Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: NJZNa9HNCsSkXQ6IldQQCL5MCbtq6ftQh3NUK6OYWeE=
Subject key identifier: 1C:D0:3B:5B:6B:E2:E5:21:94:6F:AE:22:E9:0C:35:5E:50:75:B6:E3
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 01992FDA571FD4F8EBE4170CB2D3F291627D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 19:01:02 +0000
Manifest this update: Tue 09 Sep 2025 19:01:02 +0000
Manifest next update: Wed 10 Sep 2025 19:01:02 +0000
Files and hashes: 1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: nEnmrDHf+dj0AapZ0lSw4WDm61liSfI/eC2UONl6028=)
2: salIHPhc1-U7JhA1wMdzrHIbzfs.roa (hash: nprIOebSdd8+BuExt2/8vOEgtfIuud16f9G3kU2RIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:da:57:1f:d4:f8:eb:e4:17:0c:b2:d3:f2:91:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Sep 9 19:01:02 2025 GMT
Not After : Sep 10 19:01:02 2025 GMT
Subject: CN=1cd03b5b6be2e521946fae22e90c355e5075b6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:d1:f0:fe:65:63:d9:16:c3:d5:5b:d7:87:
25:f1:fe:6e:2c:6a:64:1e:f9:42:0d:09:15:5e:63:
80:bd:e3:a9:a1:94:f7:18:f6:0e:66:6a:86:a1:3b:
82:2a:36:45:ea:f4:67:ae:ea:23:61:8f:d3:dd:0c:
e8:a6:ae:2f:ba:28:a2:13:f8:2b:02:f5:f1:aa:ac:
03:08:59:f0:08:c0:d8:51:af:4d:77:50:21:0c:ca:
b8:07:85:b3:30:b1:fb:cd:62:6c:d9:bc:08:1c:63:
10:7c:e0:dd:0a:67:30:ff:3b:8e:7c:1e:3d:0d:3a:
63:07:fc:10:d8:3b:c6:5f:1e:31:34:84:14:21:f4:
e8:ad:1e:bd:55:ac:fd:18:33:7a:74:fd:be:e0:6b:
45:bc:b2:e2:1c:dc:1c:ba:ea:6c:ba:2d:a2:3c:99:
29:05:c2:83:60:93:9d:e2:e3:d3:e7:e6:32:2b:bb:
4e:a8:84:41:ab:34:fb:ee:9f:89:1a:ec:e3:83:93:
9e:20:93:65:da:6a:15:33:63:2b:51:6e:0d:9c:56:
1c:3e:91:0e:f1:95:5b:a1:69:e0:72:bf:16:84:22:
71:ca:40:e9:46:60:e6:30:b8:26:2a:fc:01:27:05:
19:de:88:4e:24:57:73:0e:59:69:1a:68:08:95:08:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:3B:5B:6B:E2:E5:21:94:6F:AE:22:E9:0C:35:5E:50:75:B6:E3
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:33:c7:81:6d:c8:36:a1:03:31:39:05:27:28:69:ae:70:
36:88:11:20:e5:f4:de:af:a0:d0:3f:da:26:47:96:51:ac:a9:
2f:7b:60:5e:f5:a8:bc:4b:d9:a0:4a:94:66:35:48:8b:83:f5:
32:2e:e7:cb:ce:07:37:2a:4a:8d:a0:7b:55:2c:e3:c8:96:e5:
46:70:c4:c2:c3:bf:27:09:75:5e:b5:2d:a2:7d:99:7b:4d:ff:
6b:aa:4a:49:39:ea:75:d9:de:70:bc:ca:ce:95:af:48:76:43:
ae:05:a5:c6:05:ae:06:fc:d1:f0:4b:9c:dd:89:b3:c8:26:0a:
fd:9d:b9:e5:94:44:15:a5:03:1a:39:0b:60:23:8b:34:ed:83:
ea:cd:6c:49:8e:5b:cf:ab:2a:9c:67:14:63:48:6f:a8:de:e1:
f5:c5:fc:9a:55:1f:94:4a:c4:5f:a3:d3:84:98:88:32:fa:a7:
f3:dd:a0:bb:7b:16:46:9b:8d:03:ca:55:2d:c3:df:5c:3c:56:
2d:72:6d:c2:cd:72:2d:1c:ef:b1:6a:27:52:ec:f8:1b:cb:c7:
4c:af:0b:6f:f9:45:cd:a9:1a:07:f9:fa:5d:59:44:25:bd:97:
27:26:07:ce:54:a4:62:cb:9d:5a:a9:dd:25:08:02:98:09:75:
70:34:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:45:41 2025 by rpki-client