Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: 8uLAY+LIq7sbyosvR7SAbkPfJaUAHK1Z5uFoJTgrK38=
Subject key identifier: 32:79:A0:C7:BD:9B:D7:AC:CE:D9:48:6C:FB:3C:07:2A:B9:82:55:9A
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01984966E41297D61D2EF79FAFA477F8FB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 075C
Signing time: Sun 27 Jul 2025 01:02:16 +0000
Manifest this update: Sun 27 Jul 2025 01:02:16 +0000
Manifest next update: Mon 28 Jul 2025 01:02:16 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: jo5YEE43/EFTq0UzjMGT2mddg77piDF3AXAcVgJZ0sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:e4:12:97:d6:1d:2e:f7:9f:af:a4:77:f8:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jul 27 01:02:16 2025 GMT
Not After : Jul 28 01:02:16 2025 GMT
Subject: CN=3279a0c7bd9bd7acced9486cfb3c072ab982559a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:fb:00:ad:11:a1:e1:d6:b5:b8:b0:0f:84:
76:9e:29:77:ab:fe:99:73:a5:c3:85:91:50:e9:93:
3e:6e:5d:47:d6:97:1a:60:75:89:4a:63:ac:d5:a8:
1a:0f:e0:30:bb:8c:33:f4:91:2b:89:e1:bf:48:c0:
e7:d4:50:b0:12:88:1d:ee:0e:4b:57:e6:1c:26:fc:
c5:8d:8f:d8:0a:f3:0e:e6:a0:08:fa:4d:37:45:74:
c2:db:45:80:a9:34:07:f3:12:93:42:63:c9:8c:23:
f7:11:2e:19:f0:bb:74:9f:43:9e:22:3d:e8:00:c7:
bb:66:03:c9:ec:24:f8:d8:36:65:6d:56:74:f2:dd:
4d:c9:c0:24:c6:9e:fd:3b:20:91:e8:21:20:64:9d:
7c:68:17:5e:db:c3:71:3e:98:a5:7e:ef:8e:0e:33:
87:76:66:af:5a:47:22:df:8d:1e:e4:19:36:2b:63:
f0:0c:cf:27:8b:84:fc:3a:b2:e8:69:1b:08:72:16:
60:28:32:68:97:b9:92:38:a7:1a:fb:0b:cb:0a:58:
89:35:cc:cb:be:cf:2d:78:0f:8c:8e:ee:00:db:ad:
aa:14:d0:b0:d2:8d:8d:af:ea:df:eb:e2:2c:63:2c:
b6:7b:f8:87:90:b9:3d:77:b2:a0:bf:35:57:12:9f:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:A0:C7:BD:9B:D7:AC:CE:D9:48:6C:FB:3C:07:2A:B9:82:55:9A
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e0:d3:14:af:22:d9:59:e2:ab:3b:00:fe:7d:6b:d2:5b:74:
c6:12:10:86:b9:1c:e2:d4:1e:5f:ae:ba:aa:2b:97:ae:b7:4f:
ab:2a:bb:6a:d0:46:4d:73:ea:41:65:49:ec:b6:99:05:8b:d8:
29:6d:23:a2:ce:48:0f:b4:5c:33:d2:28:19:5a:57:d7:77:5f:
bf:4c:6d:33:df:be:fe:d8:ae:bf:b0:c3:82:cb:62:c1:a9:8c:
93:44:97:7f:d4:70:f0:14:84:c2:ac:97:df:7c:fb:10:56:83:
e5:99:54:59:0e:54:98:b6:9b:65:fd:81:7b:ed:b7:cf:03:a6:
6f:5f:a3:6d:40:9e:a6:dc:73:29:e4:df:44:d5:25:92:e6:b9:
69:5b:35:e6:cd:02:9c:c4:2e:63:14:d6:00:f7:32:e2:0d:cf:
83:3d:51:f2:5d:b7:d9:e8:78:ec:f2:65:6c:2d:0d:01:07:21:
4b:0c:e4:dc:00:3b:d2:ce:cb:fc:12:6c:29:9c:cb:c4:61:fa:
e1:92:76:5b:52:e2:0d:0a:53:b7:a1:25:b6:32:03:ed:50:09:
72:cb:b6:8c:5a:fe:c3:e6:e8:1c:6a:22:aa:87:9e:88:d0:77:
4e:46:b5:69:0a:d3:58:17:64:23:5b:c6:45:1f:2e:cf:9c:ec:
3a:02:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:47 2025 by rpki-client