Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: OSb46+jHA5V2EjSU5l16IqQ9s4jYq7N3nqvir1w6PdM=
Subject key identifier: 29:0D:29:F8:FA:58:2E:95:8B:09:09:3C:D4:97:3F:F1:07:7C:F6:52
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 0198548D79A23B7B1EDAF97A828CA6DA9602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0B71
Signing time: Tue 29 Jul 2025 05:00:14 +0000
Manifest this update: Tue 29 Jul 2025 05:00:14 +0000
Manifest next update: Wed 30 Jul 2025 05:00:14 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: 867vYGsKsOjQbcwD6V8C9obRVqDRVHctfPbDUMI36l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:79:a2:3b:7b:1e:da:f9:7a:82:8c:a6:da:96:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Jul 29 05:00:14 2025 GMT
Not After : Jul 30 05:00:14 2025 GMT
Subject: CN=290d29f8fa582e958b09093cd4973ff1077cf652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:b3:80:ba:78:17:de:77:2c:b4:25:f1:9f:
12:b7:20:bf:7a:6f:27:ca:eb:4b:6f:6a:3f:7b:3a:
dc:de:01:19:41:8f:aa:a5:a5:86:f3:dc:41:03:16:
83:b8:4a:8c:10:84:60:7b:9e:4c:21:c3:f0:bc:be:
88:26:63:11:d1:f8:65:bf:39:f6:cb:2d:b0:76:bb:
cd:ba:9a:c2:1d:c9:00:4d:63:48:f0:55:11:01:93:
dd:84:d3:c5:62:ef:fa:e8:75:a3:d7:df:9e:cd:63:
f7:fc:88:30:f8:7d:5d:06:b9:ca:89:1b:1a:16:21:
af:1b:66:fb:84:c4:32:dd:5a:0d:53:db:25:7f:0a:
c8:17:a8:16:79:dd:cd:ca:b9:b3:de:c4:85:52:98:
ca:8b:f3:36:e8:d5:52:23:37:9d:f1:ca:d1:b4:ba:
36:1d:91:ac:56:cf:9d:6f:e0:12:fc:80:5e:e6:65:
83:6d:1d:96:3c:4b:25:ea:a2:d7:bb:cd:1e:e6:35:
5e:7c:08:68:7d:48:51:7d:6f:ce:22:19:03:0f:74:
74:07:68:95:42:77:bd:a2:e6:b5:aa:1c:6e:e9:35:
46:69:d0:77:da:c9:24:c2:3c:e3:eb:00:9b:d9:d9:
3a:62:aa:ff:c5:16:49:bc:e7:d9:96:97:c4:ef:c4:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:29:F8:FA:58:2E:95:8B:09:09:3C:D4:97:3F:F1:07:7C:F6:52
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:80:54:4f:3e:bf:6b:d0:5d:30:a1:34:e5:9b:99:9f:40:
5d:34:69:23:b3:1e:88:19:90:c8:a0:ea:7b:2c:df:7d:15:18:
bd:42:d7:51:62:cd:86:a3:c2:0d:e0:6a:2d:fe:91:48:51:a3:
9d:dc:81:5e:90:50:d3:a3:e4:06:4d:f1:45:d5:30:f8:3b:0a:
60:ec:31:35:b3:d7:b3:f1:cd:42:44:ec:8c:36:0b:50:e1:b6:
8c:5b:d5:7b:7c:74:21:4c:81:fc:95:08:9b:dd:03:d8:21:63:
36:cf:97:a5:fc:a0:03:4c:ce:4f:f7:17:e0:ee:28:53:30:bf:
3d:0d:6c:77:cc:9f:8a:b8:a1:6d:fa:f5:17:e3:1c:9b:b0:12:
21:51:d2:03:39:f8:36:a9:67:43:6e:b9:58:ab:45:d1:df:45:
09:bd:c2:36:8e:79:8f:3e:e6:3f:ee:3a:09:af:e4:7c:3a:bf:
65:7d:07:a2:50:cc:e8:11:15:85:2e:34:b7:ed:0f:d8:a6:bf:
67:5d:82:9c:d2:f4:a9:a4:6b:36:74:8b:ef:68:16:d6:e0:d4:
ac:40:53:81:d9:f0:66:a7:6e:36:48:25:24:85:0e:65:33:79:
51:d2:45:e0:a1:5a:bc:91:40:6f:f7:75:e8:d9:59:1f:87:2b:
a7:df:93:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:59:34 2025 by rpki-client