Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: tIyMQBYM1as5zhL9Pg40Kjz1JaJzyKAvbJxlzvgNiyk=
Subject key identifier: 08:CD:DA:BB:F2:0D:98:D4:E5:88:CD:96:BB:1F:D0:06:80:32:06:B6
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01983803CA24E698CC1CF720971E4E7A8A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0B99
Signing time: Wed 23 Jul 2025 16:00:29 +0000
Manifest this update: Wed 23 Jul 2025 16:00:29 +0000
Manifest next update: Thu 24 Jul 2025 16:00:29 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: Wovm5rEsC3kkrcfd0pfspD57xq5V45Vz3mLcP9kTicU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:ca:24:e6:98:cc:1c:f7:20:97:1e:4e:7a:8a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jul 23 16:00:29 2025 GMT
Not After : Jul 24 16:00:29 2025 GMT
Subject: CN=08cddabbf20d98d4e588cd96bb1fd006803206b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d1:72:14:03:db:9f:fc:87:8f:00:77:cd:a2:
e5:23:42:c4:88:aa:bc:8d:34:03:c3:16:d0:21:f8:
63:37:7a:aa:98:7d:fc:2b:45:9c:28:51:99:d1:fb:
c4:4a:3e:75:2d:4e:71:e4:61:23:ef:db:50:88:a9:
7c:89:c8:c7:e5:aa:f6:3d:24:fe:3e:4e:72:bf:b3:
32:d4:59:37:32:17:cb:ac:ba:fa:76:20:11:ac:44:
46:4a:38:bd:3b:79:2a:36:3d:97:81:97:e2:aa:9e:
ac:ce:82:34:29:48:ea:56:2a:a3:13:7a:e1:b2:81:
08:6d:74:31:d6:43:cb:1f:9c:e2:58:96:c5:a5:42:
3d:5c:32:03:d8:89:0e:45:a5:e8:e6:a5:7f:b1:9a:
ef:7b:ff:df:79:d4:3f:26:6a:ef:d4:4d:f7:c8:a3:
10:1d:a7:75:88:7c:3b:9c:65:f2:f4:1e:cc:4b:d9:
6c:b2:dc:63:da:37:5c:58:99:08:96:6c:ea:d3:ad:
db:10:d5:7c:78:23:1c:a3:c0:39:ba:7a:ab:d0:af:
c8:c1:6b:84:b9:e7:d6:c7:ef:d0:cb:7a:0b:61:f6:
37:08:b0:8b:4d:c2:7d:e4:55:01:e1:2b:58:26:fb:
5f:e1:17:7a:16:b6:19:58:8b:07:a2:93:34:b6:0f:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CD:DA:BB:F2:0D:98:D4:E5:88:CD:96:BB:1F:D0:06:80:32:06:B6
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8b:9f:42:77:e8:ad:29:1d:d2:f8:f2:c2:b3:49:f0:a2:1b:
74:1a:ca:98:35:3d:21:72:33:34:b6:2d:31:d3:ad:2d:a2:0d:
28:40:b5:dc:55:e6:c7:a7:8d:70:ff:6e:b9:1d:af:cf:5d:a7:
d2:87:85:35:81:28:79:fb:b2:77:db:04:71:b5:2c:64:ae:92:
ce:85:64:db:54:81:b5:fd:f1:92:2c:e1:70:48:d8:6d:1d:18:
01:34:68:aa:29:23:00:3d:98:2f:9c:11:06:f6:f2:09:01:a8:
2c:10:eb:75:27:30:15:bc:36:d1:de:fe:d2:92:ae:96:4b:aa:
65:6d:6e:ba:72:be:df:9e:9c:85:ac:52:f3:52:2c:c2:34:2e:
57:8b:34:be:3d:5d:35:ca:43:0f:ff:fc:bd:b0:2d:4d:4d:8b:
f4:11:80:50:b2:29:b8:53:17:9e:fc:0e:a9:42:49:f0:bd:e9:
51:e3:f4:1d:d3:93:71:58:9d:6c:14:46:97:d5:c7:3c:8f:03:
e6:3e:2f:21:26:30:4a:57:44:d3:e2:54:e6:0a:13:64:bd:77:
e6:cb:1a:80:41:1c:55:6b:dc:22:7a:14:0a:a5:bc:01:58:6f:
1b:da:13:1f:f5:ca:86:15:18:26:75:1c:53:c3:45:1d:b5:d1:
95:1a:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:34:13 2025 by rpki-client