Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: teUuiThorb1GohkTDrcN8VDCJNvWyCK0uWSVlpl/0do=
Subject key identifier: 79:FE:56:A4:C6:89:6E:15:6D:4F:83:49:B4:AF:0B:97:67:0D:3B:A3
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 01984B53AE19465BB9C81CBC0BBE5F84A6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 0688
Signing time: Sun 27 Jul 2025 10:00:31 +0000
Manifest this update: Sun 27 Jul 2025 10:00:31 +0000
Manifest next update: Mon 28 Jul 2025 10:00:31 +0000
Files and hashes: 1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: sVdDa+gSEQLpoRHSWOAI36YUTPu6Y2YZs2WN9yVm2es=)
2: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (hash: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:ae:19:46:5b:b9:c8:1c:bc:0b:be:5f:84:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Jul 27 10:00:31 2025 GMT
Not After : Jul 28 10:00:31 2025 GMT
Subject: CN=79fe56a4c6896e156d4f8349b4af0b97670d3ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:a0:e5:e5:90:9e:21:3c:d9:2c:bb:08:1e:
e9:09:41:3e:8f:38:4c:47:7f:f6:25:6d:91:d8:b5:
c5:e3:88:57:40:da:7f:59:ff:5c:4c:54:6e:7d:2f:
77:8a:27:14:6e:f4:be:c7:97:9f:54:cf:61:4c:65:
a1:c8:9e:24:b3:48:2e:20:b1:29:0c:81:fa:2f:a4:
c0:28:fa:eb:6c:97:7e:40:4d:79:46:c7:d5:e8:89:
35:97:d5:b5:c6:bc:28:ab:d5:b2:88:db:ab:a4:4c:
f3:da:1f:79:13:e4:64:ad:f2:b3:86:eb:14:f4:b6:
1b:00:33:ef:8c:4b:ad:8b:a9:79:9c:85:49:47:85:
6d:a0:c4:c5:07:c5:65:c3:b4:29:45:2e:3b:23:4f:
ae:ee:e7:4c:93:07:5d:c5:89:16:42:29:12:91:9e:
3e:55:cb:bc:89:98:a0:75:dc:ee:10:24:56:85:f6:
a1:6f:74:1c:50:9a:4c:d5:a6:70:6d:f2:d7:6a:ff:
39:5d:55:a1:67:5d:82:dd:48:0d:52:3c:07:b0:2b:
ae:4c:af:cc:ec:68:4c:ea:11:6f:76:78:89:bc:9d:
0a:6d:4c:d7:e4:0d:37:54:af:ee:af:6b:38:dc:0f:
51:46:01:44:f6:6f:c2:d8:09:c4:a8:ee:fc:8a:9c:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:56:A4:C6:89:6E:15:6D:4F:83:49:B4:AF:0B:97:67:0D:3B:A3
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:53:ad:d2:d8:56:00:dd:a9:66:9c:cc:15:ea:28:5e:ba:
3c:04:54:0d:ad:8c:89:6a:6c:88:05:4a:b4:85:ef:fb:fa:46:
88:c9:97:1c:60:37:f1:06:4a:81:86:67:6b:90:21:36:4e:b3:
36:94:30:6e:0b:ba:f2:2d:8b:0f:fe:5a:69:57:81:9a:01:dd:
91:96:e5:9a:9d:be:df:83:3a:a0:12:57:7a:06:48:83:47:57:
82:9d:81:b6:d3:1d:c8:ff:36:24:d9:03:95:cf:1a:49:e6:dd:
da:38:60:04:7d:d2:a3:a3:e6:2b:07:f5:b5:1c:5d:93:b4:ba:
69:3d:ca:d9:6d:c5:00:eb:83:39:4e:cd:ba:48:dd:6f:2b:e0:
53:78:56:cb:ad:45:5d:23:56:d7:20:8b:f7:2c:41:97:ea:9e:
5c:69:44:a0:e8:79:a5:68:7d:05:d3:4f:d2:7a:df:4b:e3:49:
76:8f:6f:26:9a:82:1a:40:5e:df:bb:2a:43:a3:cf:d8:2f:83:
56:38:08:86:d0:32:78:73:ef:d6:5a:a2:57:fa:a9:03:d1:67:
34:5a:29:81:d9:a5:b2:a3:02:f4:b5:88:0a:b1:1f:69:93:38:
9b:a6:cf:e3:ca:49:72:27:e2:d8:fa:e6:07:ef:fb:f4:3c:81:
2f:81:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:36 2025 by rpki-client