Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: sAGGdSyGqxzjR+lbnjHNkfchXA1XkT46KcQtTUpy/6o=
Subject key identifier: 34:CC:06:22:94:FB:AE:BF:5B:4F:0B:DF:F2:B2:B9:61:1D:F7:D8:43
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 0199228C5665D970EAA56D9256236B0A3EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0C0E
Signing time: Sun 07 Sep 2025 05:00:46 +0000
Manifest this update: Sun 07 Sep 2025 05:00:46 +0000
Manifest next update: Mon 08 Sep 2025 05:00:46 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: NLUYuJUF4QAga2OktP7vf34ckHuNUkyeWkOTpDw/b5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:56:65:d9:70:ea:a5:6d:92:56:23:6b:0a:3e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Sep 7 05:00:46 2025 GMT
Not After : Sep 8 05:00:46 2025 GMT
Subject: CN=34cc062294fbaebf5b4f0bdff2b2b9611df7d843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:8e:58:43:ba:fd:88:d9:68:60:97:31:60:
e5:2d:08:3a:92:9f:d9:5c:9a:68:2d:cb:9d:d9:f6:
f3:a0:c2:64:71:37:13:85:73:9f:02:f8:85:3c:6d:
41:24:7d:7e:a7:da:03:5b:5d:0a:df:80:7f:df:07:
95:3b:bb:b7:33:17:de:8d:bd:ea:2e:ca:58:eb:e6:
d7:db:cb:a0:14:27:6e:5f:31:9d:c3:a6:13:e0:d0:
e2:a7:c3:8c:42:09:2b:56:46:40:8a:a2:27:68:79:
89:3d:5a:13:89:8d:3d:59:5a:ae:c0:45:3f:b7:2d:
4e:35:aa:15:74:fe:e6:ff:bc:19:a6:d7:a1:a6:49:
e7:14:ef:60:75:47:7f:a6:2f:eb:11:01:d5:5a:fc:
d0:69:bd:29:49:08:d3:83:50:5e:12:f2:ca:ec:a4:
ec:eb:1e:7b:2e:90:8d:03:1a:ab:5f:dd:14:2b:fa:
1b:c6:c0:3e:16:4c:ca:57:9f:6f:dc:fe:60:d0:09:
02:ec:de:08:8a:dc:0a:e2:45:b9:16:15:47:b1:30:
55:d6:ec:5f:0b:37:3a:a7:de:2e:ce:dc:5d:82:5a:
60:cb:18:e0:a3:55:d8:ff:6c:5d:fe:b1:67:0e:5e:
be:ce:c6:09:4c:a9:0e:34:a6:8c:a3:70:02:ab:d1:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:06:22:94:FB:AE:BF:5B:4F:0B:DF:F2:B2:B9:61:1D:F7:D8:43
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6a:77:dd:af:2d:36:c8:8f:f7:12:85:a7:bf:4c:5e:3e:84:
74:6f:13:45:8e:0c:5b:43:f3:ea:ba:6b:23:e6:8f:3b:f9:f6:
4f:1f:45:b2:48:e2:ce:5a:36:c4:7f:20:75:35:de:63:8a:64:
45:1e:11:89:b6:a2:56:03:71:53:ce:76:82:83:85:5f:57:fd:
fb:d9:0f:5a:af:97:83:c0:81:8c:4d:76:4d:94:15:51:c5:14:
85:f7:a7:80:98:90:72:ea:90:59:1d:25:c5:68:00:b5:3c:88:
1f:29:30:01:62:73:7f:93:98:4c:6b:45:9f:6a:73:58:56:52:
f8:4f:95:2b:64:e4:21:7a:7a:d3:f3:6f:6b:9a:72:d9:1b:6e:
40:9b:1e:a0:8a:4a:da:88:5a:53:66:36:fb:93:90:28:e7:28:
e8:fd:28:06:e8:2a:2a:4b:fe:78:7c:19:aa:3f:2d:f7:cb:2e:
81:69:37:1f:6a:e5:16:19:d1:30:20:16:95:e8:69:1c:99:02:
e1:de:fe:5f:8c:b9:3a:ba:35:69:9f:b6:e0:c5:74:6a:08:5b:
96:75:63:30:fe:42:75:b0:c4:09:2e:f0:4d:45:ab:f3:92:5f:
67:9a:d9:b0:32:17:b7:b2:ed:ed:63:2c:f4:d0:6c:f8:25:82:
f5:5f:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:02 2025 by rpki-client