
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: k0yzt/eu/6ePwiIq1HU0NI/hBpy46Ug50TGwqfHzWhc=
Subject key identifier: B5:B9:33:41:11:B1:05:16:83:E7:42:29:F0:56:07:01:81:4A:4D:4E
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 01984AAEFF71F80E80A808273655182348B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0B66
Signing time: Sun 27 Jul 2025 07:00:39 +0000
Manifest this update: Sun 27 Jul 2025 07:00:39 +0000
Manifest next update: Mon 28 Jul 2025 07:00:39 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: //1nL/WWbguZbd4K0TBhCd9bdDPLbUg4fWj+vXSYDj4=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ff:71:f8:0e:80:a8:08:27:36:55:18:23:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Jul 27 07:00:39 2025 GMT
Not After : Jul 28 07:00:39 2025 GMT
Subject: CN=b5b9334111b1051683e74229f0560701814a4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:e4:85:c5:57:57:4c:7d:4b:83:f4:bc:d0:
c1:be:8c:47:96:22:d1:f6:f3:00:b7:85:f2:1e:21:
c3:14:91:bb:e3:0d:ee:8d:ca:b2:0f:33:b0:17:57:
2c:41:02:96:84:54:3e:4a:07:10:1b:05:ce:70:2d:
f2:62:01:fa:c8:db:41:96:5f:a7:3a:a8:c4:b5:54:
fc:95:96:24:d3:f7:79:c1:47:85:24:ca:9c:74:74:
6d:7a:81:87:06:ba:4d:e4:29:c8:9b:a5:3b:9a:ca:
d9:d2:34:fc:88:82:df:c1:97:c8:1d:6f:a9:05:e2:
0a:0d:fd:42:cf:f6:0a:fd:ec:a2:b6:77:3f:cb:38:
d0:75:bd:fa:3a:3d:0c:b4:20:68:5c:35:ce:74:3d:
c9:3d:b7:c2:cf:19:05:8c:1a:10:4f:39:ff:69:f0:
61:f4:8f:9f:21:25:6e:74:49:c5:92:86:dc:b8:1e:
f1:38:30:67:d5:eb:c7:8b:ab:d7:0c:1b:fe:b0:45:
49:dc:5d:36:91:6e:15:fe:11:a9:ae:ab:1e:7e:ff:
cb:be:fa:7b:aa:ab:95:1d:bc:ea:97:d5:90:c3:fd:
cb:95:9d:e9:f0:af:d6:8c:e8:b6:b0:92:cc:6a:b5:
96:a4:9c:cc:e3:93:65:61:34:5d:6c:ab:2f:d9:d4:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B9:33:41:11:B1:05:16:83:E7:42:29:F0:56:07:01:81:4A:4D:4E
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4b:bb:c6:16:60:c6:37:ac:e4:a6:9a:ef:d7:cf:a1:b9:b5:
76:54:fe:b2:66:3e:bd:7b:e7:61:1e:1a:32:4e:aa:b0:6f:85:
3b:45:03:9a:22:71:2b:dc:8d:66:e8:ea:e4:2d:61:3b:9d:62:
62:9a:77:a9:2b:c3:ec:3c:42:87:b8:f6:b3:bf:69:6e:39:cb:
d2:70:98:04:e0:ac:4d:6d:16:32:ef:fe:fa:b1:eb:c4:07:a3:
64:fc:2a:ee:8f:24:b6:fa:c7:5e:20:99:c8:cd:ea:65:54:79:
cd:7a:0d:4b:ac:bc:05:00:cc:3f:07:32:52:9c:e0:a7:84:77:
90:ae:cb:5b:cb:55:e1:cc:12:c3:5f:dd:2e:bb:6d:35:e4:20:
1c:5c:f3:3a:92:8c:46:d8:d9:bd:b6:ad:12:44:86:45:75:94:
82:fe:94:30:57:a2:45:d1:a6:61:f0:d8:3a:b4:8d:9a:27:6f:
8f:25:07:a5:be:f5:e1:2a:8a:8e:b4:4d:1c:d1:2b:ba:a8:1f:
82:eb:9c:9c:bf:32:44:c4:57:62:af:2b:07:d2:50:3c:70:45:
96:2f:14:ea:78:39:dd:55:98:99:c1:86:47:97:c8:2e:4f:d8:
5c:ed:0e:8d:06:b9:2d:45:9e:6c:7b:54:71:e4:97:51:8a:cd:
5d:3a:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:45 2025 by rpki-client