Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: 3oA/Jt8AAt0txRhH4QxHhKp78NrO35/rQGas9QJmt0s=
Subject key identifier: 25:F8:C9:E3:FE:70:97:86:48:65:B9:B8:91:96:DD:86:40:85:2B:56
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019933B740B43A27E5642813B7A7C4783687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 13:01:11 +0000
Manifest this update: Wed 10 Sep 2025 13:01:11 +0000
Manifest next update: Thu 11 Sep 2025 13:01:11 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: /HD0fdgCKasaGprJbtfPW88IdCF1gVqOAO2xAToQ258=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:40:b4:3a:27:e5:64:28:13:b7:a7:c4:78:36:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Sep 10 13:01:11 2025 GMT
Not After : Sep 11 13:01:11 2025 GMT
Subject: CN=25f8c9e3fe7097864865b9b89196dd8640852b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:14:f6:47:84:03:09:97:6a:09:db:24:f2:
4e:77:c5:95:d8:38:13:ed:51:41:27:37:2a:8d:71:
71:ee:15:ed:3a:3b:a3:cb:2e:2c:cb:dc:f0:e8:7a:
85:aa:f9:b5:57:7b:e6:d5:eb:ac:37:55:60:a0:3b:
b6:48:a7:d8:22:b2:a1:e1:47:f5:c3:21:e3:36:2b:
ef:99:3a:04:b5:5b:cf:d3:20:e7:c2:0e:45:4e:8f:
59:63:b2:59:ce:ea:ab:8a:65:92:e9:02:6f:83:c2:
d1:76:85:42:3c:d8:2e:bc:e2:2d:ac:60:d0:f7:10:
8d:04:a3:56:66:88:2d:5d:f0:2f:e3:c0:26:b6:bb:
17:af:ec:91:05:8d:55:d9:79:93:a1:e6:b9:71:a3:
3a:5a:14:25:a4:cf:8a:a7:09:a7:b2:45:b7:19:98:
38:51:6b:fe:db:46:3c:27:7f:0e:51:0d:16:de:db:
e3:a5:18:19:be:bf:29:25:0b:b6:95:ac:46:85:5f:
33:b2:2c:7a:c0:94:71:d3:96:1c:36:80:05:c7:06:
e7:5c:4e:cc:c3:22:c6:7e:24:bd:14:ca:9a:15:dc:
5a:a7:33:00:ed:a4:83:d2:a8:6a:6b:dd:17:90:13:
41:38:a0:5c:ec:b2:24:df:fd:31:c3:9d:be:3a:1a:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F8:C9:E3:FE:70:97:86:48:65:B9:B8:91:96:DD:86:40:85:2B:56
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:90:37:3d:52:b9:5c:47:64:7d:75:0e:c9:62:eb:6e:10:
b5:5d:d8:8a:cc:b0:94:8b:85:c8:45:24:4a:a7:d9:83:3c:59:
96:23:34:0e:ba:24:d0:e4:42:a1:25:c1:b4:79:83:72:aa:6a:
0d:9d:0a:05:75:f1:74:ae:64:85:e8:b7:b0:96:cc:cf:64:9c:
50:f8:36:fe:0e:9b:bf:0f:a5:72:c5:dd:02:9a:55:66:30:4a:
3d:5a:5f:79:ec:cb:ff:0e:c7:e1:f0:2b:cd:a4:84:68:5d:dc:
fd:d9:61:4f:90:7c:11:67:a9:6e:3e:ec:89:2e:1f:d5:9c:92:
94:e1:84:80:d1:55:4a:67:ee:ed:b9:b8:03:bf:b0:1f:a1:b0:
0f:04:1c:38:60:2e:7e:ed:29:05:10:6f:12:e4:cf:4a:86:13:
c5:89:a8:9e:fe:6a:cc:70:e3:6c:04:6d:0e:78:17:4f:13:c0:
ad:8e:1b:f4:71:ba:d1:af:e6:83:3a:d2:f5:fe:24:5e:74:54:
e8:48:62:f0:c2:64:80:29:4c:87:2d:b3:ed:54:63:87:de:37:
81:f6:b6:bb:90:1e:64:f0:15:15:2e:1d:21:15:d0:70:14:74:
55:7a:c6:e8:05:5d:0b:ac:60:9c:3e:89:48:8c:e7:f6:e9:cf:
d0:5e:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:13:59 2025 by rpki-client