Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File: gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier: B8Y3b4OsWeS8z82GGui98DLKuIrnFojZsDP89jdka5Y=
Subject key identifier: DC:67:12:F5:A7:78:94:7C:08:CA:2A:E1:BA:D4:A5:1E:75:87:9D:FA
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 0199221F58119B380364B6F2216B3A52BA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number: 0D64
Signing time: Sun 07 Sep 2025 03:01:43 +0000
Manifest this update: Sun 07 Sep 2025 03:01:43 +0000
Manifest next update: Mon 08 Sep 2025 03:01:43 +0000
Files and hashes: 1: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: OQizdj7U9bNO3rEaUb/m5DcFQg+R5TouFrP6hwoN9gw=)
2: ql09cCtxf2iX9P0d2dUBPQ5PKyY.roa (hash: DXSDjUv3k4luzqmW9TKxBUky0r+na22MITMB3j5FLDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:58:11:9b:38:03:64:b6:f2:21:6b:3a:52:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Sep 7 03:01:43 2025 GMT
Not After : Sep 8 03:01:43 2025 GMT
Subject: CN=dc6712f5a778947c08ca2ae1bad4a51e75879dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:12:98:43:4d:bc:4a:2b:c8:5c:94:01:7f:
cd:3e:a7:81:76:c8:32:93:5f:53:ae:f5:a5:87:86:
d0:65:b4:dc:d7:25:20:3e:21:80:3e:fb:3b:86:b0:
1b:35:0e:33:03:af:38:32:a0:d4:38:0b:a6:f0:14:
e6:91:54:2d:09:bd:fb:c4:be:36:6c:f4:74:e2:4f:
4f:9a:99:f9:e1:86:e4:f5:4a:64:45:9b:ce:4f:bc:
b3:fa:86:dc:5e:60:f9:f7:50:ea:7a:51:5d:7b:7d:
b4:8e:f8:fd:c4:dc:21:e4:1c:a7:71:e3:10:31:f4:
23:e7:25:01:6c:68:19:9b:72:24:0b:6e:f6:31:a1:
8a:e9:c0:ee:79:c1:b2:47:5b:6d:1a:02:f8:9c:bc:
70:28:b0:ab:52:97:a8:5c:b9:98:55:63:ef:4e:cc:
4d:d6:71:0e:82:e6:5b:12:e9:b4:8a:ab:83:1f:e0:
da:49:39:ab:f1:64:ed:1e:26:02:bf:a1:a2:e9:95:
c3:9b:33:7f:7e:33:20:d5:98:b6:85:63:a0:2f:59:
4b:ea:92:54:48:dc:55:82:c3:0e:af:5c:ac:bc:81:
c1:ad:c6:84:e9:d7:30:29:75:78:1d:ca:8a:6f:9f:
4c:1a:52:23:d3:2b:36:b2:be:39:5c:bd:39:4b:08:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:12:F5:A7:78:94:7C:08:CA:2A:E1:BA:D4:A5:1E:75:87:9D:FA
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:8e:0b:09:1e:49:45:c7:9f:4b:2e:96:93:ec:b7:71:13:
f6:d6:6c:c0:5f:af:c8:52:66:37:e9:c6:ab:e8:a8:ee:30:a5:
f4:d6:58:c2:9d:3a:c0:43:f6:db:4b:55:7c:0f:5d:d7:3d:cf:
b5:bb:47:a3:d3:e0:ce:65:c2:2e:50:19:c5:f9:f9:0c:c4:9b:
db:a0:e0:44:4f:be:31:b8:fb:e6:b0:44:0e:f5:ef:dc:d0:f0:
e9:8f:23:83:9d:dc:32:bb:3b:c0:79:26:f6:06:5c:02:8e:6b:
91:57:c5:c2:81:81:c2:4f:dd:c7:5b:a5:9a:ae:e7:b8:36:01:
ff:ba:91:02:3d:5d:97:df:14:ab:ed:a3:ac:3b:f3:40:2f:2f:
e7:a0:70:3e:3b:37:94:64:49:51:d8:c3:40:a5:87:5d:bc:20:
29:e0:75:0f:db:99:3d:fa:be:7b:6c:6c:13:08:33:97:8b:01:
09:9d:df:61:30:da:27:bb:df:9e:ff:ec:8e:43:e7:5e:79:d7:
bc:de:6d:b5:fe:d5:e4:57:56:86:a8:f6:f2:1e:3a:55:74:fd:
6e:d7:ed:3a:65:fb:f3:8e:df:12:10:11:5f:8e:86:c3:ff:40:
22:f0:b2:0b:49:88:6c:4c:ee:17:53:91:87:21:1d:8f:a9:9a:
73:de:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client