Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File: gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier: L44P+dfoaoNeIQjbpXNgyMvcfiyf1mStfuNXJRYQ32I=
Subject key identifier: C1:34:AF:E4:3E:75:E7:1A:EB:5D:9D:C3:9C:4D:E5:35:9E:E6:61:97
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial: 019749D59F9AC5DD933AC2E89695B8AAE4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number: 1029
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: Ax6Vm0VTZQY0FLe1VYl0Sd0_sqo.roa (hash: X5Han0rbC/tYWBQcqeDkAJUru7qclM/G19tIpVV4C6g=)
2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: gGjhvSL89qFHh6nCluZXnuqXjt0chDvpYyRHXQlFNk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9f:9a:c5:dd:93:3a:c2:e8:96:95:b8:aa:e4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=c134afe43e75e71aeb5d9dc39c4de5359ee66197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:56:b1:6e:ea:c0:35:ed:ce:97:fe:e1:64:
8d:11:7f:37:05:43:db:80:88:81:7f:97:3a:62:91:
fd:1b:0a:c3:f2:0e:d4:97:10:e8:db:f4:7a:47:fd:
f9:c6:af:de:91:aa:cf:61:72:ed:35:5d:cc:84:85:
58:c7:39:9d:aa:a7:87:91:18:fb:51:c9:d2:65:32:
53:09:0b:e5:80:8f:9c:e1:f6:db:27:cd:cd:f7:86:
d1:90:c9:0d:57:a7:8e:25:28:3a:f9:7f:d2:42:55:
39:bd:26:65:c3:77:40:17:be:8f:08:90:be:28:73:
1c:49:c5:00:70:b9:38:f9:7b:9c:53:81:68:c3:7d:
7a:c4:22:d4:87:9d:ab:65:14:db:a6:d4:36:41:65:
52:22:0b:6d:b3:0b:64:b6:e6:97:83:d3:d9:94:45:
e4:e2:ce:98:fd:0f:98:c5:78:f2:0d:cd:35:13:ab:
09:86:aa:31:24:65:0d:b1:e9:1b:ad:dc:cb:05:8f:
37:11:2e:9d:25:1b:f9:db:4b:6c:18:fe:82:6f:34:
3a:2f:17:87:94:73:b4:f3:ce:ff:bf:df:85:c3:56:
af:97:46:36:48:9d:69:4d:df:10:4b:4c:bb:fa:bd:
a6:8d:b0:d8:dc:67:fb:66:4c:30:de:73:59:c5:22:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:AF:E4:3E:75:E7:1A:EB:5D:9D:C3:9C:4D:E5:35:9E:E6:61:97
X509v3 Authority Key Identifier:
keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:61:41:ee:62:5a:39:1b:44:1d:9c:7c:77:fe:f2:06:2b:59:
c5:03:93:ca:b9:8e:e4:be:bf:f9:5b:28:fe:c2:9b:0a:8f:6d:
d0:cf:fa:ab:c2:fa:d0:e3:6d:bd:ac:c3:2b:49:6d:76:d9:9e:
18:93:39:57:ee:70:86:48:71:c0:19:ea:2a:16:00:e3:27:fb:
b9:02:31:e3:f2:68:48:62:e2:79:c4:86:ff:1a:2f:99:97:33:
a3:b5:a3:89:99:73:01:17:26:be:9e:b4:82:d2:9b:e5:9f:53:
3e:41:a6:40:c3:24:b7:b7:d4:1b:a9:83:ac:1f:b9:88:8a:ae:
b9:19:38:1e:40:12:db:0f:65:d2:9a:f8:66:14:ee:fa:3b:03:
f5:91:c1:4b:7e:bc:1c:11:37:60:07:80:a8:7d:0f:ff:cd:2f:
cd:34:3b:46:a2:88:41:c6:84:57:5a:48:08:93:97:7c:69:e5:
d6:22:54:38:fc:e6:33:5d:f2:bd:ec:b7:20:28:dd:88:81:82:
ba:59:b9:36:07:72:7e:44:0d:c4:17:7d:68:6f:5d:f2:fb:27:
c4:03:d3:81:28:27:4b:34:da:3e:3d:d2:50:bd:47:39:69:42:
52:49:a5:91:dd:b3:7e:01:97:bd:f4:e9:24:90:62:35:66:b6:
21:1c:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:09 2025 by rpki-client