa:99:90:dc:f9:90:
a6:c0:4a:4d:e2:42:78:6e:2f:82:ee:62:e3:fd:c3:6c:1f:fe:
87:72:66:1d:63:52:25:4a:d3:a4:6a:0d:17:80:b6:af:fa:fc:
ec:58:19:04:71:f4:06:b0:c1:88:b9:80:db:b7:23:8e:8c:35:
5c:51:f4:9d:15:e7:57:43:05:ec:04:5d:be:c3:45:54:62:5a:
d2:86:7d:bd:b2:9c:1e:2a:85:4d:49:7f:33:5f:2f:dd:86:7e:
ef:ee:81:41:01:48:2b:ef:4f:70:5d:b7:7a:a7:4f:a2:61:24:
74:b1:97:2a:9c:e6:e3:57:93:c5:99:e7:3d:6b:9a:d4:81:63:
e4:1e:78:94:fa:4d:d8:ee:a1:f4:99:70:36:28:7d:8d:e4:0d:
23:16:8c:16:2c:64:cd:06:25:0d:4b:24:0a:63:15:2d:75:45:
2a:bd:ee:32:bf:e3:e2:51:8c:e1:94:c5:04:70:fb:1f:53:53:
7b:37:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:48:09 2025 by rpki-client