Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
File: gPNFqCznFt0-djMXL4cDBH9rfZQ.mft (raw, json)
Hash identifier: 7pCRZbKMxDIQlqQXiO8dFQazGAOfQtVmMXqthToC/gI=
Subject key identifier: 98:A4:C5:F4:31:7E:D6:2E:48:20:72:1B:3D:FE:10:2A:DE:B8:5D:A5
Authority key identifier: 80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
Certificate issuer: /CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Certificate serial: 019921B0F7DE4A036ED89655C889141900CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 01:01:09 +0000
Manifest this update: Sun 07 Sep 2025 01:01:09 +0000
Manifest next update: Mon 08 Sep 2025 01:01:09 +0000
Files and hashes: 1: gPNFqCznFt0-djMXL4cDBH9rfZQ.crl (hash: XnqCRhO9GlhHv7nXRlJEGPQVY6u2ZVX/yTL60thIinc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:f7:de:4a:03:6e:d8:96:55:c8:89:14:19:00:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f345a82ce716dd3e7633172f8703047f6b7d94
Validity
Not Before: Sep 7 01:01:09 2025 GMT
Not After : Sep 8 01:01:09 2025 GMT
Subject: CN=98a4c5f4317ed62e4820721b3dfe102adeb85da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:b4:93:fc:35:57:6c:c6:d7:a0:0d:85:f6:
b2:4d:d5:bc:70:b3:ab:f5:15:ef:6b:52:cc:5e:01:
6a:de:de:e9:8a:ea:c9:99:fd:cd:3f:24:42:4f:d6:
22:8d:db:c3:72:50:d5:86:97:5f:51:43:dd:68:6f:
b1:4a:ec:fd:68:73:fe:62:3d:af:73:68:57:38:ae:
d4:c6:6c:6c:e2:49:05:5e:7a:e3:ca:ce:a0:d6:73:
ef:80:3e:ed:a6:10:54:79:08:5a:e5:5e:37:d4:f2:
61:4f:f8:7c:8d:5b:ac:43:e2:69:7f:6e:7c:57:de:
1a:a5:5d:42:bf:aa:25:66:98:37:25:fc:4d:5f:0a:
b8:3a:11:86:4c:89:87:2d:56:c2:82:27:bd:9c:c8:
e7:15:c3:bf:cd:7e:4a:23:08:1a:66:df:57:16:0a:
af:77:48:b5:4e:f0:f7:70:ed:8a:69:43:7d:a1:81:
75:ab:41:e8:50:9d:28:bf:a7:e2:d4:c8:cf:69:39:
32:d2:d8:fb:e1:8a:90:6c:91:89:50:b5:57:93:72:
4f:92:0d:5b:70:a9:4e:fa:93:b0:cb:e1:91:66:f3:
21:67:b6:b2:29:61:dc:a9:5c:27:dc:05:87:c5:e2:
4b:5b:40:1b:ad:b4:1d:01:ba:fe:1a:86:29:ee:a5:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:C5:F4:31:7E:D6:2E:48:20:72:1B:3D:FE:10:2A:DE:B8:5D:A5
X509v3 Authority Key Identifier:
keyid:80:F3:45:A8:2C:E7:16:DD:3E:76:33:17:2F:87:03:04:7F:6B:7D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNFqCznFt0-djMXL4cDBH9rfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/091330-5f83-4ad1-9e10-74c5db7c093a/1/gPNFqCznFt0-djMXL4cDBH9rfZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4d:61:81:e3:c8:4f:29:ee:2e:2f:1e:43:3d:a4:78:7b:cc:
7f:84:45:ea:b1:c1:3c:34:fb:e7:39:ae:48:5d:81:a7:5f:b4:
a1:78:54:9a:93:2c:52:b2:f2:4d:3e:f2:47:0d:b8:e0:72:96:
16:32:90:46:6d:e6:82:df:19:94:11:ad:42:0a:32:9a:53:2b:
51:2d:ea:16:50:82:d7:75:1f:25:01:c0:b2:34:c6:ae:f2:5d:
29:0d:2b:4c:33:be:93:b6:63:5e:56:1d:29:ce:93:41:cb:bb:
54:b2:1c:7a:02:69:53:2d:b5:4b:e0:9a:65:8d:22:d4:04:9d:
3b:3d:99:e5:2f:d0:83:fc:72:65:a1:8c:48:8a:4e:81:5a:83:
9b:01:9f:02:f8:74:b3:e6:bd:81:dc:04:33:7f:95:52:a0:1f:
1c:5c:59:c8:9a:51:34:20:eb:83:22:3a:99:e7:3a:94:30:a5:
85:c5:e1:09:3e:7e:16:4b:b9:8e:d4:44:ca:aa:6c:61:28:f7:
3a:a7:04:60:c2:42:c5:84:2c:c1:f7:a8:dd:01:f1:b6:93:59:
6e:04:2c:d3:3b:b7:59:60:95:da:3d:3c:79:90:8d:e5:a8:f0:
24:35:7f:9a:e6:25:6e:de:65:8e:73:77:1c:b8:19:48:3f:72:
f7:6d:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client