Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: nP7mNT632jaIokfJU2tR3cUeyWPG/AlCyMw6T/jxRNM=
Subject key identifier: 8E:36:BE:D1:57:A2:EC:5F:21:0F:88:2D:8C:F2:82:37:96:C8:38:87
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0197496810E7FE18378007E040DF8769AB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 08:00:46 +0000
Manifest this update: Sat 07 Jun 2025 08:00:46 +0000
Manifest next update: Sun 08 Jun 2025 08:00:46 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: s22f2Ox9roQpvuF/XqTkB5CFe9AbS4J3l1N8m1elOUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:10:e7:fe:18:37:80:07:e0:40:df:87:69:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jun 7 08:00:46 2025 GMT
Not After : Jun 8 08:00:46 2025 GMT
Subject: CN=8e36bed157a2ec5f210f882d8cf2823796c83887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:e8:71:1b:57:b3:3e:1a:c5:5c:ff:06:20:
2c:0a:17:eb:ed:07:7c:e2:7f:8d:be:dc:81:f0:61:
f9:ae:3c:05:7f:fe:82:fe:61:4e:09:9f:46:2e:c1:
d6:4e:e0:f0:7e:0a:42:0c:06:b9:a1:c3:ab:22:b8:
fe:36:02:3e:2c:44:09:b3:99:92:84:f2:d9:3d:58:
c7:fb:9f:40:15:25:e3:34:21:6a:6a:12:3c:ee:5b:
86:84:bb:e1:9c:e3:3d:ea:5d:5c:49:c2:26:de:9d:
c4:27:73:84:1f:c1:0f:8a:02:d5:d2:1c:6a:56:56:
2e:90:dd:19:2d:e7:b8:47:f8:e5:4b:7f:bb:d9:83:
8a:89:bd:80:09:2d:fc:c4:8c:a6:a7:d7:5b:1e:cd:
92:0d:8f:59:ab:b0:d8:39:31:53:fe:ed:db:19:e1:
ac:29:03:01:c2:39:44:a7:02:1b:b9:99:39:e1:8a:
e6:b9:3f:1f:de:a5:ca:58:3d:6d:6c:a8:cd:49:8e:
cb:ed:7f:16:ff:44:8d:9c:9c:48:36:2a:4c:0d:34:
77:ea:80:05:dd:8a:70:c2:1b:f4:fc:3c:10:27:d1:
a9:68:36:59:b4:17:90:82:9c:c0:ef:3e:b2:c0:2d:
a3:1e:8f:d6:30:84:01:55:f7:3a:8d:9c:b6:f9:3b:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:BE:D1:57:A2:EC:5F:21:0F:88:2D:8C:F2:82:37:96:C8:38:87
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e1:21:d2:e9:14:c6:37:56:b8:f6:ca:a9:e6:ad:4c:f6:2e:
f3:0c:8b:9e:41:ef:6e:9c:4a:f1:4c:59:89:a9:d6:e7:8f:49:
6a:0c:c9:50:1f:ce:15:88:3e:93:1a:2c:d8:54:57:24:5d:4b:
2b:0b:f6:aa:92:3d:b5:ba:b7:6b:5f:70:f5:28:36:2b:3b:38:
19:75:c4:32:fb:c8:8a:cf:a9:e1:52:30:c4:40:15:45:e2:15:
a5:94:27:5f:9b:36:e1:f5:c4:13:b5:bb:f0:54:92:12:00:01:
66:6a:ca:56:6d:62:84:42:0f:01:60:eb:03:7e:54:a7:db:b3:
25:58:58:3c:cd:35:bb:8e:e3:ef:94:55:4d:c0:4b:af:93:99:
b6:7d:bc:0f:94:28:41:47:b5:ad:ce:14:ac:1a:ff:d7:22:8d:
5a:e2:46:e5:78:16:1b:cb:98:8d:d3:2c:65:3d:c1:47:4d:28:
8b:6b:bf:08:fd:75:5a:1e:72:d0:66:1a:62:31:1e:51:44:8b:
5d:34:96:67:55:7a:b2:fc:e9:74:de:cb:37:6e:11:48:b7:85:
a5:f1:34:12:46:c2:c2:92:cf:62:71:68:02:5f:89:72:cd:3e:
f0:0e:04:74:b9:b3:f3:fb:19:04:9e:cc:42:31:2e:32:b1:ab:
89:8f:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:59:36 2025 by rpki-client