Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: KC5whE0gh9mgbiTDzYoKCbQ7vBidDZYg0wEOpI4bpF0=
Subject key identifier: 32:92:D3:7F:34:32:60:23:4C:E4:5F:22:6E:11:43:0F:70:1C:78:F5
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 01984A0A12CCF64641E22697AA704068222F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:30 +0000
Manifest this update: Sun 27 Jul 2025 04:00:30 +0000
Manifest next update: Mon 28 Jul 2025 04:00:30 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: uA0fqMqBaTeRg03djdTbT5AaTdNEd3X6MrSg96UnM38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:12:cc:f6:46:41:e2:26:97:aa:70:40:68:22:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Jul 27 04:00:30 2025 GMT
Not After : Jul 28 04:00:30 2025 GMT
Subject: CN=3292d37f343260234ce45f226e11430f701c78f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:52:ea:e1:06:83:e8:da:93:a4:ea:e6:9d:
45:fb:b5:45:cd:42:eb:cc:6d:d5:e4:80:ee:64:3d:
c3:ae:66:22:a5:a9:e8:74:9c:26:40:9f:4a:3c:d5:
fc:9a:38:88:79:a9:84:fd:bc:6e:3f:7a:d2:38:fe:
a4:f2:25:5b:b9:08:27:16:91:ec:e9:60:1f:32:41:
3f:82:9a:44:64:b4:75:60:ba:8a:98:ff:00:4f:a8:
7c:66:94:80:b5:9e:dd:c7:d5:b1:16:0c:32:0f:c4:
0d:d8:64:78:50:9d:d2:28:65:e8:30:d0:a2:67:a8:
ee:9a:e2:d1:97:3e:06:8f:1e:a2:ba:7c:e6:7a:be:
7d:b0:20:f8:e2:06:18:a0:c6:db:91:c7:14:8b:60:
08:b7:89:dc:ad:b8:66:62:1e:4d:f8:8c:e9:26:bc:
31:9e:e5:43:6a:90:7e:0e:57:d2:21:ad:1a:10:c1:
3b:99:e4:4c:c5:fb:5e:db:38:25:da:9b:af:d3:9c:
2d:72:e5:b6:0f:dc:82:4c:e3:92:7b:9e:b6:e3:54:
78:54:15:13:66:87:96:ad:e5:c2:d7:e3:46:43:4d:
3e:43:15:62:bd:21:8b:d2:ac:b0:73:6c:0b:1c:6d:
ae:46:80:b7:1e:d1:05:01:44:7b:4a:3f:30:e4:ef:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:D3:7F:34:32:60:23:4C:E4:5F:22:6E:11:43:0F:70:1C:78:F5
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:9f:a7:27:3b:d3:67:22:85:8d:0c:ff:c0:61:61:30:cc:
39:10:df:3e:c2:3d:e7:dc:c2:d6:53:b9:40:fe:44:87:ba:44:
e5:5c:56:4d:a6:ed:3c:d0:5d:cb:a0:46:e0:ef:09:e2:f7:52:
17:da:94:98:78:86:fa:e9:ea:24:f8:c3:9e:90:ff:36:19:14:
d9:03:5a:65:c9:b1:20:e8:99:87:99:8b:db:59:46:85:44:de:
d0:8e:5c:82:85:25:dd:75:b0:a0:b3:75:0c:60:af:1d:4f:2f:
21:0b:3e:cc:ab:57:74:21:19:a0:78:c1:96:2c:f3:da:a0:75:
3a:c4:2f:0f:0e:73:55:f2:64:11:a0:4b:a1:33:8c:2c:20:14:
08:bf:1f:9d:93:74:66:cf:eb:14:72:d1:01:81:98:b5:5c:c1:
4d:40:a2:9f:43:0d:c1:0b:1d:16:45:a4:d6:c8:0b:36:59:4a:
cb:3d:82:1b:ff:d3:33:12:91:97:d5:51:5c:bc:f6:59:a4:d4:
29:75:78:35:4d:1b:b7:a7:bf:ef:d6:40:e2:2a:db:e7:ef:a7:
49:c3:25:dc:60:f1:85:22:39:bf:19:c1:e2:15:ca:a1:d2:f5:
c4:d9:9a:c6:e1:6e:0d:97:94:75:81:df:8c:7c:f3:61:18:ab:
05:0d:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:15:20 2025 by rpki-client