Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: tBqocqbU4vm6n81zoT5JCXeFXpgeEgg0ru2vN2+hyKE=
Subject key identifier: 0D:50:9F:9A:95:27:39:3E:46:F5:30:44:7F:BA:94:43:F2:4A:53:98
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 019847783914A203C7106CDE14FACF7A578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0328
Signing time: Sat 26 Jul 2025 16:01:57 +0000
Manifest this update: Sat 26 Jul 2025 16:01:57 +0000
Manifest next update: Sun 27 Jul 2025 16:01:57 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: xVD+gXN8vhIFiJZf1kB6bJ/kEUWn1x9OIHSbPT/mNj4=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:39:14:a2:03:c7:10:6c:de:14:fa:cf:7a:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jul 26 16:01:57 2025 GMT
Not After : Jul 27 16:01:57 2025 GMT
Subject: CN=0d509f9a9527393e46f530447fba9443f24a5398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:6b:54:16:68:89:2d:7b:de:35:b9:5c:e5:
8e:e5:f1:89:0b:f1:90:8e:03:a3:b4:63:b5:61:f0:
37:b9:11:1c:a0:88:0e:6b:ae:33:9b:5b:95:a2:e7:
53:7a:f9:c9:94:43:c6:1d:fe:1f:74:75:01:89:b8:
8e:dc:96:49:32:51:8b:d4:22:d5:d9:5c:8a:83:26:
b9:03:ff:90:3a:2f:1b:a1:94:23:7b:2a:1d:1e:89:
82:8e:1b:7d:ed:3f:7f:68:8f:fd:b5:44:13:2a:0e:
36:be:c6:4f:3b:03:5f:77:56:6b:6c:80:4f:fb:2f:
59:55:fa:74:61:df:57:f8:6d:f0:f0:6b:b4:9a:e3:
97:90:c5:6a:a0:40:17:bd:56:e9:fb:12:87:04:92:
61:4b:51:be:5f:00:13:f1:bf:9b:42:10:0d:5c:99:
91:7a:10:88:4b:78:a7:78:14:bf:91:f9:e5:b4:15:
1e:2f:88:77:36:92:07:c3:aa:63:bb:02:ce:76:5c:
10:1f:64:f9:cb:da:78:9f:42:2b:e4:38:c3:ca:b7:
74:9e:62:fb:ed:72:b2:7e:9c:bb:02:cd:57:d1:a5:
67:1f:fc:65:ae:ea:43:9a:79:b9:7c:d5:e9:14:61:
bd:1c:d1:aa:36:ed:44:2d:4c:cf:51:f0:40:c0:b0:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:9F:9A:95:27:39:3E:46:F5:30:44:7F:BA:94:43:F2:4A:53:98
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0f:03:e3:d3:bb:c4:37:b5:e7:69:c0:3f:46:db:ec:7b:12:
b7:62:37:f1:fd:13:36:5f:18:92:e8:0b:e0:75:37:d9:c3:b4:
37:26:e0:03:e8:84:88:6a:c5:4f:a8:e0:27:9e:9e:81:98:ed:
ad:d8:34:64:dc:14:d0:8d:e1:fa:0c:1c:90:d8:e2:a5:7f:86:
15:63:18:d4:f7:ad:82:d1:53:05:0a:9f:04:d9:e1:2d:b5:9f:
5a:a0:33:69:9e:c6:2d:6f:71:2b:3d:7c:b8:05:30:45:1b:14:
4c:5f:67:9e:0c:b5:58:57:0b:a2:9f:4f:39:31:c8:3e:cd:df:
4e:8b:aa:ed:aa:ae:a8:f6:b8:3a:b2:cd:0e:98:38:4e:9a:49:
7c:c4:8f:5b:7c:06:74:38:a5:ac:5a:eb:02:40:02:d1:d6:8e:
97:31:c5:24:b9:9d:4e:e6:80:d9:02:34:80:54:77:f6:75:01:
c8:0b:9a:b3:aa:99:f0:aa:a7:9a:0e:c9:d9:12:70:18:f5:ba:
9f:fa:9e:d9:c8:d9:91:09:5d:50:b8:92:a2:7a:aa:81:e4:0c:
d7:79:91:37:3a:f8:f2:3d:23:15:f7:a8:86:da:fa:ff:6c:91:
83:c7:33:da:32:43:85:4d:f2:55:bf:cf:a9:bb:a9:b3:29:74:
58:44:f0:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeDkUogPHEGzeFPrPeleKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTYwNDZlMzdjN2UyMDc1YjQxZDZmZWY3MGQyMzEyMzAz
YzVmMzkwHhcNMjUwNzI2MTYwMTU3WhcNMjUwNzI3MTYwMTU3WjAzMTEwLwYDVQQD
EygwZDUwOWY5YTk1MjczOTNlNDZmNTMwNDQ3ZmJhOTQ0M2YyNGE1Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hBrVBZoiS173jW5XOWO5fGJC/GQ
jgOjtGO1YfA3uREcoIgOa64zm1uVoudTevnJlEPGHf4fdHUBibiO3JZJMlGL1CLV
2VyKgya5A/+QOi8boZQjeyodHomCjht97T9/aI/9tUQTKg42vsZPOwNfd1ZrbIBP
+y9ZVfp0Yd9X+G3w8Gu0muOXkMVqoEAXvVbp+xKHBJJhS1G+XwAT8b+bQhANXJmR
ehCIS3ineBS/kfnltBUeL4h3NpIHw6pjuwLOdlwQH2T5y9p4n0Ir5DjDyrd0nmL7
7XKyfpy7As1X0aVnH/xlrupDmnm5fNXpFGG9HNGqNu1ELUzPUfBAwLDbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Qn5qVJzk+RvUwRH+6lEPySlOYMB8GA1UdIwQY
MBaAFBmmBG43x+IHW0HW/vcNIxIwPF85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQt
M2ZlYzU4NjE0YzRiLzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83OTllNWMtMTU5NC00MDlmLThjNTQtM2ZlYzU4NjE0YzRi
LzEvR2FZRWJqZkg0Z2RiUWRiLTl3MGpFakE4WHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg8D49O7
xDe152nAP0bb7HsSt2I38f0TNl8YkugL4HU32cO0NybgA+iEiGrFT6jgJ56egZjt
rdg0ZNwU0I3h+gwckNjipX+GFWMY1PetgtFTBQqfBNnhLbWfWqAzaZ7GLW9xKz18
uAUwRRsUTF9nngy1WFcLop9POTHIPs3fTouq7aquqPa4OrLNDpg4TppJfMSPW3wG
dDilrFrrAkAC0daOlzHFJLmdTuaA2QI0gFR39nUByAuas6qZ8Kqnmg7J2RJwGPW6
n/qe2cjZkQldULiSonqqgeQM13mRNzr48j0jFfeohtr6/2yRg8cz2jJDhU3yVb/P
qbupsyl0WETwVQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:51 2025 by rpki-client