Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
File: GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft (raw, json)
Hash identifier: Fm2zzMUyEbhnBr+S7kNzf00d9OyIQkPGu4XGSujZ7cA=
Subject key identifier: 03:9D:4F:FF:8B:A9:76:2D:A4:57:EF:99:A3:69:24:B3:88:3E:31:12
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019849D3799E10954188B7B53D6BA7C632CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
Manifest number: 12FE
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl (hash: 5aVfrGHpZbgP2he9p6DlBvM/XHrPbsB0wxA7lPE9J4E=)
2: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (hash: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:79:9e:10:95:41:88:b7:b5:3d:6b:a7:c6:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=039d4fff8ba9762da457ef99a36924b3883e3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:b1:29:0f:9d:65:82:56:73:4f:43:23:c2:
e3:f6:de:6c:ff:0b:c8:30:85:a7:70:ac:f2:80:6a:
c0:0d:ef:f3:12:e9:2b:b8:9f:3f:9e:aa:9d:f8:0d:
7a:29:ea:11:d3:b4:c1:9e:80:9d:d9:4e:af:8a:cf:
d0:08:86:46:65:93:c4:91:98:3b:d4:cc:19:f5:1f:
af:fc:4b:7e:6a:af:a9:c4:2b:ce:9a:be:06:97:06:
32:74:41:72:4e:ae:33:38:08:c9:3b:c8:d8:bf:6d:
18:8c:9b:37:f6:52:64:db:d0:c6:c5:a7:3c:2d:5d:
a3:92:2f:f9:8b:0f:ce:e6:43:c1:ac:83:d1:3e:88:
ab:75:23:56:12:c6:10:ad:8e:85:7f:90:c5:5b:86:
05:c7:a9:76:3d:1e:78:ff:98:43:9d:2b:00:12:a1:
d3:18:4b:34:21:50:c9:6a:0c:89:a3:86:c1:c0:37:
f8:54:4b:de:38:a0:7b:89:80:d3:c6:d4:fa:16:7a:
e9:ce:22:38:fa:5a:b1:f2:c1:1e:74:76:48:eb:bf:
27:c5:5c:d8:30:99:18:2f:7c:54:28:70:a6:cf:fe:
41:bb:14:8e:75:5a:df:ca:1f:8b:25:6e:08:a1:fd:
1d:f0:b3:fb:19:05:bf:9d:2c:22:e8:a6:74:2a:be:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:4F:FF:8B:A9:76:2D:A4:57:EF:99:A3:69:24:B3:88:3E:31:12
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:61:69:04:31:fb:24:80:2d:43:ab:f3:4a:c2:e1:88:02:
14:73:4c:cb:6c:46:6a:7f:12:5c:4e:79:ab:a3:09:8d:ec:40:
f5:a4:b1:e2:00:98:5d:7d:5c:01:7d:f8:13:7a:3c:13:bf:e8:
68:d1:56:ed:29:6d:dc:7a:15:cc:a7:1b:d4:68:6e:6c:95:d4:
b1:f7:15:a0:d5:3c:c7:45:09:c2:8c:15:21:54:4a:6d:6e:c6:
a1:0b:a8:27:a4:11:b0:5b:d4:35:29:38:75:13:e7:10:21:f7:
92:62:0f:76:f6:6e:d2:e0:a7:93:58:c2:37:c0:f9:44:35:c8:
4c:a9:2c:ae:d7:00:8f:42:0e:d0:ec:ef:9a:2f:0c:60:71:bc:
c5:47:19:9b:88:70:72:63:0c:a2:5a:e1:a6:7e:b3:66:cf:b2:
72:d5:45:ee:14:fa:71:55:cc:60:bf:90:5b:2c:55:e4:98:1a:
2c:f9:cd:7c:a1:cb:32:6f:7b:db:da:a2:1a:64:2f:dd:99:53:
54:dc:f5:44:41:76:a9:41:de:ef:a8:ab:7b:d7:3f:c2:95:31:
cb:da:24:09:c8:c8:13:02:41:35:f9:fc:a8:ff:62:49:86:bf:
56:fc:be:97:06:8d:06:5f:d2:42:b5:3d:89:10:c3:ff:45:88:
70:4d:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:49 2025 by rpki-client