Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: 0iD1M3yL7sO67bqapNCdfxIvfxZcZ2D4bz0wJqqgNnw=
Subject key identifier: E1:1E:DA:FD:F9:C1:32:1C:FC:AA:71:E2:1B:A4:EA:0D:25:72:71:A9
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 019849D31D4750EADFA09DFB5B1AE5AA2DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: nKDx/12eqlxOJRN/1U03DyTnxxa19gnte75ID+vnVMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1d:47:50:ea:df:a0:9d:fb:5b:1a:e5:aa:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=e11edafdf9c1321cfcaa71e21ba4ea0d257271a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:ac:06:20:74:c8:ad:60:6e:f2:bc:2c:f0:
0c:07:fd:51:e2:3b:b2:f2:d4:ea:e8:6b:01:56:3f:
e7:2b:7e:6d:95:57:8a:52:b5:65:83:b5:0b:48:dd:
73:98:fe:d5:c0:3e:63:12:10:6d:42:53:88:b1:cf:
81:cf:77:06:4c:d6:4b:18:77:42:de:a9:2b:c2:b2:
fe:75:51:5f:e6:1f:37:e1:b9:75:91:26:29:ea:63:
fa:16:3c:e7:3e:ae:3c:ab:65:ec:94:93:33:40:80:
43:e3:38:7f:cf:4c:c5:f4:5c:18:48:3d:e4:c8:b5:
42:2f:74:39:78:7c:dd:8f:b2:02:c3:4d:37:4c:6b:
4e:c7:8b:4e:c4:71:b5:46:36:05:ad:cb:57:6b:e5:
27:68:7d:7b:de:58:65:f9:ea:d4:3a:8a:cf:21:51:
cf:3c:5a:1a:9c:24:57:6f:5a:e5:64:42:0d:13:ea:
52:f2:a1:ee:d4:50:1a:92:30:1f:50:7e:8f:0d:95:
a0:38:2e:77:38:9c:ad:5a:52:78:7e:6c:72:21:93:
4d:aa:00:b6:12:08:8b:81:03:90:c3:e7:7b:10:37:
3e:7a:f2:86:e0:dd:73:ca:3d:f0:5e:b2:1e:59:f0:
65:6c:4b:cd:61:fa:db:71:4d:45:1c:88:ee:14:66:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:DA:FD:F9:C1:32:1C:FC:AA:71:E2:1B:A4:EA:0D:25:72:71:A9
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:96:40:b2:a3:f8:cb:3b:e3:03:bb:f0:5f:60:c1:43:b9:
5a:e1:dd:d4:fc:bf:9b:93:35:78:4d:d0:69:b3:fc:c5:d9:ee:
f1:10:f7:bf:b5:0a:3b:97:f1:64:35:4d:cd:f8:d9:47:8a:0b:
93:4d:33:10:2c:cc:98:a3:7d:37:b5:5a:e1:d8:2e:3f:2f:62:
65:88:7b:be:37:62:93:de:3c:8e:f9:98:d7:0b:38:b5:9b:08:
fa:10:ed:09:3f:1d:8c:09:c2:bc:fd:fe:7c:b1:4f:a4:76:e8:
fe:9b:2d:92:3a:9b:a3:7a:5f:22:e6:78:51:d6:48:a5:62:34:
7c:22:16:92:c3:6e:3c:72:39:61:5e:9a:2c:23:43:72:7f:37:
25:57:12:ae:bd:e6:05:de:4a:6a:ed:d5:7a:09:f1:ae:f5:ab:
ae:81:48:ad:80:77:43:25:b0:19:d6:ad:98:1e:15:a1:3a:82:
7f:96:c7:7a:7f:08:a7:4c:11:10:43:90:64:8c:70:80:be:da:
89:c8:e1:11:d5:c1:7f:b6:fe:8f:0b:62:40:b5:e2:c1:20:2e:
5e:a7:a0:9d:78:6b:b7:d2:2e:61:f2:8a:2c:13:17:2c:40:84:
a4:2f:33:cc:fe:6a:aa:70:7d:61:c8:b8:f0:de:48:73:e9:75:
13:e2:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:55:30 2025 by rpki-client