Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: mby/4O/0+qFwFzMi/4Cn2Gd2eDWVfbhyhNuHvNMoMao=
Subject key identifier: 6A:7B:AB:C2:52:99:42:FD:EF:88:11:63:74:2F:1C:31:42:C2:AF:68
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 01984B8A9A1EB3AD54CAA9F37CFFB5FC9C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 04CA
Signing time: Sun 27 Jul 2025 11:00:31 +0000
Manifest this update: Sun 27 Jul 2025 11:00:31 +0000
Manifest next update: Mon 28 Jul 2025 11:00:31 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: SzQkrDkk5Qq4bQ8cNnkoRG5JXXafDMkgLKdZglnOCYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:9a:1e:b3:ad:54:ca:a9:f3:7c:ff:b5:fc:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jul 27 11:00:31 2025 GMT
Not After : Jul 28 11:00:31 2025 GMT
Subject: CN=6a7babc2529942fdef881163742f1c3142c2af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:d7:5a:e6:fa:38:5b:26:69:15:57:2d:85:
c0:ce:79:ef:1f:91:3e:57:c1:d1:7e:79:57:86:d5:
7a:28:19:e8:2c:bb:a5:0e:6a:ee:b0:e3:39:06:1f:
8f:0a:0d:10:b4:a0:19:2d:82:48:f7:21:0a:de:97:
56:93:11:f7:26:71:5f:f5:c9:21:3e:1e:93:e5:db:
b9:df:e8:44:5d:2a:56:2c:95:3e:b0:b4:7e:97:b4:
62:b8:bd:7d:bf:f5:d6:a0:33:0c:6d:c4:e2:0f:a5:
12:d8:dd:f2:ba:36:f6:b1:e0:e7:1a:3a:91:65:b8:
e6:dc:a6:c9:d5:d4:b5:ea:a1:d0:5a:94:a4:68:58:
e0:62:5a:d7:d3:84:7a:76:ad:72:d4:e9:32:d9:ff:
16:57:43:91:cf:bd:1c:73:d6:3c:f3:6d:2b:8e:8d:
e6:d0:2b:f3:71:3e:9b:32:6d:7b:8a:70:51:15:c1:
24:6c:b5:79:8f:90:4d:af:e2:8a:ca:c2:82:0e:70:
4e:0a:5a:59:fb:1d:3d:28:ea:7c:8e:99:33:7c:cd:
4a:b3:c1:e7:a2:d8:5e:dd:24:e2:a7:76:28:d3:24:
d8:8e:57:b7:92:74:57:e4:3e:48:ae:e8:22:ab:cf:
f8:45:4f:3a:0e:02:1c:c1:45:4b:f4:f2:49:42:09:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:AB:C2:52:99:42:FD:EF:88:11:63:74:2F:1C:31:42:C2:AF:68
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7a:0a:69:15:cb:2c:b3:2c:f3:d9:42:df:99:71:41:01:8a:
62:b2:53:1e:20:2e:86:34:f3:9c:92:76:c3:60:42:9a:09:c5:
69:9e:7e:7b:ec:e7:e4:ff:71:54:7a:a5:f8:a2:9c:ca:ba:ec:
a4:44:cf:b4:05:9c:f0:3b:82:e4:25:11:80:7b:9b:56:e0:c3:
70:c9:7f:22:ec:9e:1e:da:fc:5b:f0:0c:ab:e7:e7:f1:37:1e:
72:26:5f:fb:96:58:6a:f9:21:ac:85:fb:de:10:0e:32:7a:10:
98:ca:1c:be:3c:0e:fb:2b:38:3c:64:0a:7e:a4:a4:f7:70:f5:
51:9a:d9:b7:71:1e:86:4b:c2:53:16:2d:e8:0b:f6:c8:68:eb:
e1:b9:af:a8:44:3b:cd:6a:59:21:63:35:14:b6:bb:8d:6d:74:
d4:2e:0a:89:83:dc:db:3d:71:74:a5:35:9d:65:f1:75:08:9e:
0c:6e:20:db:8d:99:d4:b4:62:62:1c:ef:2b:e1:a1:dd:69:63:
c1:e2:e1:60:bd:7d:72:06:0e:4e:16:6e:18:e4:93:82:02:b4:
f4:43:fb:f5:44:b0:6e:75:2a:4f:da:27:ab:bf:50:fa:9f:c2:
a4:40:d3:08:7a:fc:10:7a:36:f6:d4:a4:d3:42:a7:44:a4:54:
f4:fd:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:45 2025 by rpki-client