Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: CKWWzGHS1dsHgX44kqvCu3KNfeYSyzdVUF1C9DaCnLg=
Subject key identifier: 3D:00:35:13:94:36:53:17:18:18:C9:C0:A7:21:38:10:7B:CF:CD:DE
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019923A0E24C28C01DD7E42B6AACD74B9EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0BCA
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: YamdWyVtqH0qqlXqeHE7HKik9CjNSI44jmOrsiG4Xvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e2:4c:28:c0:1d:d7:e4:2b:6a:ac:d7:4b:9e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=3d003513943653171818c9c0a72138107bcfcdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:81:cc:67:95:48:45:2c:ce:65:35:08:eb:
14:c5:2e:74:f9:ad:7e:19:80:a0:f2:20:8d:79:3d:
f1:a2:6b:da:20:12:4e:43:73:1f:7f:43:09:f9:f0:
ab:9a:d1:d5:6b:43:59:ca:05:7c:b0:98:5e:69:e3:
d3:8d:07:fe:b3:39:cf:34:40:b7:19:dc:45:a6:f4:
b5:ae:1f:e4:00:bf:01:f0:bc:df:71:37:82:a8:4d:
d2:1c:10:a3:b1:df:94:67:ab:4b:e5:1e:c8:b7:15:
c9:27:17:e9:8d:36:6b:43:f9:55:d5:f6:06:2e:25:
fa:a9:6a:7d:0e:0a:1a:4d:26:e4:0b:88:5a:82:c7:
68:72:e1:b1:7f:68:4d:96:2d:15:7f:02:82:0a:a6:
b4:97:14:e3:3a:1c:3c:09:d4:5b:d1:a2:bf:33:22:
ce:bb:c1:04:42:87:11:98:1b:38:0e:01:92:b9:ad:
47:d8:0e:9a:7f:3f:f2:56:1e:26:f1:fb:1c:14:1d:
bc:76:4e:39:bf:9f:aa:e5:7f:8f:77:49:1a:90:f6:
97:a7:a4:7b:8e:62:93:47:88:43:cc:8d:16:ea:d9:
5f:98:d8:7f:4f:ec:88:a5:c6:1f:47:cc:13:9f:b2:
25:95:27:57:5b:43:18:ac:b9:68:1e:87:ad:32:7e:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:35:13:94:36:53:17:18:18:C9:C0:A7:21:38:10:7B:CF:CD:DE
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:6b:77:95:19:92:87:85:42:3e:69:c4:1c:71:9d:c9:b2:
5a:a0:72:92:25:f5:30:cb:d4:61:15:e0:01:9b:45:22:a8:d1:
d2:03:60:59:98:59:ee:6c:a6:80:ba:cb:15:56:53:3c:ca:52:
4f:e1:26:83:c0:f9:74:c5:5d:c8:18:22:3b:1a:61:b4:a4:84:
1f:a0:7f:c7:43:f9:e7:f6:31:04:bd:2f:fd:4f:17:99:00:81:
d8:d6:10:42:af:a8:b9:30:12:66:96:94:c0:59:bc:5e:6d:33:
b4:17:b0:2e:54:07:64:c7:19:09:d6:d9:f4:82:9b:ef:02:91:
b0:2f:e0:48:af:1b:e0:a3:51:64:69:9a:31:fb:3a:8a:f2:89:
46:d5:87:44:2c:34:51:4c:63:8a:9f:5a:42:96:86:a3:35:a8:
be:2f:4a:54:73:ba:e3:3d:5f:6a:1a:ae:cc:ab:cb:a3:d5:43:
1e:f5:4c:95:42:6c:9d:d1:1e:46:00:bf:b2:90:c5:99:57:d5:
f6:79:4a:98:16:24:4e:d3:0c:74:f5:6f:42:f0:89:b4:d4:a7:
4e:b9:e9:b6:eb:46:cf:6a:f3:ab:35:3b:b9:64:1e:63:8f:75:
95:49:77:3b:0b:16:37:47:b6:b3:4e:8a:89:3c:77:96:ca:c0:
d3:47:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client