Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: 6zPhCHfiRT6L9GnzuJgKXusFWd2dgRf98WGOchOEZ5s=
Subject key identifier: 03:CD:89:1C:76:6F:CF:9F:6C:8A:60:EE:73:42:56:21:95:A8:FE:94
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0199221E57BF4C4DC1AFCFBFD18A684E80EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:00:37 +0000
Manifest this update: Sun 07 Sep 2025 03:00:37 +0000
Manifest next update: Mon 08 Sep 2025 03:00:37 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: pFSxIY3kzCccZ3AJthkDpnXTqKZ6PnSeRXRCBgWNDo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:57:bf:4c:4d:c1:af:cf:bf:d1:8a:68:4e:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Sep 7 03:00:37 2025 GMT
Not After : Sep 8 03:00:37 2025 GMT
Subject: CN=03cd891c766fcf9f6c8a60ee7342562195a8fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9b:fd:3b:0e:53:96:7d:ce:f9:3c:32:6d:1c:
0b:98:8d:bb:3a:54:59:88:52:38:e5:7a:e9:39:95:
6f:d3:ba:dd:5d:7f:0b:23:26:46:53:fa:3e:8e:02:
40:14:e3:e4:86:27:49:98:98:f8:24:a0:65:6a:97:
14:75:22:20:6a:75:27:8b:2b:c7:4b:c6:89:69:e4:
de:e5:61:4c:14:cd:e4:9e:7a:7e:cc:49:b3:98:58:
2f:2e:77:18:f6:48:2a:5b:91:73:5b:ce:4f:9d:7b:
9d:91:64:83:3d:ed:50:a3:e9:15:f1:9c:dd:90:45:
b7:d0:3d:61:14:0a:5a:96:3a:37:df:65:87:0a:95:
23:02:b0:1f:bb:99:d6:89:57:1a:b5:f7:de:23:20:
23:be:0c:1c:e6:3f:15:02:a8:c8:a0:a4:1b:52:fa:
75:9d:75:15:e4:6e:d7:05:f8:cf:02:f8:af:8d:0d:
4a:43:04:67:cd:85:0c:7e:cd:25:c4:a0:b2:b6:58:
b1:d8:20:75:12:e8:54:5e:46:84:12:b7:f5:e5:2f:
c7:ae:11:ee:52:01:cc:9b:6b:35:7f:ab:b5:cb:5c:
00:bc:3f:0d:58:a3:50:0f:27:93:12:f0:cd:ab:bd:
b8:6c:63:73:a3:8c:63:9f:b9:49:5d:d2:cd:bc:47:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:89:1C:76:6F:CF:9F:6C:8A:60:EE:73:42:56:21:95:A8:FE:94
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:db:30:9a:f7:94:84:2a:d0:45:1d:83:1e:4f:a6:35:e6:21:
a4:e8:7e:5e:89:30:84:6d:e8:4b:ca:02:db:be:12:4f:de:6e:
7f:fa:50:89:bb:74:39:bf:57:46:c7:86:81:43:ed:d2:05:e5:
6e:e2:55:e1:95:e5:91:63:28:31:48:37:55:6f:a4:5a:ae:e3:
25:72:73:7a:42:1b:df:f5:2c:19:dd:9d:8a:4e:49:c9:f8:b2:
60:97:b3:ea:6b:14:d8:09:9f:af:3c:a8:8c:4e:5e:28:95:7d:
7f:42:34:32:08:b3:1d:8b:43:7f:8e:30:e7:67:87:b1:67:ec:
fe:48:ca:1f:a8:f7:0a:67:e3:68:80:3f:3a:2f:cd:90:c1:60:
29:61:e5:b1:24:3e:de:f4:7e:e8:76:c7:15:96:16:bd:65:25:
3f:f0:7d:43:2d:86:31:84:2c:e4:9d:83:6a:a7:41:ec:5f:66:
88:f1:34:d5:00:89:46:d1:51:dd:ae:bd:4f:a8:d0:1c:6a:5a:
85:a0:2b:c5:2f:c9:f9:e0:be:10:d2:f3:1d:91:5d:de:0a:d8:
7a:31:39:d0:72:79:6c:c5:d6:c6:63:79:b3:69:3b:77:f3:83:
cb:be:cb:4f:d2:99:63:ee:8f:a5:21:b2:fe:1d:86:b5:af:42:
e1:1f:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:40 2025 by rpki-client