Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: WSSJpISnXWHHPz2X4hQ6OXJQBkIT6+XYPWx3Sp/rDpU=
Subject key identifier: E2:65:CD:CA:E4:89:12:CE:50:B2:24:D5:0C:E8:85:92:9D:A2:DF:0B
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019849D3265E2E0C65DDC40D7EE91F91493B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0727
Signing time: Sun 27 Jul 2025 03:00:31 +0000
Manifest this update: Sun 27 Jul 2025 03:00:31 +0000
Manifest next update: Mon 28 Jul 2025 03:00:31 +0000
Files and hashes: 1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: XdeQt6+nJ/QuXvElatQiYKYONEpACqY5QlR6xKslqzQ=)
3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:26:5e:2e:0c:65:dd:c4:0d:7e:e9:1f:91:49:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Jul 27 03:00:31 2025 GMT
Not After : Jul 28 03:00:31 2025 GMT
Subject: CN=e265cdcae48912ce50b224d50ce885929da2df0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:4b:39:a5:cd:42:96:21:7b:7e:6f:a0:23:
23:00:a4:f9:7c:27:91:60:71:c3:07:92:88:ac:16:
53:03:b8:86:bd:de:48:54:16:5a:59:be:f7:0e:c9:
34:c3:f5:4d:e3:69:ae:3c:b3:8d:38:51:5d:42:e2:
fb:c5:6f:bc:28:62:3b:51:4e:44:3d:52:b7:bc:6e:
3d:d8:4d:47:c2:e3:06:8e:fc:f1:be:c7:68:14:0d:
df:a1:bd:7a:8d:b4:d6:52:11:04:f5:df:73:87:75:
6e:26:1c:b6:54:6d:b1:01:8a:fb:ce:43:30:53:97:
d3:fe:4a:98:05:e8:b9:44:0d:1e:60:a8:06:51:0f:
da:f5:8f:0a:e6:2b:d9:a9:ed:a8:d1:2d:95:69:ad:
5d:12:ac:e0:c8:98:3e:41:4c:92:47:8c:1a:05:e0:
79:a5:b1:8f:39:2f:6d:98:b7:1c:99:fe:f2:20:d0:
d6:93:9e:e8:57:3b:da:fa:da:a0:8a:40:d0:16:cf:
35:74:68:19:0d:a4:b0:68:1e:c1:3b:5d:57:b2:ce:
57:1e:a2:77:84:19:81:23:99:57:7b:f0:e9:f5:c9:
d7:d7:d1:03:b4:b2:e3:24:3e:5f:33:e8:3c:6e:d4:
ac:46:d9:4c:73:fa:5a:4b:0c:a3:f8:e4:32:50:8a:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:65:CD:CA:E4:89:12:CE:50:B2:24:D5:0C:E8:85:92:9D:A2:DF:0B
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2b:2f:7a:09:ab:d2:f9:c9:43:14:47:6c:ef:e0:d5:d9:61:
70:5d:76:6a:c6:43:7e:7c:2a:6b:ee:f0:38:16:00:c7:30:74:
81:4e:9b:49:8e:c0:6a:8a:f5:39:a1:f4:4f:01:21:04:bd:14:
42:46:91:82:05:8a:35:b9:e6:0c:eb:f8:99:75:3f:95:b9:cf:
63:30:ed:df:65:22:a4:47:6d:da:b1:93:df:58:60:44:78:8f:
34:fd:5b:26:61:bf:db:0a:91:6a:5e:42:ad:55:bf:4a:37:6a:
c4:70:78:4f:bf:eb:4b:af:99:ce:f6:33:5c:9d:e3:90:cc:ae:
7e:4c:fa:1a:f7:56:24:f0:b8:b2:c2:d1:53:fd:cb:ff:e6:fd:
87:b7:f6:fe:f9:69:ae:b6:1c:08:2b:d7:3f:b7:90:f5:57:bf:
c2:cd:b3:42:e1:19:3a:74:43:e5:b8:38:50:17:be:9e:6c:6e:
ac:47:9d:f2:e4:68:1d:f4:18:49:e7:4b:28:d7:32:ec:4f:be:
ee:0d:45:d4:f1:46:ae:d9:c4:59:f4:17:b9:77:d4:44:f4:42:
74:35:f6:2e:ca:c5:0e:e0:ac:3b:5e:1d:3d:7b:53:76:89:d5:
92:33:bd:4a:ac:65:2e:e5:d6:aa:f0:ca:35:e9:df:8f:29:a8:
4b:5e:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:39 2025 by rpki-client