Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
File: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft (raw, json)
Hash identifier: E3RRJU5mzsMWxADfWrHoHqPfN0WJelyuQ2sN7d3Yi4I=
Subject key identifier: A8:F4:B6:96:D3:F4:42:4F:C4:4D:91:BD:C2:29:41:34:5B:20:CF:56
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0198481C0D68BEA23479EB385102E83C9DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 19:00:54 +0000
Manifest this update: Sat 26 Jul 2025 19:00:54 +0000
Manifest next update: Sun 27 Jul 2025 19:00:54 +0000
Files and hashes: 1: AlDLgq4a_thE-qXe6l8E_xWLXFc.roa (hash: 0ufopEuWXow9IQPbSAY5y6lUJPxjAppqenIRissIhOM=)
2: HbD_TR3_mqlACMnF4iTXIAuOjsg.roa (hash: T3tCAy3O2wLO9qO83uugLqRmkiFNSfdwlXWERB4+Mok=)
3: gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl (hash: nrgYf7by5/EH08QwZav/YbT7BXyviws3uoQlxiCO/Ws=)
4: h5Pey3t7ILGJvHcV0wlWm8IDgRE.roa (hash: /bmLdcY/7qOd0oeU6NCbdR7DKpvTkMz1r7GZ1d675P4=)
5: nId42Q0uPKxNBDzBg-GOcY-a01Q.roa (hash: 43G2ltR87FjAzlwjOiHc7NglbtaxLWslqx/bREI6WQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:0d:68:be:a2:34:79:eb:38:51:02:e8:3c:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jul 26 19:00:54 2025 GMT
Not After : Jul 27 19:00:54 2025 GMT
Subject: CN=a8f4b696d3f4424fc44d91bdc22941345b20cf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:4b:fd:58:2c:bc:d8:cc:27:23:e9:9f:99:
4f:7a:a6:78:44:c1:91:cf:08:a7:81:98:c8:d4:0f:
55:c4:f4:fb:85:08:a1:ec:4c:6d:e6:3a:f0:83:55:
4a:57:13:42:e8:ad:f8:12:de:a9:b4:fe:9d:a5:69:
ae:f8:44:2d:2f:91:32:57:84:59:75:0b:c7:89:60:
bd:86:dd:b0:51:69:f1:20:5f:cf:9b:df:9c:e6:95:
75:db:ca:77:69:cd:f8:92:ab:a5:77:cc:2e:be:ba:
d3:36:3a:20:b2:47:a1:3e:cf:a3:be:9d:0c:fe:4c:
34:7d:a3:a0:7a:92:e9:cb:9b:30:f7:b7:36:ae:69:
87:a1:67:92:6a:70:aa:39:fc:2c:99:08:3a:a1:69:
f5:2f:84:26:af:a3:33:f6:b5:5e:17:87:8b:db:a7:
90:62:3f:91:00:1f:b8:83:eb:34:4f:ee:cc:fb:72:
20:61:02:ef:98:fc:59:e7:7e:ca:44:9c:3b:8c:34:
9a:1c:31:ca:fe:e7:9f:fb:1e:05:c1:7c:a7:e2:75:
9f:9f:f0:84:94:b4:fc:6f:40:e6:c7:ef:4f:3e:ee:
f2:e7:26:98:c3:e4:45:fc:3f:f2:af:fe:22:bb:c9:
f5:d8:14:33:0c:04:d5:18:05:fd:21:22:a2:bc:6d:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:B6:96:D3:F4:42:4F:C4:4D:91:BD:C2:29:41:34:5B:20:CF:56
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cf:d2:8b:5a:8a:1f:ca:f8:05:b1:00:d5:c5:4f:7d:f8:90:
5d:9d:97:65:79:df:7a:98:77:83:d1:f0:ff:3a:81:08:04:ce:
2f:0e:39:3c:ee:a4:ab:39:21:e4:02:a6:c1:06:18:79:01:73:
bf:aa:55:42:b3:74:d6:89:01:ad:31:ef:1f:b7:9e:8e:fb:bd:
fa:18:bf:f2:68:b6:bf:f4:d0:8c:2b:3c:af:af:39:ff:e4:7f:
d5:71:3b:4d:f4:6d:c3:32:f1:45:22:76:a2:c9:1d:9d:1d:52:
b2:f7:35:97:d3:2e:1e:31:00:ab:93:36:15:2e:6b:99:0e:9a:
e1:4c:79:c0:be:b1:70:fb:a4:53:57:37:e4:d6:d1:07:26:f2:
5a:9e:cd:d4:24:29:e4:a6:2c:2c:b1:86:03:88:7d:6a:6d:c1:
fa:db:db:5d:74:6a:8d:0e:85:0a:35:72:68:e1:2b:ca:47:79:
e0:c9:8d:d6:47:43:31:e0:cf:99:94:f7:8c:7a:02:cd:dd:73:
14:d8:bc:54:3e:35:40:a1:0d:79:92:00:9a:fa:58:8c:67:29:
70:96:6d:d5:e3:3d:e7:85:25:89:d1:3f:97:93:df:23:d3:87:
48:3a:73:12:14:16:e1:f8:5b:27:a9:74:b0:77:7f:f7:9c:c0:
aa:74:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:42 2025 by rpki-client