Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
File: gh8Shdd1qfWJJD6shErcWridl8k.mft (raw, json)
Hash identifier: FGp68WsWvBAo0nWlmmCvImIBsbUkCYXeqn8w5PW0mRk=
Subject key identifier: 26:0B:16:F7:5E:09:50:55:F1:6F:AF:4B:47:9E:84:5B:F7:BB:50:67
Authority key identifier: 82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
Certificate issuer: /CN=821f1285d775a9f589243eac844adc5ab89d97c9
Certificate serial: 01984A40FA128B7F4C91432E3E5A6C8F31DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
Manifest number: 0AA6
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: 9ZpW1MFLfzhcDdO5wTaJpRND5LI.roa (hash: eD8scxSV/Ipj3PNHolMKD1Dy5Nq6O0rfumsVRuff780=)
2: gh8Shdd1qfWJJD6shErcWridl8k.crl (hash: 3mvASlkkuLfabfFdDP1qfnly4I6T/7THwEH2Q7Q8JBU=)
3: yGExv6aT2zwwq4E64R4PQ7ZXbjU.roa (hash: UK4ZT9heAIw8jcnXNcqfBznXiBKMuH0NwH/ajGH3z/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fa:12:8b:7f:4c:91:43:2e:3e:5a:6c:8f:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f1285d775a9f589243eac844adc5ab89d97c9
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=260b16f75e095055f16faf4b479e845bf7bb5067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:9f:8b:74:ae:51:8e:de:7c:47:d7:98:67:
12:0a:66:97:a2:99:a6:ab:5c:e4:50:ba:85:a4:06:
2e:7e:cd:ea:f5:a6:46:15:22:33:71:9d:51:34:24:
eb:15:59:31:5b:c1:df:9f:42:d1:66:6a:c9:bd:9c:
e5:ba:71:c1:cd:09:54:c2:ff:c5:b2:ed:6e:63:2f:
a4:25:48:93:d5:65:74:a6:56:31:ab:1a:a1:14:0c:
80:48:10:63:e4:10:d9:e5:f5:c3:50:23:fe:48:1b:
15:f0:56:a5:e2:a7:2e:04:6e:db:f4:07:6f:96:d6:
02:28:18:68:6b:7b:0d:a9:4d:0f:c5:ad:a0:1e:09:
09:65:bd:72:a0:f0:2e:15:76:9f:47:97:f1:67:d9:
0e:4d:95:e8:2d:0d:04:f5:8a:9b:b6:3a:8d:02:6b:
ba:9b:cd:2a:dc:0d:33:0a:3a:24:6e:0b:8b:4e:34:
05:22:0c:18:d8:6b:cc:f7:35:ac:42:78:96:5c:cc:
40:35:2f:25:1f:24:80:d2:a5:d6:2a:a1:e5:8b:1c:
77:4f:34:73:47:f4:ce:2c:9b:ea:e3:15:cc:4d:b6:
0a:f3:8e:6e:d5:51:79:b5:ff:91:39:7f:4e:6e:92:
46:a1:1f:5c:56:04:dd:e0:b3:df:73:ec:e9:33:9c:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0B:16:F7:5E:09:50:55:F1:6F:AF:4B:47:9E:84:5B:F7:BB:50:67
X509v3 Authority Key Identifier:
keyid:82:1F:12:85:D7:75:A9:F5:89:24:3E:AC:84:4A:DC:5A:B8:9D:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh8Shdd1qfWJJD6shErcWridl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17d81d-173d-4486-955d-48eea8d5fef1/1/gh8Shdd1qfWJJD6shErcWridl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:88:f1:88:59:b6:8e:0a:55:bf:7d:34:00:54:03:54:1f:89:
3c:d4:53:2f:cb:61:db:ef:67:99:9f:8b:94:3c:c4:c3:2a:a3:
1c:63:76:05:ef:ba:99:4b:21:d5:30:e4:ad:43:63:7d:fd:c2:
e1:b5:29:00:8b:17:8c:d3:8e:b7:14:6a:09:c7:40:92:80:a2:
cf:22:49:ec:9b:f4:29:95:04:04:43:ec:58:6d:cd:f4:9a:20:
66:ec:e3:06:cb:1b:6b:33:c8:32:2c:12:8d:7d:4e:de:31:ce:
be:39:3a:bb:16:2f:d1:71:ad:57:75:5a:dc:ba:39:0a:db:32:
7d:ab:23:c0:19:a8:2e:37:f8:c9:ce:a2:ee:2b:1d:13:3d:09:
4b:2a:38:4f:06:0b:43:c8:7b:cb:6f:71:f7:d9:7a:28:c8:69:
74:7f:4d:88:c7:69:89:4a:73:3b:9f:3a:ce:89:30:d9:ae:13:
82:a8:48:17:5d:15:67:e7:50:36:37:1e:28:f3:c4:cd:44:1a:
40:4f:3c:0a:d7:1f:f7:e8:ad:71:e9:e6:7a:a3:87:51:1b:35:
dd:51:0d:5f:ad:f6:eb:9b:fd:3e:dc:7f:f9:54:ac:ea:04:03:
4f:4a:00:f2:8a:d0:68:84:03:83:bd:51:ee:5a:bc:b3:17:29:
b9:9e:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:10 2025 by rpki-client