Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: fZm7vx+qaE4prHM/1/dhB6hQAMG8Nz50298c4dAqGLM=
Subject key identifier: C3:63:05:43:EA:54:AF:C1:2A:4E:91:0A:F7:BA:02:BD:3B:FB:2B:A7
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0198462D8753D49863A5A9605F9324910F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 10:00:45 +0000
Manifest this update: Sat 26 Jul 2025 10:00:45 +0000
Manifest next update: Sun 27 Jul 2025 10:00:45 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: MXiVTLIC97Cn1HEcJmW5QQ/DUNdQrIFPQP+Xj0mTj0A=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:87:53:d4:98:63:a5:a9:60:5f:93:24:91:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jul 26 10:00:45 2025 GMT
Not After : Jul 27 10:00:45 2025 GMT
Subject: CN=c3630543ea54afc12a4e910af7ba02bd3bfb2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:17:e0:39:be:4a:d6:4b:df:23:d0:90:21:
93:5c:b2:47:08:ad:14:ea:11:88:c0:1c:99:c1:05:
e3:4b:be:73:a2:c6:d5:9c:7e:da:ec:3f:75:88:b9:
31:5c:29:10:d5:75:0d:8a:63:22:cb:88:1b:7e:7f:
47:90:2c:e9:f7:f3:8c:65:c3:54:1f:43:a1:87:e2:
50:c1:2d:c0:b4:fe:29:b7:30:d3:90:ce:1e:94:ce:
39:a4:21:a5:51:ca:7c:82:b1:6b:0d:88:4d:16:19:
38:2d:e3:56:86:14:3e:a2:e3:d5:73:38:f3:0f:af:
06:a4:e8:8a:af:bc:94:78:da:f2:39:3c:d5:70:9d:
58:7f:f2:84:a4:01:1d:2a:10:f6:dd:45:b0:40:b1:
4e:52:29:a9:36:3a:a2:ba:8a:e2:80:19:cf:b5:e6:
27:95:dc:61:d1:4e:48:be:e7:81:48:68:0f:f9:8f:
bf:f7:5e:0b:1d:57:8e:6c:7a:bb:d6:d8:88:fe:4d:
44:a7:ef:04:ae:e7:9d:de:8a:e6:2c:d7:67:9f:35:
70:0f:f5:72:2f:3e:c3:f2:0b:b7:95:13:23:53:96:
21:8f:86:4e:f4:f2:07:83:32:ad:95:ba:4a:a3:e5:
93:a7:57:7b:21:1c:d4:46:b4:5b:a7:3f:32:a1:fe:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:05:43:EA:54:AF:C1:2A:4E:91:0A:F7:BA:02:BD:3B:FB:2B:A7
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:2f:0a:bd:d6:4a:7d:c7:ec:3e:98:d8:0a:0e:de:2c:db:
64:78:2c:6e:2d:57:2b:4f:e7:e2:bc:8a:a7:49:3e:70:a5:f7:
9f:31:7b:4c:86:34:15:ef:d2:a7:2f:a9:34:c8:1c:32:57:4a:
9c:18:fe:91:1f:24:02:33:df:6b:ad:7f:35:ee:bb:b1:8d:54:
c2:3c:77:57:f3:2b:f5:09:7a:88:3f:1b:73:52:52:df:62:1d:
3e:1f:8f:21:b9:f3:cc:1b:e5:9c:db:3e:43:a3:d2:42:d5:38:
d3:98:6d:10:27:04:92:ea:01:f0:cc:d8:c4:69:10:9a:c6:38:
11:96:b3:4f:e5:66:3f:52:da:64:57:65:9f:af:a6:f8:93:b1:
cf:39:08:c7:9a:0f:e6:ee:53:74:e5:6e:51:52:11:9b:88:57:
23:1d:97:c0:30:7a:62:38:54:86:11:5c:d1:0b:b2:f3:12:77:
74:c3:63:ba:40:97:0e:d8:f1:32:e4:28:29:3f:15:67:2d:e8:
49:5d:a4:3e:d3:6e:92:da:45:80:32:68:5c:09:1e:48:ce:b5:
65:e2:00:b4:d2:ac:3a:1c:89:7d:fb:e5:76:ba:21:b1:82:cb:
cc:20:83:59:c3:2f:7a:32:6c:10:01:c9:4f:62:64:e2:bb:12:
18:d3:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:04 2025 by rpki-client