Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File: gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier: zZVXsCGYepnxTTvdUeViIRNwkQR/oThbSxSlLcKXwg8=
Subject key identifier: D8:45:16:4F:25:6E:CA:B8:70:67:8A:0A:61:10:69:05:CE:7F:6D:3D
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer: /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial: 019935010DEA4DAF0ADC924F35C86BADDA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number: 129F
Signing time: Wed 10 Sep 2025 19:01:25 +0000
Manifest this update: Wed 10 Sep 2025 19:01:25 +0000
Manifest next update: Thu 11 Sep 2025 19:01:25 +0000
Files and hashes: 1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: rbF7841XELHFOQTDAostJ5JMNs6/FoZwNdfGIE9PZFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:0d:ea:4d:af:0a:dc:92:4f:35:c8:6b:ad:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
Validity
Not Before: Sep 10 19:01:25 2025 GMT
Not After : Sep 11 19:01:25 2025 GMT
Subject: CN=d845164f256ecab870678a0a61106905ce7f6d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:9b:bd:72:6c:ec:75:07:b3:b8:31:82:b7:
4e:cb:dc:e0:6d:6f:e2:a8:31:93:a8:f3:a1:07:22:
a2:69:69:78:7b:19:b8:23:ff:bc:82:1d:c0:e0:c5:
b8:d1:5a:70:d0:c5:10:67:ab:12:08:5e:1e:0b:47:
8d:1d:81:e6:b2:82:bf:79:2e:3d:32:95:99:b5:c0:
8e:f4:cb:82:23:45:64:fd:65:18:f1:f3:73:5f:db:
45:f9:f7:b9:ab:70:0d:3e:d7:2f:3e:92:ef:97:85:
74:17:68:77:d1:a7:27:76:c2:90:94:dc:61:4c:d3:
2a:ab:ef:d5:77:6b:c9:aa:87:13:23:42:fc:78:5a:
f8:d6:5a:fe:cf:af:4c:3f:72:bc:d6:74:72:23:0e:
eb:61:45:c8:9f:6e:52:6f:49:02:e7:0d:d4:bf:ca:
9f:23:81:70:25:42:ac:fc:91:ae:c3:62:5c:b5:25:
6b:23:ce:4e:66:3d:89:27:c1:55:36:d8:dc:a0:4d:
88:e2:65:8e:21:55:a7:5f:25:40:f8:41:19:2e:d2:
fe:bd:85:17:7e:96:f4:f0:58:0e:db:fb:e8:1a:9d:
fd:74:bd:bd:8e:36:ee:20:65:c3:58:85:bb:f1:ea:
c8:01:89:4a:8b:e4:1e:93:1c:8c:47:0c:ce:84:ac:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:16:4F:25:6E:CA:B8:70:67:8A:0A:61:10:69:05:CE:7F:6D:3D
X509v3 Authority Key Identifier:
keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:26:1e:1f:16:bb:fc:c7:d3:12:8e:d8:c2:bf:c3:75:2d:d0:
24:c9:03:52:92:f4:a0:b1:b6:a4:fe:58:89:81:88:1d:7d:bf:
9c:87:64:21:cb:6d:18:6e:23:c9:f4:f7:ee:f0:ac:83:07:52:
54:9a:af:05:a6:32:3b:4d:f1:27:fb:1e:37:d8:93:9d:3a:58:
18:c6:9f:98:a6:0c:ca:36:1b:60:d8:ee:b8:a5:48:8f:ae:e6:
5a:16:76:b9:43:0e:75:2c:69:bf:d4:13:1f:8c:f7:25:47:e5:
12:db:90:81:3c:28:e1:2f:c9:d0:99:27:bd:51:50:69:31:eb:
0f:f8:98:13:d3:e4:21:f8:51:91:3f:71:ec:16:39:4f:d3:d8:
cd:63:7d:ba:a6:68:0d:21:30:99:85:c1:e4:be:eb:9e:a3:a3:
5a:19:4f:62:bf:d1:9f:2f:a5:13:41:20:66:f2:26:ca:74:52:
65:07:e6:fa:e9:ea:ab:93:c6:38:f1:13:c1:60:28:50:74:3a:
18:ae:e7:1d:d5:5d:e5:2a:ce:f5:ae:06:00:c7:ab:e9:92:f2:
91:50:10:f9:e0:81:a7:3f:8d:d9:26:16:65:b9:96:1b:9c:fe:
0a:e7:3e:e7:3b:97:c9:cd:04:73:d6:44:9b:01:63:c5:6a:94:
a1:47:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:35:28 2025 by rpki-client