Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: 9ff1qOx5D08jOSgih/BV9qLQ61Ni1hUimuuh8Kwo19E=
Subject key identifier: 94:D0:9B:F2:C6:81:A9:28:16:C9:52:C1:B3:D4:9C:76:C5:3B:26:BC
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 019848C0DC948BA503AF3F8C65DB6AFB4B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:55 +0000
Manifest this update: Sat 26 Jul 2025 22:00:55 +0000
Manifest next update: Sun 27 Jul 2025 22:00:55 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: RdITgobpKpmmtRX/CeM+jSt/iW4lmil4kRBd32vXKTM=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:dc:94:8b:a5:03:af:3f:8c:65:db:6a:fb:4b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jul 26 22:00:55 2025 GMT
Not After : Jul 27 22:00:55 2025 GMT
Subject: CN=94d09bf2c681a92816c952c1b3d49c76c53b26bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:f9:fd:7a:f0:d2:a5:16:29:a7:78:e2:0d:
d0:56:d4:de:b4:1c:36:94:85:8b:e8:64:df:64:9a:
ee:ed:c6:a1:7e:11:c6:98:e3:68:65:f2:69:14:f4:
d8:82:d9:d7:73:d9:ea:91:06:fa:53:6f:28:d0:39:
22:78:b5:86:59:57:15:fc:e7:b1:a9:0e:64:6a:0b:
16:b9:e5:ca:6c:38:fe:f5:66:e3:c4:fc:2a:8d:95:
8b:28:13:d9:df:d3:53:b1:8a:0f:2d:c4:7d:a4:79:
70:f7:4f:c7:f7:6c:11:f8:72:98:56:c7:fe:c6:e8:
d3:c9:2d:24:8a:13:bc:8f:9e:c1:44:ea:3f:02:f2:
7a:d8:23:01:0c:87:2a:79:28:da:61:0b:80:68:7d:
1c:f7:aa:ae:6b:0e:3d:44:d2:05:57:e0:7e:27:88:
50:60:7b:8c:df:69:4a:62:0e:1b:2b:05:b3:cd:a9:
15:d9:0e:be:25:50:9e:71:6b:ed:b4:5a:c4:28:e7:
d9:87:44:d9:d9:9b:8f:76:e4:83:f5:89:c2:5a:d2:
bf:52:49:e0:27:9c:76:ec:75:74:43:c8:1d:63:1f:
f9:ef:8a:60:d5:e9:0a:37:01:a5:12:c4:0d:9b:22:
93:4c:12:ac:65:62:c2:33:58:4a:c1:eb:38:38:8e:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:9B:F2:C6:81:A9:28:16:C9:52:C1:B3:D4:9C:76:C5:3B:26:BC
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:89:87:f5:dd:1d:4e:5a:54:ee:16:a6:6e:fa:86:96:e3:75:
e9:2b:a3:27:99:da:8c:71:68:34:75:e7:46:fc:55:8d:6a:bb:
3a:18:ff:d7:d9:6d:bc:d8:52:a7:6a:2e:66:ff:0c:53:0b:3b:
32:0d:c4:05:ad:a2:c9:06:10:3b:2d:e4:35:74:ba:09:d5:72:
06:c2:69:97:e4:f4:d1:79:92:b4:b6:bf:b1:e3:57:24:db:55:
c5:46:04:8d:b7:ca:91:e3:5a:19:70:d4:1c:54:e6:09:0e:ac:
85:35:32:c1:ee:6f:b2:bb:40:03:59:16:11:5e:2b:28:8e:c7:
f0:32:d7:8f:e4:d9:1a:a1:72:ab:e9:cc:56:63:3d:65:e6:b6:
6a:2c:27:a1:1d:cf:c2:81:99:08:e0:ab:8b:b3:6e:af:12:6b:
25:4f:6c:70:cc:51:69:5a:14:8c:e4:19:75:d3:51:78:c3:2c:
ac:c3:1a:ef:2b:b5:38:6d:42:ef:f7:32:07:5f:68:24:3e:70:
60:cb:a2:e3:65:fb:61:ea:3b:ad:d4:ba:64:f1:86:66:94:f6:
3e:47:f2:ba:65:94:36:e1:bd:a6:d5:f2:5c:3f:99:22:48:c1:
4d:c8:b3:13:b6:c1:bf:95:c4:9b:98:0c:e2:36:80:07:1c:44:
0a:fd:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:11 2025 by rpki-client