Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File: gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier: H0H1fdvgRzf6EyP+nf6BiAuN+4rxCc4m8/B3Rp2uyxs=
Subject key identifier: 0F:31:7A:BE:CB:DD:B4:56:9E:2F:52:8E:1C:C1:72:38:C5:BC:42:3C
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial: 019923A019C1494F1AE9F6E783DEB9409ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number: 0E0C
Signing time: Sun 07 Sep 2025 10:01:58 +0000
Manifest this update: Sun 07 Sep 2025 10:01:58 +0000
Manifest next update: Mon 08 Sep 2025 10:01:58 +0000
Files and hashes: 1: aKrIqq5FN4PK-r4L7QHTr_CX9Zo.roa (hash: Kv/OtykFBrcUjfDaS+Pe/Ir6WVEK4q26aEi7qXi5Xx0=)
2: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: CVZuh8dvaMM/CV7Kf5vMwSWPIhxdhMVOJsS+lukf2d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:19:c1:49:4f:1a:e9:f6:e7:83:de:b9:40:9e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Validity
Not Before: Sep 7 10:01:58 2025 GMT
Not After : Sep 8 10:01:58 2025 GMT
Subject: CN=0f317abecbddb4569e2f528e1cc17238c5bc423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:ad:c6:33:ee:15:69:36:b3:ac:63:0b:86:
4d:97:24:9b:32:cc:25:04:06:0e:3b:45:cf:eb:bc:
05:14:42:3e:48:0d:1e:9b:88:d0:59:aa:04:48:bb:
7a:f6:6e:3e:1b:7e:26:62:aa:93:01:f7:3c:47:44:
4d:90:97:29:d3:41:4c:f8:4d:c9:1a:ad:6c:3a:97:
c4:c2:f1:15:b6:f2:d0:d3:8e:32:2f:96:44:c9:19:
2f:62:69:6d:f7:0f:90:e8:ed:df:d5:a5:25:a1:c0:
e8:4c:42:13:c1:44:60:c6:4f:d6:30:22:d2:7e:00:
ce:f0:a8:17:69:a8:08:49:7c:f7:62:e7:ce:e3:fa:
6d:70:b9:b4:20:f1:b7:18:ce:9f:21:3f:a4:3a:ff:
6b:31:56:6c:32:cb:f8:9b:0a:4b:99:59:ef:d3:b1:
3c:94:e7:49:ef:d5:3a:f6:b6:cc:a6:d9:29:aa:6f:
a1:de:d0:1f:a0:04:f9:fc:9e:15:3a:bb:00:1a:cd:
99:b2:79:89:c5:51:78:b0:a4:da:8d:8a:3b:a2:17:
d6:b0:87:31:00:94:a6:02:fc:ba:8a:67:41:2d:ef:
24:6e:75:fd:20:5f:5a:b6:f4:35:6b:ae:97:53:f8:
6c:31:de:03:81:da:7b:2e:40:e2:fe:f7:ef:d0:34:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:7A:BE:CB:DD:B4:56:9E:2F:52:8E:1C:C1:72:38:C5:BC:42:3C
X509v3 Authority Key Identifier:
keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:61:db:a1:a9:e0:e1:08:2a:26:5e:3a:fc:f0:13:29:4b:
cd:6c:87:6c:f1:00:43:6c:0d:44:ac:ea:65:08:17:e3:72:80:
e5:51:a3:4e:91:d4:1c:d0:e8:74:7f:2c:34:26:15:97:14:aa:
e1:cb:1b:d3:8e:a7:f5:34:13:ae:d8:dd:d7:01:e0:e1:54:d8:
8f:59:a4:90:41:58:f1:ee:06:9a:92:92:6f:53:af:06:fa:8d:
0b:6e:64:64:33:64:ba:88:21:9d:46:d4:61:2a:47:58:05:0a:
76:73:b7:b6:9a:95:eb:c1:50:66:80:86:f1:65:32:a8:8e:ef:
c3:6a:14:f5:b1:bf:d2:f6:50:fd:42:08:cb:6e:36:e3:73:a4:
0c:db:41:ef:fb:6e:00:70:5c:5c:b7:f7:09:cd:ed:a6:00:9a:
3c:15:53:25:0e:9c:5a:28:89:6d:dc:19:40:f0:d3:f2:fd:f6:
4f:9c:df:cd:c9:03:98:bb:19:e3:e9:2a:33:0c:ad:26:ae:80:
54:28:05:f5:a9:21:1e:5e:44:9a:11:18:fc:32:31:df:8b:e7:
9f:0e:56:b4:3f:94:d9:1b:6e:4a:5d:23:a8:e1:83:67:b5:b0:
e3:b7:50:6a:54:27:fb:dd:a4:bb:d9:02:0e:d9:6d:e7:e1:4c:
be:5a:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:32 2025 by rpki-client