Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: 2pDjJwUiXtkZYGUahs5xfsCwAedMWIT3HDBx0M/03ac=
Subject key identifier: 51:FF:A7:78:40:5B:4F:CE:50:31:AF:1F:89:66:AC:5B:49:95:14:DE
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 01984A09C5149D4D34A15AF0BCB109FD98B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 01CF
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: XUgWDZg1nBoZE9aLLVsn7aMYCEYl6ktnud9uw65dUUI=)
2: oKSHvOI6a3wBQ4njfGV3S_7Sbkc.roa (hash: zclvRtzWTLzWr7SKBjsrPG4/869JCHe23hkSJVxmGco=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c5:14:9d:4d:34:a1:5a:f0:bc:b1:09:fd:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=51ffa778405b4fce5031af1f8966ac5b499514de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:fc:32:31:3b:b8:08:c3:ec:b4:f7:89:65:
78:10:d5:06:c1:2f:53:b2:86:39:ec:b3:51:88:85:
66:f0:36:27:51:0e:26:0f:fe:55:48:7f:80:5d:d5:
7e:fc:23:c5:9d:36:f6:16:05:c6:77:eb:f2:71:8e:
41:a9:6b:e9:78:af:e8:52:d3:fb:67:30:2f:90:d5:
73:7e:03:87:a8:dd:8f:cb:f6:ce:7b:75:7d:66:c2:
8e:78:a4:95:27:02:2a:65:d5:27:b5:f6:1a:d6:c4:
39:41:57:e7:89:25:5d:8f:3f:4f:55:23:60:bd:ae:
0f:86:a4:2e:29:1b:d8:38:1f:d3:97:9a:7c:cb:de:
2b:ca:b6:2d:dd:5a:dd:bd:4a:a6:31:d3:81:a1:2c:
74:a8:ab:b5:f0:7d:55:7a:dc:c7:d4:e9:ad:86:96:
e0:94:2b:4b:3a:f2:5e:0c:e0:fd:37:31:a8:c9:11:
3c:d1:b1:7c:f6:b9:0b:e7:9d:33:34:1e:d6:d8:6c:
b5:62:a5:65:84:7e:c7:ce:0f:15:ab:ab:2b:5a:f4:
e2:c2:47:56:61:df:01:45:f8:0c:54:9e:e6:64:ba:
a6:d7:38:e2:85:38:b1:2a:b1:ef:96:e6:2b:43:51:
74:08:b1:32:fb:bb:05:f2:19:e5:12:84:94:33:bf:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:A7:78:40:5B:4F:CE:50:31:AF:1F:89:66:AC:5B:49:95:14:DE
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:1e:de:01:73:28:bf:3a:47:7a:69:f7:90:f0:dd:2c:21:
46:af:88:1f:62:9f:e0:b6:57:16:7e:37:33:1e:cc:7f:3e:e8:
c1:7e:f4:62:80:db:5c:63:87:80:ac:40:a2:d7:c3:ab:4e:49:
28:dd:99:b4:30:ee:f5:9c:7c:95:fa:54:90:eb:34:34:33:c1:
b2:5f:77:c9:80:1f:02:53:bd:dc:19:b4:9f:cc:c4:5c:e2:a6:
c3:89:81:e1:81:0d:96:85:42:25:c3:69:29:cd:25:37:5b:f7:
30:e9:a9:fc:fd:04:57:4e:d4:f3:9f:cf:6e:f2:22:e5:5b:a1:
5c:b9:8e:7d:3e:4f:db:b4:72:16:c3:e2:f1:39:10:27:c0:2c:
a8:ab:bc:f0:0b:0b:31:01:ae:66:0a:17:8b:c6:7f:b2:9b:bd:
d8:fd:d5:23:6c:91:31:a6:25:6e:4e:da:08:0d:50:84:da:91:
89:14:8c:4e:50:d2:42:9e:e5:f2:1f:86:9f:43:9d:5f:8d:9b:
12:18:10:47:dc:8a:e1:6e:25:fc:70:78:9e:d4:d6:08:4d:74:
65:96:34:fb:40:28:c5:80:1a:2e:46:7f:5a:bc:4f:af:02:c6:
cb:fa:5d:44:3f:52:c0:c2:1c:f9:35:4c:34:22:79:68:0c:8e:
18:89:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:57 2025 by rpki-client