Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: 3jTVPs80sZb65betYf5n6ERf0kwruDB/QN0a/syDTT8=
Subject key identifier: 42:25:1A:58:3C:AA:C0:0F:BB:E8:72:1A:E7:10:D5:94:B0:89:93:81
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 019845890368C551208DC04870EC80ED041A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 124A
Signing time: Sat 26 Jul 2025 07:01:03 +0000
Manifest this update: Sat 26 Jul 2025 07:01:03 +0000
Manifest next update: Sun 27 Jul 2025 07:01:03 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: dMX9QwbYl-FTlUJ1R8o2dHt-Q3w.roa (hash: e2o3TSPgT1QYuW3l4VAbr/3mKHvbyIxxzpTJ+Xkb62A=)
3: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: mthpzXDHFcPEcebrIDeiir0Nht+QjzfB4JsYqhcuhFk=)
4: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:03:68:c5:51:20:8d:c0:48:70:ec:80:ed:04:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jul 26 07:01:03 2025 GMT
Not After : Jul 27 07:01:03 2025 GMT
Subject: CN=42251a583caac00fbbe8721ae710d594b0899381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:98:b2:22:c5:a7:1a:9a:12:de:e9:77:13:
aa:0d:f6:d5:10:54:31:71:30:54:eb:fa:73:42:6e:
e3:e3:38:7c:22:6a:cd:e9:34:24:47:df:e1:0c:e8:
b8:e3:88:07:e5:cc:fc:cc:86:9f:69:e5:76:10:f2:
8c:c2:fa:4f:90:58:a8:a4:c1:19:0f:59:04:af:53:
03:97:94:58:d7:5b:75:08:c0:5c:49:14:ad:b9:bd:
df:33:31:d6:65:5c:8b:ab:ab:9b:9c:97:d8:e0:7f:
ef:eb:c5:94:cc:0a:4e:cf:8b:e7:cb:c9:e7:19:1a:
30:6c:10:b1:a1:64:e4:5e:76:fd:4d:3f:11:96:19:
bc:31:43:c7:0a:5f:ff:e6:cb:16:dc:33:5b:6c:19:
48:e1:d5:79:98:11:db:ea:73:f9:bb:f5:e1:23:a1:
5d:07:06:27:4d:a1:cf:8e:f2:a4:02:9c:19:9a:67:
04:fc:60:7b:7c:94:fa:3e:41:f9:a0:aa:c2:b2:f4:
01:ea:03:65:02:a7:37:3a:da:c7:e1:3d:1c:f8:98:
c2:17:a1:92:8a:f4:0b:cb:e6:ad:94:83:d8:ef:f8:
0b:1e:e9:43:e1:bc:bf:57:ba:ce:b2:fa:a8:f7:c3:
07:54:a5:1f:df:bb:35:f8:ad:87:0a:7e:e9:16:80:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:1A:58:3C:AA:C0:0F:BB:E8:72:1A:E7:10:D5:94:B0:89:93:81
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:0f:ec:d2:41:29:9c:f8:bf:43:76:7d:7f:cb:1b:81:f3:
a6:ec:21:8e:f6:1a:c3:ab:86:3a:ab:20:13:6c:cf:32:91:b1:
e3:77:78:5e:21:4c:f0:30:e6:be:3e:b7:40:7a:97:0d:42:14:
40:98:cb:dd:cc:41:21:75:c3:e9:87:b8:f6:a9:02:f2:97:07:
18:e4:18:69:da:e1:38:44:fb:10:3e:18:b1:e3:fa:fe:67:f2:
dd:05:bd:83:2c:23:9b:47:1b:b9:dd:53:57:9b:69:67:6f:4d:
54:06:f1:d9:41:19:89:d4:c8:b6:45:68:75:84:1c:c3:f0:c7:
ae:bd:bc:89:c1:80:d5:2f:08:4e:05:05:c2:ea:5d:da:18:c7:
f4:99:47:88:a5:98:85:43:cd:d7:27:3e:97:fb:b1:12:f3:be:
56:0a:c3:af:f2:cf:de:8d:eb:2d:7c:0e:60:da:9a:b4:d0:3e:
c2:a9:f8:d2:d4:3a:12:2f:27:a7:f4:e2:f4:66:8c:b4:26:9d:
41:87:5d:86:f9:a1:93:88:16:dd:32:ce:d8:fd:60:b6:25:5a:
68:07:e8:81:cb:3e:a9:68:22:b8:77:12:63:f1:8f:d0:2a:e5:
da:eb:f2:d7:c2:4b:e4:9c:39:ed:ad:f9:53:f2:11:1c:33:ef:
f4:70:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:03 2025 by rpki-client