Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File: gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier: Y3PN1N+tjVyI4NU0NvolSkutuNUigunidt/Jw/esfbo=
Subject key identifier: E8:D0:1D:E5:E9:05:B1:14:BF:1F:70:15:02:71:02:0B:94:5C:BD:0E
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer: /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial: 019848C0836963B8EE0599715829DA879B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 22:00:32 +0000
Manifest this update: Sat 26 Jul 2025 22:00:32 +0000
Manifest next update: Sun 27 Jul 2025 22:00:32 +0000
Files and hashes: 1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: RAxS+bWrTye6fkX8zcUC+SRxh9h64fKG/arQ9fI8h5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:83:69:63:b8:ee:05:99:71:58:29:da:87:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Validity
Not Before: Jul 26 22:00:32 2025 GMT
Not After : Jul 27 22:00:32 2025 GMT
Subject: CN=e8d01de5e905b114bf1f70150271020b945cbd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:b0:6b:06:34:39:bc:70:6b:be:dc:1c:35:
6a:02:99:0d:b3:b0:db:1f:fa:02:52:0a:51:7a:b0:
a2:f8:35:2d:28:ee:e1:dc:a8:79:6b:1b:94:66:52:
88:e5:49:b9:a5:33:cd:eb:3b:4a:c1:5c:a3:a3:03:
66:df:b4:2f:dc:10:c1:f2:58:76:d0:9f:0f:25:45:
73:f5:ee:32:79:48:80:0f:e4:a4:d8:aa:c1:60:a2:
58:c9:37:47:13:b3:1b:ff:f0:c5:15:4a:e1:a0:19:
cb:a2:14:1f:53:72:78:16:6d:94:70:1d:7e:3d:4a:
c9:1d:ba:01:e4:2a:1a:fa:58:b0:e3:1b:84:04:c7:
e1:64:ef:2d:88:15:60:e1:3e:5b:b4:8f:cf:c2:fd:
6c:a2:28:2b:49:5b:54:93:5e:92:b2:64:84:eb:0b:
83:c4:43:b4:2b:27:5d:23:6e:25:bf:ab:a1:9f:4f:
47:8a:46:28:e2:55:44:32:38:63:b0:1c:73:3b:2e:
b1:8f:56:b4:08:84:61:0f:db:30:a7:2d:d7:7b:65:
ec:99:11:38:c7:c7:af:40:95:14:3a:7a:16:1d:9c:
27:60:31:44:fd:49:01:af:b0:5d:00:b8:9a:cf:d5:
23:41:f0:22:b5:fb:d1:63:b6:45:f1:f0:cf:c4:b7:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:1D:E5:E9:05:B1:14:BF:1F:70:15:02:71:02:0B:94:5C:BD:0E
X509v3 Authority Key Identifier:
keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:9b:57:01:67:61:6e:4e:a6:35:36:a1:6c:ed:17:6c:24:
01:36:f3:ae:3e:8e:4d:a9:fd:d2:10:2e:3c:c3:85:60:a2:cf:
01:e8:ad:1d:9b:b4:36:c5:66:4b:66:a1:1a:75:50:17:ce:f8:
ab:61:86:41:b3:b6:42:35:72:62:37:bc:0c:d3:51:f4:57:91:
40:a8:f7:ee:7c:50:67:1e:82:56:92:41:bc:ad:c5:ec:aa:8f:
b3:89:de:dc:63:13:d9:e7:43:40:51:78:b8:32:71:4f:bf:1a:
8d:a2:fc:87:d2:27:21:73:d5:5b:59:43:62:13:b5:0a:5e:b9:
fb:47:a8:cc:2a:2d:ae:3b:3b:48:1b:b7:1b:4b:05:24:78:d2:
1a:3b:6b:3a:03:67:8e:dc:16:44:a4:ce:df:d4:8c:ad:9c:41:
e0:27:4b:46:dd:ca:e2:6e:da:e2:e6:95:06:39:33:49:93:11:
cc:f5:0a:38:93:f5:d9:df:37:56:86:47:6b:2e:fe:9f:d2:79:
a5:d6:fd:57:33:c3:76:db:f7:a6:3f:5c:0c:f2:8e:e7:c8:5f:
a8:d8:e2:d5:43:05:f5:f9:e3:34:bb:6c:f2:f7:89:de:26:ed:
ac:df:a8:03:eb:60:3a:9d:b4:52:47:ae:f7:21:a0:29:3a:f5:
d8:c9:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:35 2025 by rpki-client