Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File: gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier: wKDLBEo9PcdyRzRmGE0LIt+c60CbXVJk5oYy2UVWQLw=
Subject key identifier: B2:29:10:7D:2A:A2:0D:7C:46:D3:4D:DC:DD:9A:5D:23:82:D1:71:39
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 01984BF85C546C250CC0102E580B73D73280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number: 0553
Signing time: Sun 27 Jul 2025 13:00:24 +0000
Manifest this update: Sun 27 Jul 2025 13:00:24 +0000
Manifest next update: Mon 28 Jul 2025 13:00:24 +0000
Files and hashes: 1: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (hash: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=)
2: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: WlxUZk8FkXFrxDm7WGadNipRWqNpzDI6K/thv7OGMp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:5c:54:6c:25:0c:c0:10:2e:58:0b:73:d7:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jul 27 13:00:24 2025 GMT
Not After : Jul 28 13:00:24 2025 GMT
Subject: CN=b229107d2aa20d7c46d34ddcdd9a5d2382d17139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:cc:7f:5b:64:1a:21:e8:66:2b:02:69:3a:
77:3f:84:82:d5:58:26:9e:4e:2c:56:af:e1:25:23:
b7:b6:c3:f6:3b:91:15:bf:a6:d1:c4:3a:2a:7a:33:
71:9f:c0:bb:3b:95:dc:28:d9:17:cf:4a:66:24:78:
5e:3c:dc:63:99:8e:0c:36:d7:d9:58:ab:0d:08:bb:
1a:91:7f:ec:d9:64:9d:f3:cf:cc:0c:70:d7:11:d0:
2b:e2:1e:17:1c:2f:91:a4:6f:b8:38:fb:f4:ec:7b:
8f:d3:66:ce:2d:8a:c2:2e:23:0c:b9:53:9b:6b:ce:
75:72:2b:f2:00:19:59:53:90:6e:ed:f4:26:e6:71:
71:65:f9:42:40:40:9e:9d:78:a1:df:27:10:00:97:
e4:14:0d:5d:a5:54:a6:9e:06:99:ac:e9:dd:40:d2:
3a:86:91:ce:df:b4:81:75:f1:e3:02:37:50:c1:69:
3e:da:da:03:d1:57:76:15:25:16:0a:6c:26:51:c6:
dd:06:d2:e4:d1:3d:17:b9:f6:04:0f:50:51:cb:8b:
e5:1a:2b:c2:17:53:ae:09:bd:f3:12:35:de:c3:b6:
ed:56:d3:02:79:e0:d9:66:2b:3f:6c:33:58:7e:1f:
98:32:3b:fd:fb:2e:17:63:22:fc:36:1d:8e:87:13:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:10:7D:2A:A2:0D:7C:46:D3:4D:DC:DD:9A:5D:23:82:D1:71:39
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6c:63:81:d8:91:42:64:a9:1d:8a:68:17:de:e9:b4:3d:6c:
1e:aa:52:13:1e:30:11:11:e6:51:6a:04:ee:2f:ef:99:6a:94:
f2:95:ef:99:e4:60:43:0b:e9:7e:9e:6f:5b:84:c1:8d:36:38:
8e:55:29:66:de:34:fc:e5:78:50:9c:9f:4e:33:ab:54:23:d8:
8e:ea:ad:0b:26:4e:b3:b8:10:e5:ca:c7:69:8e:74:b3:e0:8b:
49:23:f6:af:c5:84:95:f9:dc:73:f4:d4:55:2d:1d:86:0d:b1:
d2:bd:97:5e:61:8c:70:e4:da:e9:b6:d3:d6:7f:e7:04:3f:90:
1d:51:83:ea:a0:cb:04:0b:36:f3:f4:f1:f8:0a:d0:31:63:a3:
17:8f:70:64:ee:4f:be:e9:04:01:22:d8:ab:58:f2:fb:3f:94:
1e:4d:4a:28:b3:c8:0c:2d:d3:51:37:b6:ae:63:6d:71:fd:0a:
34:49:6d:58:09:5a:3d:87:a6:9e:a5:63:3d:43:ff:ce:90:23:
c2:97:c5:f9:ea:f8:66:e6:6f:a1:09:ec:ec:6f:8e:44:13:0c:
cc:87:d6:76:77:5f:2c:e8:d9:8b:56:3c:99:dd:c1:cb:61:24:
7b:b0:f2:2d:af:7e:00:57:9a:5b:0d:e9:da:bd:c2:7f:b8:a0:
d3:48:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:19:25 2025 by rpki-client