Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File: gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier: SdmtfVO7Jfmy4nElY5cwmG95P0x8RWZaUBP4d/yGdR4=
Subject key identifier: E8:D5:30:91:55:64:1B:BF:09:99:8E:C3:4D:1A:1E:B1:D5:AE:F8:5C
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019934C91592F2FF9A81A7294F3C1B5C1760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number: 0187
Signing time: Wed 10 Sep 2025 18:00:17 +0000
Manifest this update: Wed 10 Sep 2025 18:00:17 +0000
Manifest next update: Thu 11 Sep 2025 18:00:17 +0000
Files and hashes: 1: N9bR_mBXXHjDIFBVaDKi9gxaXJ0.roa (hash: t/vnY4c9w46jNFfl6Ql0aCTX7Py6QOE0v9MYkC3oE08=)
2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: sqsuXfk+bDRZz3wAJ8LYr8WLIf0VUkQlxrGwU2xfjyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:c9:15:92:f2:ff:9a:81:a7:29:4f:3c:1b:5c:17:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Sep 10 18:00:17 2025 GMT
Not After : Sep 11 18:00:17 2025 GMT
Subject: CN=e8d5309155641bbf09998ec34d1a1eb1d5aef85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:55:ed:2d:c9:34:01:a7:d6:7c:7b:17:ba:
c9:ee:5b:8a:47:36:dd:b2:ec:bf:79:91:88:d4:80:
50:d1:e3:d1:7b:09:0d:8b:56:99:c9:79:a0:fc:60:
33:55:39:00:da:57:34:fa:34:16:1c:95:15:d4:e2:
12:d0:e5:5e:00:01:8c:6b:7a:66:7c:90:5d:b0:17:
ca:05:15:30:0c:53:12:e9:4e:5f:b3:95:7f:7b:72:
57:24:0f:f7:50:ce:78:ff:fa:b5:4f:d2:bf:96:3f:
34:e2:d0:79:82:80:1a:86:82:9a:61:8b:51:a0:2b:
be:2e:7f:eb:08:80:05:76:ff:96:51:e6:d7:eb:70:
c7:4d:88:16:2a:4b:2e:2c:24:37:6e:b8:e0:29:ad:
d6:07:54:74:63:11:2a:95:2d:a7:bb:eb:99:00:4b:
d6:3d:b6:ff:b2:4b:a9:86:1f:b3:8f:65:5f:1f:4e:
71:5c:05:89:3f:3a:05:00:a2:14:41:cd:cd:a2:a6:
c7:17:6f:31:b9:ae:ce:37:d3:a2:f7:41:56:6c:41:
41:08:85:a8:06:a4:c5:ed:d5:e4:0b:08:58:a5:82:
8e:67:1d:9f:e2:92:27:99:82:92:7b:2d:7a:57:37:
f3:ef:64:41:0e:ac:88:e6:5f:4f:9d:52:80:5b:3f:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:30:91:55:64:1B:BF:09:99:8E:C3:4D:1A:1E:B1:D5:AE:F8:5C
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8c:4a:ca:29:06:39:5f:94:d6:e6:94:75:73:b2:ec:fd:e7:
1b:49:e0:c7:f9:5c:5b:68:d4:37:5d:97:de:34:be:ef:0a:b0:
0a:e8:d5:54:fa:a5:41:5e:e0:f0:26:39:a0:1d:5b:0b:b6:9b:
af:54:88:e3:39:0f:55:79:bd:8b:a8:8c:63:61:ac:2e:94:e6:
76:bb:e3:e4:ae:74:de:3b:1b:d4:6e:74:ba:4d:7e:bf:df:a1:
e5:c2:63:97:17:f6:0f:ff:7b:05:5e:e9:9a:4c:0b:35:64:34:
62:46:e9:d9:73:1d:21:6b:61:95:07:ef:26:ad:89:0c:fe:ac:
36:08:7b:8a:a1:06:62:79:0d:4e:79:86:99:f6:5c:61:eb:8f:
57:ea:3f:6c:4d:6a:ad:c8:b4:2f:c9:f0:1a:8f:f7:54:e0:dc:
6b:88:0d:5c:be:d0:d7:07:41:d8:0e:4f:59:56:f2:7f:ee:7a:
30:78:5a:2f:f1:e8:1b:83:c4:14:d7:c7:fc:24:6c:8e:3c:46:
11:bb:1e:35:2c:ca:73:ef:71:74:c2:f4:6e:24:4c:90:08:f9:
bc:e7:e0:4c:a6:5e:45:c4:a3:a3:c5:83:ba:a0:a0:a7:ae:26:
01:44:2b:d1:75:fe:a3:39:e4:1a:04:7f:e9:ce:40:90:0b:af:
ef:ef:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:38:49 2025 by rpki-client