Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: Gg55FunsmjQ/uOxAdA8AKa+Dj+0VCCh7mBhdoWoAejc=
Subject key identifier: 0B:A6:83:E3:73:EE:ED:34:21:FB:0F:B0:64:09:AB:5B:6B:A5:FE:42
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 01984B54E19B56AA8E7C701E16E9E56B63EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0E88
Signing time: Sun 27 Jul 2025 10:01:50 +0000
Manifest this update: Sun 27 Jul 2025 10:01:50 +0000
Manifest next update: Mon 28 Jul 2025 10:01:50 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: cm0Qy1DqmaYEjdEdY/KpawD1prPpIEhjK+rTRJ/p2Wk=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:e1:9b:56:aa:8e:7c:70:1e:16:e9:e5:6b:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Jul 27 10:01:50 2025 GMT
Not After : Jul 28 10:01:50 2025 GMT
Subject: CN=0ba683e373eeed3421fb0fb06409ab5b6ba5fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:97:e1:59:4f:65:64:f8:c4:e9:36:ac:a1:
6d:45:c9:87:c1:d4:a1:cd:b9:5c:76:f5:0d:19:77:
1f:13:b6:13:d3:f9:fd:83:75:d2:d5:62:3f:e0:3d:
88:df:75:8b:b5:93:57:a6:b2:03:80:72:db:e1:d2:
1b:94:7c:ac:ad:93:cc:b7:57:f3:7f:3f:79:42:5a:
59:d1:f2:ae:ff:be:8a:f9:98:08:1b:10:8b:9a:ac:
c6:d2:19:fe:ea:05:3a:09:3d:68:20:38:9f:2b:07:
6b:68:be:48:dd:1f:d2:3f:42:fe:0c:a1:6f:5b:e5:
1f:f3:be:88:ee:50:9e:57:dd:db:92:9b:e6:3d:2f:
9e:e9:67:31:66:01:c7:0c:e2:34:bc:05:05:1f:fd:
d2:72:22:f1:b8:07:d9:fd:af:a3:3e:20:9c:ba:02:
c7:a1:e8:c0:8e:33:87:70:98:0a:d5:04:3d:0b:0c:
a9:95:fc:2a:ab:32:d4:df:31:ab:a6:06:e4:fd:83:
40:d4:b7:c2:c3:3e:39:57:90:d9:69:5a:6f:f4:1d:
fd:6f:e3:34:17:2d:05:f3:0b:f9:06:4b:09:94:db:
b4:64:7c:9b:74:88:a5:ab:48:6a:50:6d:bc:15:80:
a7:5a:2e:d6:d8:68:f9:03:51:f7:b9:d6:6e:97:88:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:83:E3:73:EE:ED:34:21:FB:0F:B0:64:09:AB:5B:6B:A5:FE:42
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ce:71:bb:df:ee:a5:de:58:50:ae:6e:1d:e5:71:05:f5:18:
83:1b:50:a1:e3:a7:79:6f:40:23:2c:75:d2:6c:1a:cb:c7:6d:
66:8c:5e:2b:6d:f6:5e:d5:6c:e2:bd:c8:05:0c:7c:02:cd:1d:
a4:da:4e:7a:a5:59:c3:3f:11:d7:9b:8b:a1:37:74:73:c8:b2:
75:52:35:34:c5:90:4a:0d:15:ff:68:1d:09:53:ff:82:b6:0e:
ed:a5:d2:c4:b2:41:7e:61:13:e0:cf:0b:30:15:60:6a:d5:29:
8c:02:74:90:3a:f9:31:f6:3d:0e:d5:d0:7c:34:09:ee:bf:db:
fe:2c:31:0d:72:06:63:a1:b7:e0:5d:f9:12:b9:a6:4a:2d:f0:
0f:a0:c4:5d:b9:ed:94:ef:ea:5b:df:0b:12:43:95:8f:fe:d5:
55:07:58:60:91:fa:dc:c6:d3:91:01:90:84:04:60:c3:93:38:
87:5d:eb:27:0b:76:2c:c6:02:35:e3:60:87:fb:03:b1:e0:93:
62:d9:df:97:18:6a:26:21:69:17:65:7a:b7:42:ba:36:d8:5b:
25:7e:c6:43:da:0e:c8:05:50:41:78:4b:73:d1:55:7c:09:e5:
00:ff:00:64:d8:6c:7c:ac:19:1b:3b:e0:49:77:e5:4c:60:38:
d8:df:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:05:12 2025 by rpki-client