Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: WKOmkAjhx6+ZAVxsDe6rcIvvAaKbogUmV9n9jD0fkvY=
Subject key identifier: 3B:E2:7B:4F:6A:7D:E1:C7:3C:F4:44:D0:8E:90:5E:65:98:F5:97:A6
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 019855A06CADB4D4D7011077AB5D3C49EEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 0695
Signing time: Tue 29 Jul 2025 10:00:33 +0000
Manifest this update: Tue 29 Jul 2025 10:00:33 +0000
Manifest next update: Wed 30 Jul 2025 10:00:33 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: IO8RjIVXN/Gac5iE9mzTimQXZxCTSes1vbXUTCZEhvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:6c:ad:b4:d4:d7:01:10:77:ab:5d:3c:49:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: Jul 29 10:00:33 2025 GMT
Not After : Jul 30 10:00:33 2025 GMT
Subject: CN=3be27b4f6a7de1c73cf444d08e905e6598f597a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:dd:65:5a:24:ea:46:8c:d0:f6:99:ac:75:
40:fe:9c:db:77:74:5e:2e:17:92:64:1c:58:03:91:
2d:66:38:ac:60:20:91:64:fe:c1:ea:cd:c3:63:cf:
8e:3b:36:fb:89:1a:12:50:61:56:0f:ea:f8:05:19:
48:42:e1:04:10:63:bd:02:7f:f6:56:e2:fc:f9:6d:
8c:b8:31:38:82:40:79:e7:93:e0:c0:17:29:d9:f4:
fb:74:34:7e:26:a0:0d:a7:7f:f4:28:e0:76:c0:ac:
2f:fb:52:81:f6:db:41:ba:97:07:ac:ee:86:e1:5d:
86:9d:80:d6:14:69:2f:34:91:28:52:ca:7c:31:f0:
0e:25:15:6b:02:f6:b6:93:e4:b9:f8:f1:1e:26:57:
0f:35:0f:9d:4e:56:c5:3d:c8:4a:e5:ff:41:7f:53:
b3:94:c7:2c:6c:d4:07:22:ad:2e:c2:ba:39:a7:7c:
dc:00:46:1a:67:ad:3a:00:59:6d:ab:d4:d7:2f:9b:
03:9f:f0:22:b1:ea:45:f4:29:a1:52:59:d5:53:70:
4d:83:64:75:19:ad:71:90:15:fa:69:b6:7b:ed:5c:
44:87:6f:bf:a2:91:1e:eb:ea:59:9d:05:09:4f:27:
2f:8d:38:cd:e7:fc:44:11:7d:96:03:f0:52:62:a1:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:7B:4F:6A:7D:E1:C7:3C:F4:44:D0:8E:90:5E:65:98:F5:97:A6
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bc:71:e0:71:eb:3d:20:44:d8:ef:55:84:02:49:fb:06:2d:
ad:1d:3b:07:34:98:1d:e6:da:c6:69:eb:8c:03:1b:20:1b:1a:
43:af:99:d2:e7:5a:90:a8:92:7b:a5:59:2b:2e:fc:33:2a:8d:
ae:b8:cb:eb:12:ca:96:b5:11:aa:46:4c:ad:ff:ed:69:dc:8e:
31:a9:46:ac:03:9c:b7:e8:a7:e2:f3:4f:93:65:34:c8:ea:e4:
82:ef:42:c9:80:52:84:bd:f9:67:d0:6e:e1:27:a9:21:4e:42:
0c:85:9a:32:44:d3:dc:5e:b6:26:24:87:22:4f:1d:fe:5e:5d:
69:03:a7:13:72:58:9a:e0:4f:2a:93:7c:55:f6:29:e9:be:62:
6a:41:aa:c9:72:db:0f:64:c0:74:bf:4b:1f:34:13:83:e9:dd:
4a:f5:9d:17:cb:09:c2:96:4d:6d:89:50:55:c3:cc:ca:c9:ae:
6f:36:12:e2:fa:ea:fd:66:85:3b:f2:af:13:42:80:c5:4b:3f:
8e:c7:be:fc:6a:db:60:14:21:9e:bd:59:e5:21:47:bd:63:b4:
6f:b4:2e:17:01:21:ba:43:52:1d:3b:10:c7:45:2d:d5:88:8e:
4f:e2:af:d4:23:10:c4:a7:cf:43:ff:65:ca:5e:24:cc:9d:8f:
b5:f6:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:50 2025 by rpki-client