
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: wbKx6m8UT0jlfOwc6vPS6PV1S9kMgtuPZSNNU1IZdJg=
Subject key identifier: E0:F6:D5:6C:15:48:2D:0E:AE:74:DC:DE:ED:66:F1:21:4D:8D:8E:EF
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 0198567C5664722FF473C586A5A6D5B70AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 14:00:45 +0000
Manifest this update: Tue 29 Jul 2025 14:00:45 +0000
Manifest next update: Wed 30 Jul 2025 14:00:45 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: EN5+WPapMs93XerWhCjYR6O/83rsvdxYviMqbPvMOsA=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:56:64:72:2f:f4:73:c5:86:a5:a6:d5:b7:0a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Jul 29 14:00:45 2025 GMT
Not After : Jul 30 14:00:45 2025 GMT
Subject: CN=e0f6d56c15482d0eae74dcdeed66f1214d8d8eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:3d:49:40:16:fb:e2:96:7b:1c:a5:2c:cb:
53:9e:fc:56:63:9e:3e:3c:15:ba:77:4c:cf:53:df:
c2:87:ea:ae:d2:87:35:38:fa:b6:4a:8e:74:31:a4:
a5:06:00:65:2f:49:6a:60:56:e9:70:78:17:6e:30:
48:b5:f6:a4:02:47:96:d3:0b:46:e7:e2:19:16:24:
e0:3a:50:c9:2d:c4:c1:54:94:27:ee:3e:03:07:f6:
39:0d:02:b7:ac:2f:a4:10:f4:55:a4:d5:4f:ff:ee:
c1:f0:11:62:7a:90:ae:3d:ab:04:9e:0c:9d:2a:53:
e9:7a:fe:97:06:04:f9:09:68:8a:77:26:6d:e1:de:
49:d8:93:f9:af:fd:aa:5b:c5:b2:fc:ed:8e:cc:1d:
c5:a2:00:65:3a:62:11:22:f2:a0:50:42:2a:51:61:
a8:e3:0d:d6:63:a0:8f:6c:2d:29:7a:9a:d4:d5:7b:
1b:78:66:18:38:47:44:7d:cc:f0:6f:2c:b6:4c:0a:
b6:e8:6f:2a:65:3c:71:a3:2c:55:8d:57:aa:45:ca:
0d:ef:ba:4d:07:da:a9:db:2a:f4:f5:9d:b0:06:1d:
73:12:fa:47:99:85:0d:07:f4:67:8b:36:0b:a0:30:
73:b5:2e:c4:8a:be:64:df:bb:0f:95:25:02:ff:6e:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F6:D5:6C:15:48:2D:0E:AE:74:DC:DE:ED:66:F1:21:4D:8D:8E:EF
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:25:51:36:0b:96:e2:f1:a2:bb:22:5b:a1:f5:49:e7:74:ec:
a2:1b:68:f0:f1:86:32:5a:f1:1f:12:8d:17:57:b0:7b:00:ea:
c8:70:fb:28:5d:fe:eb:64:7f:ab:b4:6c:e6:c1:5b:40:58:bb:
ed:29:ea:c4:1c:16:e1:a8:ae:09:6e:88:bb:27:6b:d5:c5:35:
47:ae:31:3b:42:97:8b:22:0b:28:9e:f7:bd:61:32:1e:44:2d:
b8:05:f3:34:97:69:83:01:7c:da:9c:a3:37:cf:73:26:66:52:
d8:4e:85:a4:31:bf:40:25:54:db:de:f8:77:c1:73:31:1c:de:
4b:ae:e5:04:26:7e:69:bf:a6:48:17:c5:ce:39:27:75:5d:b3:
88:3d:4a:50:da:0c:89:9d:0d:b6:79:3d:e3:de:ec:eb:df:ae:
ec:36:49:96:d7:37:03:ac:2d:08:17:9f:66:ba:67:48:49:05:
f4:ff:a5:5f:28:45:9e:17:b0:39:13:ba:ce:1e:c2:f0:44:44:
86:aa:28:18:fd:8f:93:0e:e4:92:28:29:12:36:94:2d:ba:b2:
ad:5f:e7:5f:ab:bf:f1:ed:50:ee:fd:18:79:95:29:1d:85:13:
89:bd:5b:ce:6e:17:5e:71:1b:65:a8:fa:33:78:c9:91:9c:5a:
79:45:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:35:44 2025 by rpki-client