Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File: gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier: BMM9DVhfmHSgKPtkWDoUOj8BcGhD/6sg+L2KnrrnoDk=
Subject key identifier: 4E:CD:11:73:ED:1B:51:42:C0:2B:F3:A6:EE:2B:DB:FB:4C:59:BB:9E
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 0198439A37378D7566B0C60BF72CC1455F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number: 0CA7
Signing time: Fri 25 Jul 2025 22:00:36 +0000
Manifest this update: Fri 25 Jul 2025 22:00:36 +0000
Manifest next update: Sat 26 Jul 2025 22:00:36 +0000
Files and hashes: 1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: oBoM1Ih5oB2xE2Ob3G6+kr3Zp3fIN3wsA8+DE0ewYoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:37:37:8d:75:66:b0:c6:0b:f7:2c:c1:45:5f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Jul 25 22:00:36 2025 GMT
Not After : Jul 26 22:00:36 2025 GMT
Subject: CN=4ecd1173ed1b5142c02bf3a6ee2bdbfb4c59bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:b7:e3:af:0e:0b:6b:04:68:1d:ec:8f:ad:
f5:3b:e2:01:b2:e3:ab:b2:a9:d8:9a:a7:cc:40:8d:
74:ce:4d:ef:12:43:88:f6:34:8b:aa:13:f5:4f:c8:
f0:76:f5:e0:7b:a4:b8:05:7f:8a:83:ef:69:dc:de:
6e:2d:a2:b7:d3:c8:f1:98:af:04:21:56:63:1a:25:
9e:ea:16:1c:4a:77:28:b6:05:1b:36:81:73:a3:1d:
3a:09:5e:a1:70:8c:37:33:66:5d:c6:2c:b0:d4:87:
a4:1c:a6:03:fd:04:65:58:a6:37:28:55:d2:12:03:
41:c9:b6:29:07:e7:99:d5:8b:c4:82:df:07:33:f1:
19:37:ce:ed:0c:5c:e5:6a:24:0c:41:24:dc:14:35:
07:02:ee:dc:37:56:32:8c:5a:22:c6:a5:2a:8d:52:
5b:ab:d8:ed:83:be:3c:34:8d:33:c0:40:c8:6d:34:
93:f3:00:c8:b9:1a:55:d0:06:85:79:e4:ae:7d:c9:
cc:17:9e:ed:3b:52:36:c1:21:8d:6b:39:80:8a:5e:
29:0b:7a:67:35:cd:80:35:f2:e9:f7:ce:6f:c5:7d:
0e:ad:ad:c6:e7:44:15:0f:8f:82:4d:be:e0:42:69:
7d:5c:f3:c0:86:1c:86:7b:c0:60:d7:67:72:f0:42:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:11:73:ED:1B:51:42:C0:2B:F3:A6:EE:2B:DB:FB:4C:59:BB:9E
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e5:60:a1:80:ee:8b:5a:c0:ba:59:b5:90:71:c1:24:6f:03:
7b:d8:82:5d:b4:4f:93:36:92:e8:6f:d2:e9:86:cc:35:f6:f1:
44:c0:74:c7:f9:35:6f:0d:6b:11:3a:c8:e2:e3:67:b8:9b:e8:
f1:c8:f8:83:92:af:41:b1:4d:6a:bf:d2:5b:45:32:6f:5f:8e:
f5:99:46:17:46:fa:11:2c:b5:30:23:3a:13:94:a4:bb:7c:3f:
99:7f:2f:b1:e5:70:9c:96:95:92:ef:04:72:42:ef:11:98:98:
c6:6f:9f:73:af:db:62:26:94:c1:aa:27:16:b7:39:bc:8f:2b:
00:48:fc:5f:92:9a:0c:43:7f:52:6f:74:d0:b1:c0:98:eb:fb:
6c:5b:e9:4b:31:97:61:bd:05:67:40:61:f3:b6:12:ec:24:c8:
a0:3d:46:f7:01:91:7a:78:5a:ac:d2:4b:f7:11:a9:5c:6a:06:
26:92:c6:76:d0:6d:36:e1:d4:37:d5:88:21:c3:97:7a:8d:e0:
1e:97:cb:3b:7e:a8:65:f1:5d:cd:69:a8:81:fd:e7:2f:3e:43:
b9:bf:85:e8:b1:6c:fd:17:7f:a6:54:1b:5b:2f:4f:ae:26:cc:
33:7c:8f:04:54:f3:1a:fa:11:bf:8f:84:f1:d2:06:7c:51:3f:
27:be:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:15 2025 by rpki-client