Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: tokr0yq6U6lxCTquK8rR+sA/R1V8fW1r/kbGB17VR40=
Subject key identifier: 16:F5:8E:A8:B0:7B:BE:F9:C3:53:9F:6F:EF:78:0C:C2:22:2E:DF:60
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 01985042E2AA92B127F06FA85EFCF8E963C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 09:00:17 +0000
Manifest this update: Mon 28 Jul 2025 09:00:17 +0000
Manifest next update: Tue 29 Jul 2025 09:00:17 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: lvX88jR/w2TLxvzoNdD3iV5VrsxQHf79gaW0vteXVNw=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:42:e2:aa:92:b1:27:f0:6f:a8:5e:fc:f8:e9:63:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jul 28 09:00:17 2025 GMT
Not After : Jul 29 09:00:17 2025 GMT
Subject: CN=16f58ea8b07bbef9c3539f6fef780cc2222edf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:f4:95:72:39:79:8a:09:aa:5f:36:a7:0e:
5a:0b:57:f4:d5:c2:ee:ac:39:fe:34:7f:08:0a:23:
51:a2:e8:07:ee:6d:f4:b8:37:c0:af:a3:90:a0:9c:
8c:44:f0:6d:91:e7:35:72:1c:3c:40:3e:f8:2e:42:
48:d9:96:d4:f9:de:77:dd:e0:d6:4f:3b:ed:2b:87:
22:da:5d:96:ca:25:e2:74:14:1c:af:9f:c8:2e:ef:
cd:55:46:0b:e5:86:c5:30:e6:16:ae:33:06:11:2e:
12:ec:7a:08:8c:e9:06:7f:86:2c:c2:75:5e:77:52:
94:89:df:59:b8:a3:e2:e0:8a:1c:d9:07:7c:c1:50:
ee:89:92:b4:78:c8:18:cc:c1:27:95:7b:fb:7f:72:
53:ff:39:cd:1e:09:92:85:21:b5:84:7a:00:27:e9:
57:e2:ce:47:45:6d:8e:c9:d3:c9:e1:9b:1a:73:0d:
dc:65:c2:bc:6a:6d:eb:8b:71:ad:f3:f9:16:d4:3a:
c7:b6:22:45:25:0b:22:4f:76:60:b7:e4:02:37:3e:
b8:34:44:e3:59:67:ce:9a:09:27:93:32:51:91:96:
d1:b1:98:03:f5:1b:ff:52:15:3d:6a:d6:f1:23:f1:
95:da:15:81:22:2b:7b:0f:a6:ed:c5:3f:c7:f6:af:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:8E:A8:B0:7B:BE:F9:C3:53:9F:6F:EF:78:0C:C2:22:2E:DF:60
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:57:68:13:8d:a7:d9:4e:d5:ea:92:cc:80:d5:4f:6f:8a:8c:
68:d7:11:98:ef:71:7a:22:e2:1d:a3:4a:c4:4c:cd:17:b8:fe:
e2:c8:54:22:7b:4d:b2:41:e4:91:ce:04:05:7b:7d:f2:25:91:
10:bd:37:70:4b:bd:30:94:19:d5:e3:13:b9:4d:35:68:d3:2e:
b7:84:5b:04:24:40:19:3f:c1:06:17:31:5c:25:6c:55:15:8f:
ab:92:db:9a:c8:c8:fa:7f:72:f8:81:aa:52:17:6d:aa:23:ca:
e0:90:c3:f0:db:f2:a8:5d:75:b5:1c:11:b8:07:b8:16:f0:f5:
6f:cd:c5:da:83:be:ef:a3:ff:ef:b9:84:db:4b:c8:4a:95:a6:
a8:11:32:66:40:31:1d:86:aa:2e:03:8a:7f:07:d8:11:08:89:
2d:5f:1b:69:4f:5e:00:2e:05:ae:cc:f5:2f:c4:da:17:e6:5b:
7f:ed:9b:a0:b2:2b:c6:49:08:f6:a0:56:87:5d:da:38:a7:82:
d7:93:00:e0:56:e0:61:85:4e:b7:77:25:bc:b2:fb:d6:a4:88:
9b:e2:65:8f:e5:58:c8:72:69:64:9d:bd:f2:49:b5:40:37:99:
c3:f2:ec:00:06:cf:2e:71:3e:04:28:21:9f:58:01:7d:74:d0:
54:88:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 16:40:12 2025 by rpki-client