Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: vo3JaJ34ex2qmV6psbAZ+u0B+4G08NrFNiBNLv5FAYc=
Subject key identifier: B1:8B:48:DD:E8:C0:28:81:93:9D:3D:3C:5C:E5:14:9B:E7:11:8C:64
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019848F773A9433D34C701D2627246D0148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0947
Signing time: Sat 26 Jul 2025 23:00:33 +0000
Manifest this update: Sat 26 Jul 2025 23:00:33 +0000
Manifest next update: Sun 27 Jul 2025 23:00:33 +0000
Files and hashes: 1: fvmPK9oBYawf3WrvWH2W-IrLack.roa (hash: jbyIzGoc+3nZMPPaYxP5PgX+7SvKTCObiN1ijSSrLNI=)
2: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: YvCgQQMky5gR5CQnjH+YMuss8+TcF5k8t+clEpv/3Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:73:a9:43:3d:34:c7:01:d2:62:72:46:d0:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Jul 26 23:00:33 2025 GMT
Not After : Jul 27 23:00:33 2025 GMT
Subject: CN=b18b48dde8c02881939d3d3c5ce5149be7118c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:1d:6d:8f:15:2e:ab:88:aa:8d:b7:bb:b2:
3d:06:d3:23:a8:b2:a5:e8:ab:b4:ca:8d:f0:18:0f:
20:c6:18:c9:dd:ee:eb:e9:16:b3:51:1b:65:4c:de:
fb:2d:96:a4:ff:3f:05:af:b4:9d:fa:b9:75:e6:8d:
30:5d:9d:47:54:79:c1:34:11:5d:88:2f:df:d2:a0:
16:f1:3c:0a:da:5b:b3:32:40:72:80:a1:d4:3e:ce:
c3:2e:80:6a:cd:3d:f9:7e:42:22:ec:a0:d9:35:ce:
b8:a8:b5:47:f1:0d:b9:5c:fc:1e:91:97:68:c8:9f:
80:c4:c5:1a:6a:d1:bf:97:de:c0:64:d5:14:b1:8a:
b1:5c:b5:f0:a6:61:85:28:27:42:fb:f1:7d:3f:21:
bf:98:99:3e:91:b5:9f:0e:5b:3f:e1:41:b2:d6:07:
3f:c5:9b:27:94:f6:5d:84:bc:8f:20:b1:ad:58:6d:
c9:10:f7:c8:be:c9:3c:88:df:95:7b:a3:93:db:11:
7c:fd:b5:57:cd:98:09:dc:c4:49:4d:c4:a0:ed:be:
5d:9b:85:1c:1a:14:d1:4d:0f:a3:90:40:68:25:41:
5b:a0:cf:af:b3:3c:ef:44:fe:13:05:b6:3a:ce:07:
73:10:26:ef:10:59:61:bd:bd:2d:cd:f4:56:df:98:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8B:48:DD:E8:C0:28:81:93:9D:3D:3C:5C:E5:14:9B:E7:11:8C:64
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:4a:3d:74:9d:cf:6f:e1:8d:b5:ba:5a:5d:6c:a1:10:6a:
c6:05:c3:d5:a1:74:ba:b5:16:50:b8:06:ab:97:0b:db:08:bb:
c5:93:c9:fa:15:22:c2:c3:70:09:7e:1b:6b:69:f7:0e:ce:1b:
ea:28:57:da:89:db:1a:5f:8b:08:17:a3:89:3f:2e:5d:7f:5c:
be:99:2b:39:e7:cd:09:eb:d3:ed:23:d6:d6:79:22:53:ab:83:
f3:21:35:bf:87:43:52:31:9d:33:37:24:3a:cd:47:ca:68:c1:
e8:e8:d3:63:b4:a2:a1:c8:17:ca:51:87:0e:82:71:2a:f0:cc:
2a:41:b9:29:8e:cc:aa:5f:ad:00:77:c0:d6:bc:4e:77:51:21:
09:4b:35:23:16:dc:d1:45:13:d5:28:dd:cb:bb:ed:d5:01:dd:
f3:a8:93:2a:4e:c4:63:46:7e:c8:b5:50:39:e7:93:61:9d:63:
2e:db:01:3c:82:7e:31:9a:6d:7b:e4:4e:dd:b5:4e:3e:a7:72:
d7:08:f4:fd:d8:02:c4:45:d2:0a:4e:ba:7e:7b:49:4d:57:e1:
e9:70:82:03:c0:46:ed:58:df:0c:ec:cf:6c:20:2b:11:c1:c1:
a0:ac:e9:79:e0:27:4e:9d:03:75:15:46:58:14:fc:02:5a:da:
98:ce:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:56 2025 by rpki-client