Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: qaqBp1C+lzrgl9ih0u8JeFdWtPqJcmDE/r/deUsuBbs=
Subject key identifier: 0C:AA:06:A9:D4:5E:F0:D4:BB:64:D7:F3:67:1B:4B:23:DA:20:1D:4B
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01984A0A3A8829274857AFEA9FB70EE2EB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 04:00:40 +0000
Manifest this update: Sun 27 Jul 2025 04:00:40 +0000
Manifest next update: Mon 28 Jul 2025 04:00:40 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: +g2AJ+HncpkqAcIwQwhwlkyISoUfv5oHq5/v5548gN0=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3a:88:29:27:48:57:af:ea:9f:b7:0e:e2:eb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jul 27 04:00:40 2025 GMT
Not After : Jul 28 04:00:40 2025 GMT
Subject: CN=0caa06a9d45ef0d4bb64d7f3671b4b23da201d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:f5:2b:87:55:54:a5:fd:4e:d8:d7:53:ba:
2d:01:e2:55:e9:a3:62:1f:f3:3b:3d:42:7a:1f:8e:
92:2c:3b:9b:18:0e:da:c7:32:5d:40:b5:ef:4a:0f:
68:70:eb:0f:e1:ab:1c:f0:d1:77:46:99:74:58:e0:
ed:4e:f2:38:ac:92:ce:d7:5c:cb:0c:88:6f:57:b3:
84:57:87:8d:fb:98:79:04:ec:bf:93:da:c3:4b:c7:
f4:a1:74:e5:a5:52:95:0f:8d:a8:4d:a7:d8:0b:45:
f5:79:ad:b1:33:7a:36:8d:b9:d2:8e:e3:aa:e1:46:
58:82:c1:d3:9a:bb:8f:b9:01:af:fc:f1:f5:d6:d9:
bb:be:f6:b5:fd:28:a7:30:29:d7:21:20:b1:e4:ff:
e3:19:95:63:f0:aa:9c:f9:a3:b5:49:f8:8a:01:39:
e7:a6:48:66:85:f3:49:aa:7e:48:e7:b3:f1:5e:2f:
19:0b:f0:e6:68:e3:bb:8d:0a:01:f5:38:eb:6c:28:
43:d1:be:a4:5f:6b:a6:6f:e2:16:fb:60:ed:f1:fe:
d1:03:a7:c6:74:a9:59:33:cb:07:92:6a:84:b9:69:
0c:d6:0e:8f:c7:6e:a6:43:36:9a:6e:73:24:38:90:
32:81:b0:87:a9:8a:b0:f2:76:38:53:bb:79:b5:38:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:06:A9:D4:5E:F0:D4:BB:64:D7:F3:67:1B:4B:23:DA:20:1D:4B
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ed:28:d3:e0:46:ff:d3:b7:47:00:ec:47:4c:14:95:4a:57:
7c:bb:44:56:83:07:9e:25:56:2e:42:bd:f7:b6:a6:72:62:df:
75:b7:51:79:f9:91:13:de:c4:95:21:bf:aa:ab:c8:92:60:95:
38:6d:85:d0:c5:1d:03:1f:fc:36:3c:55:80:31:73:f5:77:4e:
33:2e:84:3c:72:0b:9b:c2:0f:4b:6b:ed:ba:47:c0:dd:76:e2:
e8:75:b5:ed:2f:dd:cb:06:80:c0:f5:77:88:f2:b5:b7:70:d6:
ef:d8:a0:dc:2f:0f:d9:0d:45:62:e5:57:ff:ca:62:33:67:ab:
fc:4a:9e:90:96:4a:81:de:f8:8b:84:e1:8a:e6:90:1c:d0:10:
b9:67:d9:a3:92:2a:dd:a9:98:41:09:08:51:8e:4e:78:34:d6:
f5:47:77:e8:36:60:f8:c8:fb:36:05:be:37:34:3c:b5:b6:ca:
e6:80:ed:00:e4:98:f3:4d:79:d4:97:cd:b4:a8:94:09:26:54:
79:1a:92:43:08:b4:a5:43:88:8a:f4:e3:b2:b1:af:24:eb:37:
de:60:a8:94:d4:4f:d2:41:da:ca:93:65:26:79:7b:70:fe:cc:
d2:ec:f0:e5:5a:a0:3d:10:8a:8a:d5:37:93:9f:d9:61:3e:10:
c0:5b:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:26:47 2025 by rpki-client