Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File: gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier: 9Qn+xh3SZCZwRWBz30rHwMTi4sxfRCFoewX5laTir3Y=
Subject key identifier: F0:9D:A9:E6:32:E4:8C:E8:D9:CF:FC:B8:0F:7C:94:31:20:57:48:A0
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 019921B191A28B608A84E58FD5334B0EDF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:01:49 +0000
Manifest this update: Sun 07 Sep 2025 01:01:49 +0000
Manifest next update: Mon 08 Sep 2025 01:01:49 +0000
Files and hashes: 1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: F+NX9oY//RjMy0JsCVGLPJUzUZMZbLQja6hvcwcc7+A=)
4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:91:a2:8b:60:8a:84:e5:8f:d5:33:4b:0e:df:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Sep 7 01:01:49 2025 GMT
Not After : Sep 8 01:01:49 2025 GMT
Subject: CN=f09da9e632e48ce8d9cffcb80f7c9431205748a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:de:a9:de:66:e0:2e:92:54:f2:c8:7a:54:
59:60:c3:85:e7:c4:24:cd:a3:6b:7d:6a:b2:15:6a:
2c:4a:4f:6b:a9:d8:a7:bb:cc:25:2b:e5:a1:e8:3d:
e5:d7:bc:21:e5:24:4c:52:de:e0:7f:46:e5:4c:9a:
5d:4d:75:66:46:0f:9d:1b:1f:d9:28:c2:a6:60:70:
ab:d1:e1:9e:66:6a:27:99:49:89:e4:f3:87:80:21:
a0:84:0c:73:0b:dd:bd:4a:4a:cc:23:9b:f8:dc:6e:
13:a4:a4:f2:3b:25:dc:de:7e:de:80:f4:a9:e7:96:
fc:a3:a6:4e:92:1e:8b:ec:9d:3c:f3:4f:fd:54:5c:
ae:4a:93:4d:4a:6f:52:da:22:3f:10:73:e1:c6:a6:
b1:de:d1:b8:f3:7a:02:01:9e:52:6d:0e:9d:1f:c3:
bd:da:17:f5:fc:be:7d:3c:1b:02:8b:f6:88:c6:b4:
25:27:df:f5:74:06:03:bb:d4:8f:ed:a9:f1:ee:52:
ca:23:9b:6a:81:df:53:b9:c1:f5:33:d9:9b:8f:4a:
f7:35:2a:a7:19:0c:ea:e8:d9:64:58:dd:52:c7:e9:
ef:94:57:e2:b7:60:8e:d3:bc:1c:f4:ee:4f:30:2c:
51:e5:96:83:d4:d4:60:72:65:83:fb:82:7b:aa:3d:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:A9:E6:32:E4:8C:E8:D9:CF:FC:B8:0F:7C:94:31:20:57:48:A0
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:6d:14:e0:dd:a0:54:6c:0b:11:8d:f6:16:ba:b6:31:4f:
97:2c:69:f1:8c:d7:f5:dd:c4:8d:ef:db:55:17:41:0b:c0:b6:
ba:66:17:17:b3:8f:f6:1a:0e:68:38:65:22:1d:14:9a:2f:96:
42:4f:73:87:2e:ec:02:d6:3d:06:87:4b:80:41:ee:d2:b0:2a:
a5:a1:c7:56:fa:3f:99:40:81:3a:ec:e0:de:8e:42:c2:40:39:
2c:98:d4:f8:2d:13:b1:88:1b:66:c4:12:cd:08:cb:27:50:56:
f9:2b:36:67:94:55:3b:ea:4d:31:83:85:49:8e:9e:b0:71:01:
70:55:1e:8b:39:a0:8e:98:e1:a2:e7:51:55:a8:99:0c:31:86:
d9:be:77:a8:4e:71:e8:0f:b0:79:ee:aa:03:4e:f1:45:af:eb:
8d:d6:bb:fe:59:11:95:5d:93:5d:95:b1:a5:59:10:d5:b6:5b:
0d:a5:40:bb:1c:12:e8:a8:57:10:63:63:47:21:2e:b0:bf:fc:
0f:cc:fb:c8:41:41:6a:47:96:0d:4e:b0:d1:b6:59:2e:7a:a7:
cb:82:19:c2:d0:fb:1d:8c:32:ea:ce:a5:bf:12:26:63:47:dc:
8e:84:95:fb:1c:e6:b8:fb:48:bf:f4:fd:1a:00:ed:9d:68:d6:
15:57:51:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client