Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File: gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier: 1xtLaEs2L69fpGzPGrVmqh7SPO52f6TV8ldZ/kVYQ5I=
Subject key identifier: 78:B8:45:60:EC:8D:78:CE:67:1B:2F:FF:6E:D8:D6:60:D6:A4:4A:82
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 019854202A0432B5335D963D3A3F604F39F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 03:00:50 +0000
Manifest this update: Tue 29 Jul 2025 03:00:50 +0000
Manifest next update: Wed 30 Jul 2025 03:00:50 +0000
Files and hashes: 1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: oUVLMRKWQzz4Vx71xg/Zq9ENnWV0pDE7YtDrXap0/VM=)
4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:2a:04:32:b5:33:5d:96:3d:3a:3f:60:4f:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jul 29 03:00:50 2025 GMT
Not After : Jul 30 03:00:50 2025 GMT
Subject: CN=78b84560ec8d78ce671b2fff6ed8d660d6a44a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:72:c1:4a:b1:10:96:ec:9b:7f:43:25:63:
b4:20:71:6a:3a:9a:da:cf:fb:12:96:4e:e4:21:a2:
da:05:99:3e:a5:5e:2e:86:ee:de:d9:44:46:60:86:
b6:86:68:82:4f:cb:c9:0c:8c:dc:e5:ab:42:a6:92:
31:2f:ed:d7:a5:68:b6:93:e8:b6:1c:40:8f:25:09:
97:6f:40:49:20:a5:49:71:ae:c5:69:05:5f:30:6f:
73:49:51:63:22:13:bb:38:9e:eb:2f:96:cd:3f:79:
1e:07:d6:bf:f0:1e:16:92:83:27:aa:23:75:11:31:
ce:eb:e4:2b:8e:26:a8:6e:a3:8b:2e:89:26:60:22:
2c:f7:3d:17:16:29:89:28:71:b8:c6:b7:11:32:95:
d5:12:e6:38:1c:73:16:64:74:a9:d7:ce:26:16:43:
cb:4b:79:44:39:3e:d1:a6:ce:97:a5:f1:5d:36:5d:
aa:74:30:38:e5:1d:23:f3:79:02:69:f7:29:f7:b1:
ae:5f:6b:3c:ac:5a:6e:a0:f4:ee:50:79:4f:64:7b:
3f:77:39:f1:2b:ae:f5:cc:f4:7b:6c:7a:60:4b:2c:
be:fc:c4:da:97:b0:23:88:56:fe:0f:65:51:e1:ba:
ab:52:a0:f7:40:3f:04:0f:72:d7:51:a2:51:13:0d:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:45:60:EC:8D:78:CE:67:1B:2F:FF:6E:D8:D6:60:D6:A4:4A:82
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:20:20:c8:96:b0:cd:ab:92:b1:43:e8:53:4c:57:78:14:
5c:32:9f:ea:9c:bf:c6:ba:2e:d8:02:11:5c:e8:78:0a:1e:55:
8a:61:61:17:d1:8d:bc:e8:25:83:92:9f:3e:07:c2:ab:e3:ad:
5f:d4:66:45:ef:e8:d2:47:7c:58:e2:29:c1:86:24:ba:92:09:
5e:66:e3:e9:f7:7f:23:ff:a0:92:f6:e7:c3:a1:dc:f2:52:65:
10:53:ab:02:0c:a0:9d:b2:dd:32:e0:bd:76:ff:5b:28:f0:f3:
b5:39:f6:8e:9a:b5:d9:de:5f:d6:6d:c0:6e:3d:03:83:7d:96:
8f:03:41:d8:e0:75:ef:05:d5:a3:0f:5e:d3:8e:55:ea:48:f3:
42:77:93:a7:ed:a9:41:75:42:f2:6f:ad:24:ea:32:ab:ca:e9:
ae:e5:5a:6b:9f:51:00:97:30:d3:e9:6e:c7:70:0a:cb:ed:ed:
e2:7f:28:61:24:05:98:b9:f5:d4:b1:a3:2a:6a:a2:8d:37:0b:
02:4b:59:94:e5:0d:9a:3d:31:bc:7d:16:26:76:9d:ff:a3:03:
e3:41:b7:0c:96:35:c7:b8:5f:61:16:ec:6b:54:42:21:90:2c:
a9:65:03:1d:95:c4:bd:74:29:2f:5f:10:fd:a9:a4:ec:e5:f7:
66:9e:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:55 2025 by rpki-client