Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier: NKy9Da7HzHU00pK2cf+ELLUUAjAN1DRgFTudKO0H3uQ=
Subject key identifier: D6:03:AF:24:80:97:17:F1:6C:31:DC:A3:70:34:22:0C:E2:AA:34:A4
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial: 019835030918CF58A92F474844F014977E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number: 050C
Signing time: Wed 23 Jul 2025 02:00:48 +0000
Manifest this update: Wed 23 Jul 2025 02:00:48 +0000
Manifest next update: Thu 24 Jul 2025 02:00:48 +0000
Files and hashes: 1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: 4BbNVdJxPZlOxHCWGzkCIeSYHS5ZtuQV/laCQyTjHgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:03:09:18:cf:58:a9:2f:47:48:44:f0:14:97:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Validity
Not Before: Jul 23 02:00:48 2025 GMT
Not After : Jul 24 02:00:48 2025 GMT
Subject: CN=d603af24809717f16c31dca37034220ce2aa34a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:28:f3:52:8b:8b:83:d6:b8:09:8f:4c:37:
6e:d9:5a:1d:cf:63:23:75:e8:d5:e1:d6:76:f8:8d:
d3:c4:34:e9:2f:b6:f0:78:53:2e:f8:ba:ca:aa:1a:
a4:17:20:83:1f:ca:b6:05:63:88:ea:ad:41:da:d8:
7b:50:f6:2f:4e:85:20:93:a8:77:eb:aa:96:ad:7c:
b1:26:e4:a7:63:c0:5b:ca:11:4d:84:e8:67:3e:5b:
b7:84:6a:45:89:b6:b5:3e:5e:0a:96:de:cd:27:15:
89:18:36:58:e1:ca:d8:6a:f1:74:5c:9b:36:3b:46:
4a:d2:01:ce:01:2b:76:fa:df:ec:b4:d6:b6:45:6f:
7c:3b:ee:39:59:5c:c2:c9:1a:f9:47:11:ce:93:2c:
ae:d3:f8:98:04:4b:b2:e1:17:b4:a3:f2:4b:53:0c:
89:19:c5:bc:11:f8:e6:da:f6:49:27:a0:e6:55:ab:
7e:e8:dd:bd:e3:32:54:a3:2b:58:bb:79:a0:31:3a:
7d:b3:34:cd:85:48:33:bb:90:c4:c0:99:85:89:a8:
e7:dd:dd:69:78:b0:d8:01:3e:69:74:b5:9f:d2:f2:
a0:f9:df:28:1c:1b:08:5d:07:7f:00:62:db:d2:2d:
b5:b0:a5:dc:12:d3:5f:8f:91:c2:fd:30:c3:c7:0c:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:03:AF:24:80:97:17:F1:6C:31:DC:A3:70:34:22:0C:E2:AA:34:A4
X509v3 Authority Key Identifier:
keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6a:12:2d:e2:68:15:e5:31:f7:ee:d4:8a:ff:8a:a5:34:7e:
70:ae:8a:dc:44:38:75:b9:e5:6c:dc:45:88:44:df:d5:83:7d:
55:f4:0e:ca:e8:26:03:c3:59:9f:4e:33:64:d8:6c:be:80:62:
0f:79:0b:bc:0d:7d:4d:83:75:6d:e1:e6:de:07:bf:06:af:55:
58:67:c7:04:20:35:b3:da:ad:30:d7:ea:37:cc:00:e2:9c:6f:
29:9d:17:dd:71:0f:dc:c2:58:55:d1:0d:1b:da:02:bf:68:66:
3f:70:3e:ac:88:b9:22:d3:50:45:87:49:6e:40:df:a7:67:f1:
23:24:4e:1a:8c:60:9d:2b:41:43:43:47:4b:09:7d:1a:6a:37:
88:32:c0:19:d5:2c:67:f0:18:ca:62:e1:e9:ab:de:61:2b:df:
09:00:56:96:d6:c6:40:8f:97:b2:3f:f3:31:29:74:84:d7:f7:
c6:45:7b:70:6a:c7:fc:2f:65:b0:65:34:f4:cf:d5:82:81:16:
c0:41:a9:6c:24:fe:ba:24:02:f9:5c:0d:b4:d3:6a:b5:6b:2a:
14:01:42:5e:5e:6d:bd:04:71:fa:d2:35:b2:c5:23:f1:dc:76:
12:3a:eb:5e:8f:7b:d3:da:06:06:8c:3d:9d:33:21:62:72:01:
91:f5:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:50:14 2025 by rpki-client