
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: o7Aji1V4D3inAIwv4AffkUNhLtlczWJesK4BcvUDwjk=
Subject key identifier: 06:80:88:B3:8B:E6:DE:08:29:49:86:B9:AF:40:AD:D3:77:8E:F5:5F
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 01984778178437C046D4FE77A305F87A6533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 15CD
Signing time: Sat 26 Jul 2025 16:01:49 +0000
Manifest this update: Sat 26 Jul 2025 16:01:49 +0000
Manifest next update: Sun 27 Jul 2025 16:01:49 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: 0uU5mz/rO7P1xW/kJyvJ/RPBcDzJXo25cOX0A0MslCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:17:84:37:c0:46:d4:fe:77:a3:05:f8:7a:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Jul 26 16:01:49 2025 GMT
Not After : Jul 27 16:01:49 2025 GMT
Subject: CN=068088b38be6de08294986b9af40add3778ef55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:0c:cd:34:4c:05:bf:c3:54:d6:6c:2c:eb:
bc:6d:62:0a:fa:70:22:84:2c:b4:35:58:96:63:c0:
36:54:8c:88:6a:62:d2:a1:45:53:b9:d2:5b:98:25:
20:0d:20:f0:36:73:f3:b2:18:5b:52:40:9c:d1:c5:
9c:b5:91:db:40:39:a9:88:a7:d6:71:86:9c:bf:45:
68:ac:72:83:92:50:65:25:d4:7f:ca:10:6e:af:9f:
16:5a:36:f8:c1:04:a0:78:f9:51:7a:a0:a7:e3:f9:
a2:f6:6d:ff:df:aa:42:be:52:96:52:43:6b:25:ad:
41:c1:99:84:ce:ef:a3:af:7f:5e:35:e8:cd:d9:f9:
77:d3:ea:09:b8:e9:80:32:85:91:c2:07:85:24:38:
10:ae:1c:7c:58:73:15:70:8b:ec:52:ff:c8:e6:51:
12:b1:a8:c0:16:58:f4:b1:a1:4c:63:ac:c4:be:a8:
5e:cb:2b:5e:f2:fb:c9:57:62:a5:8e:e4:83:69:f8:
ba:72:2c:d1:9a:6d:d9:76:3c:6d:6a:a2:d5:ab:06:
65:da:d3:de:96:c0:70:8c:43:fb:91:d5:2c:30:97:
28:75:46:eb:d1:cf:32:ba:4c:84:33:08:cc:9b:56:
e3:8f:79:0f:4d:56:a3:48:2d:c3:b0:04:4b:1a:cb:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:88:B3:8B:E6:DE:08:29:49:86:B9:AF:40:AD:D3:77:8E:F5:5F
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0f:cc:51:77:c1:28:cf:14:49:b6:25:5c:d6:c9:42:70:39:
07:53:8f:16:ad:79:19:f7:d5:82:b2:95:ff:79:13:5d:75:18:
51:49:79:7c:8e:5f:20:37:33:55:2f:76:ff:ae:42:5a:ef:e0:
da:01:58:fd:82:ab:97:9e:7e:37:7d:a0:6b:99:d3:e5:02:ae:
9d:67:6d:88:63:ba:26:63:9e:0e:52:05:e6:0b:bf:4c:69:06:
2e:33:ca:ad:de:02:55:15:c8:2f:6d:2b:1e:45:0c:74:f3:79:
19:c0:27:dd:06:d5:2a:87:ec:1c:ce:a1:81:09:16:03:af:a5:
8b:b4:2a:15:d8:12:87:45:e3:f8:8a:3b:9c:0b:f3:43:7a:6f:
bd:78:92:ba:04:5a:49:a9:35:e1:7a:82:06:76:98:50:1c:ec:
4b:fb:db:0b:31:cd:b8:61:0c:8a:93:20:b1:bc:df:a9:41:06:
bd:04:94:33:82:9d:af:f8:7e:77:80:15:3e:9a:7a:e8:45:11:
39:6c:5d:59:bd:64:79:da:d5:61:1b:29:47:c6:c7:36:5a:74:
5d:32:25:72:c5:35:fe:fb:23:40:52:de:32:af:25:9b:a5:7a:
31:c7:83:76:be:f3:b2:f6:80:e1:a5:b1:2f:c7:e7:d1:ee:0d:
7d:cc:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:21:25 2025 by rpki-client