Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: ULzlf82PPI7wHQpxIw5eGg2PUBqFVwVIFUc1cMK9+Xg=
Subject key identifier: 22:5B:FB:65:0B:75:4C:3D:B5:75:67:82:83:4F:67:B2:65:DA:A7:19
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 0198440801CB4D27F2E3A68F8577B5061FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 00:00:32 +0000
Manifest this update: Sat 26 Jul 2025 00:00:32 +0000
Manifest next update: Sun 27 Jul 2025 00:00:32 +0000
Files and hashes: 1: BGPtN6UeNB6gxVs3merGZGk1kns.roa (hash: hrSuHlNxsE/yi+6e5xU/QtKRxyKAm/eD9FqzGlKPQGg=)
2: K97zp34OToUCQrbZPgRq8uelj_I.roa (hash: fJ0zhSoG7arl9EOrthec9ouC+q/z09fZHsqxXKN/jaE=)
3: UPgAt10tmqeiB0ExLwRVr2_cA2k.roa (hash: PAF5GVkw69ZCI0wlFe0kfCLPkukOPDOR6TAG9hbIZ1k=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: hD68QOKSTbHLns7r4CT8NpiQjklrdOKJ62uFCbkKpr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:01:cb:4d:27:f2:e3:a6:8f:85:77:b5:06:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Jul 26 00:00:32 2025 GMT
Not After : Jul 27 00:00:32 2025 GMT
Subject: CN=225bfb650b754c3db5756782834f67b265daa719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:12:5b:1d:f8:0e:53:50:4f:3f:1c:ff:65:
cb:fb:f7:ca:81:a5:a7:a5:59:95:d0:5d:1e:8e:29:
fc:dd:e3:3d:e6:0c:38:dc:fa:03:a5:df:b3:8f:ac:
e2:13:76:1a:4a:37:9f:ab:12:a6:cb:43:57:8c:8e:
ca:a6:07:1c:f3:01:d0:22:46:fe:5d:5f:b1:a7:72:
0b:a9:ac:d0:e1:e9:4e:9c:f3:b1:98:2f:35:e4:70:
6f:b6:38:83:3a:6d:90:40:84:7a:56:61:38:9a:13:
d9:99:79:a9:bc:0a:bf:85:ae:c1:ce:ec:0d:27:30:
48:0b:c3:73:2e:a8:ba:d8:02:af:2c:ba:7b:10:92:
42:71:54:6b:d4:e9:44:eb:41:c0:32:1b:50:ca:4a:
66:9b:97:ce:1f:bf:73:89:76:2d:62:18:b5:f2:4e:
53:de:fa:c9:14:b8:78:79:0a:0c:1c:47:1c:81:7c:
41:69:9f:4c:6e:4f:c2:24:3e:6f:80:b7:99:05:5e:
2f:e3:0e:4c:c2:c4:d5:4e:82:de:c7:6e:8c:5c:4f:
b4:09:d6:01:6e:04:ef:9d:26:1c:a9:4a:cf:7b:85:
66:2c:94:b6:40:0d:80:fe:c9:d9:c2:2d:44:50:73:
47:34:3e:36:41:22:ff:5a:44:90:54:0f:14:94:14:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:FB:65:0B:75:4C:3D:B5:75:67:82:83:4F:67:B2:65:DA:A7:19
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dc:b4:e8:5b:fd:af:c7:5b:41:fa:75:05:f1:a1:cc:bf:30:
04:e0:d1:49:8c:1f:e1:51:51:71:d6:b2:f3:55:d8:f0:8c:73:
00:f7:a6:e4:d1:ac:09:d3:55:11:ad:3b:4e:ca:6e:73:3f:a0:
31:24:3a:cc:0a:a9:37:b1:d7:16:27:4f:b3:5e:c3:7b:0e:09:
3c:a9:bd:10:99:12:ea:55:30:bb:95:9d:8f:0d:8c:8c:8d:b3:
b8:61:4d:91:66:ff:da:1b:9c:cb:a7:56:2a:d6:e5:34:b8:96:
da:13:a3:49:4b:24:77:41:fa:ef:6b:21:1d:ec:ea:9a:48:e9:
8f:36:22:60:ba:4d:cf:5a:0a:cd:c5:a6:46:b2:b1:69:3d:37:
53:1a:5e:73:bc:87:20:b7:76:fe:6d:5c:fb:0d:11:74:c7:0a:
bb:2d:71:70:eb:6b:da:99:8a:ec:e9:fc:2b:67:0f:4d:b0:86:
fa:56:b6:d3:3c:6c:cb:67:f4:2c:28:51:fd:69:39:14:34:72:
ac:c7:ba:98:e2:62:81:ad:84:40:71:1b:ff:5b:9f:20:1c:20:
a0:8e:10:a5:fe:4a:56:c2:bf:73:89:2e:76:1c:a0:08:09:3f:
0a:02:4e:09:37:33:2e:6f:8c:25:e8:74:40:fe:28:e9:c4:96:
3f:1b:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:34:59 2025 by rpki-client