Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
File: GxISDDUcFO7CIQn2AySfzawdMyE.mft (raw, json)
Hash identifier: iJBkkmGyiiYmTHDkCofbCkWaY/EoWYZuc8zDDHLmPT8=
Subject key identifier: C0:EA:B9:AA:2F:18:B6:89:92:18:BF:4D:E9:36:69:0D:21:BC:20:A0
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 019828C83523CA264804050AA5B4BCBAA277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
Manifest number: 016A
Signing time: Sun 20 Jul 2025 17:01:06 +0000
Manifest this update: Sun 20 Jul 2025 17:01:06 +0000
Manifest next update: Mon 21 Jul 2025 17:01:06 +0000
Files and hashes: 1: 3rbnDYFhdBckEotfuadd533z59A.roa (hash: ax/QAEo9x6wJqdZmMwU9VRLc1EBYBU51K7GtG1XG70c=)
2: 9Cv1x_jAkuvWV-S7bhdwS0dFTuc.roa (hash: l74BXIsr9tFoOgjbmMSDMd1UV/QSFnTI8Mvo9Udf3LM=)
3: EYgXdph0ad7x7RpPlZyOENzd-oA.roa (hash: Hrugq5ntPmxP93lV9SDtZJap5r0QftcRWf7OkP/hZyI=)
4: GxISDDUcFO7CIQn2AySfzawdMyE.crl (hash: 6VGOgkFvQrA7ReNYTjUz9l/tdogfUthHh7RLcHDe7cU=)
5: OzgFbbI0V5S5o1DdJOQqtABdtH0.roa (hash: y+11/IkfsSulnXEQxCkUZyHEuxM7K/mkeaGWZSD0CSE=)
6: bReAPrtVMcAEhriuG0ae1idZpA8.roa (hash: +5/eycLGuxYpcqgi8DwCHJgtB3o69zqZ/uUvDsZXonw=)
7: gD3woXUC-WqortYqBWCfUTbN-6s.roa (hash: 4m9GD86eXZHIDuKu5606dRxx8eCf4kOZ5e1eJk9t9m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:c8:35:23:ca:26:48:04:05:0a:a5:b4:bc:ba:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jul 20 17:01:06 2025 GMT
Not After : Jul 21 17:01:06 2025 GMT
Subject: CN=c0eab9aa2f18b6899218bf4de936690d21bc20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:b9:55:bd:1e:57:42:a0:a2:7b:e8:7b:fa:
55:34:f5:2b:c9:6d:24:74:bd:20:c1:d8:d2:fe:37:
8a:85:a2:71:c4:29:a1:ca:9e:b0:a3:07:39:42:04:
13:0e:52:8c:fe:56:3d:ff:1c:1e:8d:1d:31:cc:7f:
25:9b:45:ae:48:f6:b9:13:05:c6:1c:b7:e4:3b:05:
95:63:92:bc:24:6d:aa:bc:fe:51:d1:f3:5c:16:58:
29:aa:aa:d3:13:cd:82:9a:6d:ea:99:f0:45:70:ce:
b3:70:42:fc:92:6e:f1:9d:90:41:36:a7:c2:47:1a:
e7:d1:51:df:af:46:69:25:4d:8b:2d:0a:44:60:27:
4b:86:12:13:11:54:c5:df:ad:46:b7:a3:17:e4:13:
b3:88:97:2b:f5:25:ab:66:47:a8:3d:f8:7b:04:0e:
7a:da:57:2c:5d:b0:51:6f:26:5d:33:69:76:f7:b4:
18:bc:f7:de:36:f5:87:11:18:0c:d5:dd:c3:e9:8c:
07:a2:b2:65:21:4a:9a:e7:59:7e:bb:17:da:49:17:
3f:36:38:7f:50:f3:36:3a:d9:4f:08:84:d6:5e:45:
e9:d7:cd:79:fd:22:37:89:79:bd:37:93:a1:d5:8b:
07:9b:30:aa:03:50:7c:c4:34:75:4c:34:58:6c:81:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:B9:AA:2F:18:B6:89:92:18:BF:4D:E9:36:69:0D:21:BC:20:A0
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d0:3a:ea:a4:cf:73:d3:e9:de:50:70:87:70:08:a0:9a:c4:
17:6b:35:a7:7b:72:3c:29:8b:36:e7:6a:00:d3:94:f4:2a:a2:
d1:d5:d7:00:5b:03:7e:52:aa:bc:f8:94:5f:3a:33:e9:d1:10:
2c:bf:8f:eb:12:d8:fc:5d:95:8d:ca:74:90:e2:21:e3:e4:bc:
89:6e:a6:71:08:67:6e:39:68:41:b1:98:16:cd:be:ad:36:ca:
a8:65:6a:cd:0d:dc:47:b3:2f:45:38:e9:46:ae:57:bb:fc:1d:
67:75:63:63:f2:31:f2:1c:2c:1b:05:2c:88:13:35:67:4b:23:
d6:19:26:88:b4:08:af:b0:b9:92:e8:a8:4c:e1:19:2f:ef:8a:
72:83:30:47:1b:bf:09:76:6a:a3:4d:47:8f:03:39:8b:64:f6:
02:1d:7b:58:af:19:17:de:ef:3d:41:2f:56:2c:32:38:8a:43:
98:f2:8e:18:81:9a:1f:d3:12:69:22:ac:28:9c:a9:e7:5b:fd:
59:11:00:40:be:e7:fe:99:00:c8:7f:06:1e:2b:50:1d:e3:b0:
03:e5:cc:37:ff:38:b4:e9:cb:2d:a2:50:32:10:d0:bb:8b:fa:
7b:a5:82:ad:92:50:47:c0:b6:be:72:0f:5e:2a:01:e9:36:c4:
1a:f9:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:10:59 2025 by rpki-client