Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier: HnOmKU83cBBG7GUVa9f7h0Aocg/qLqC6yK2XAyU3DLY=
Subject key identifier: 8F:4A:3F:84:13:C5:05:18:14:C7:83:84:9B:97:15:41:E0:DB:23:9F
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019853B217C54141FC2F6F17027FF3D0A8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number: 031F
Signing time: Tue 29 Jul 2025 01:00:37 +0000
Manifest this update: Tue 29 Jul 2025 01:00:37 +0000
Manifest next update: Wed 30 Jul 2025 01:00:37 +0000
Files and hashes: 1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: GahiRKY6Mp3XqtFDmY+U99d1uZ6CKy90agBWY23N4aE=)
2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:17:c5:41:41:fc:2f:6f:17:02:7f:f3:d0:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Jul 29 01:00:37 2025 GMT
Not After : Jul 30 01:00:37 2025 GMT
Subject: CN=8f4a3f8413c5051814c783849b971541e0db239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:37:98:e1:5b:ac:20:49:a0:30:ba:7e:4b:
08:2c:77:43:66:b4:30:7c:fb:56:43:c6:93:f2:10:
75:ba:8b:14:aa:98:cf:e9:b2:64:cb:30:ce:7d:7b:
14:30:df:06:68:ee:65:06:32:1e:86:83:65:93:a9:
b2:3c:84:d7:55:a5:4c:0f:8c:f2:8a:60:b6:8b:0a:
c1:4a:9c:e5:34:21:43:46:37:4c:ee:35:57:37:3f:
bc:66:5b:c4:c0:1a:fd:34:b0:6c:8f:93:61:15:f1:
86:b5:df:0f:00:0e:bb:57:ef:21:f5:d3:a8:23:63:
81:c7:ba:5b:35:d7:c4:06:9d:a8:28:44:33:1f:86:
e7:a2:c5:c8:d7:9a:42:38:2c:60:00:9f:ea:a6:c6:
2c:85:a8:89:41:3b:55:a1:04:52:85:81:93:e4:d5:
b6:a5:3a:ba:ca:2d:d5:31:36:bf:6c:fb:fa:25:7c:
43:04:53:96:b8:64:15:c8:5d:b4:f5:44:70:9d:7c:
95:3f:44:00:f7:c6:65:31:13:a5:08:8f:f1:8b:9d:
60:86:7c:b9:89:f0:f6:71:02:84:73:ca:c2:74:eb:
c6:9b:af:a6:fd:e9:8a:d5:09:74:69:b1:78:64:8a:
12:31:b0:48:45:d0:61:98:65:ac:a3:26:9d:19:e8:
f5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4A:3F:84:13:C5:05:18:14:C7:83:84:9B:97:15:41:E0:DB:23:9F
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:df:79:36:ff:4f:72:c9:94:d2:a6:65:9c:a5:1a:9e:a0:b6:
a7:47:55:60:bb:98:d9:a0:5d:4d:62:90:f8:1c:8a:8c:38:ce:
6d:02:28:d4:fb:d3:29:60:2e:f9:a4:dd:c5:e5:1f:4a:3e:0a:
7f:1a:df:7b:cc:c7:a6:07:2d:6e:16:82:fe:e0:d4:50:53:70:
3a:5d:ef:5d:5e:10:40:a8:7d:f3:14:3e:b2:13:6a:95:e0:92:
f3:c1:9e:a0:56:54:49:a0:91:95:3a:b5:ac:ba:24:49:d9:a1:
66:15:c8:23:41:7e:94:44:e1:77:17:9c:1b:96:ba:78:03:2a:
b8:93:d9:d7:1f:5a:1b:35:29:fa:63:be:f3:21:f9:75:b0:d8:
0c:62:84:3e:94:a9:be:dc:ea:91:7b:17:18:cc:24:aa:a0:1d:
ec:c5:05:31:89:9f:8f:58:a4:dd:2f:72:69:5d:d3:42:f1:3e:
0d:c5:c0:4b:5d:eb:8f:ad:b2:fd:ca:50:15:44:e4:3d:45:9e:
00:c1:df:a1:64:7f:b3:8a:80:a6:fc:fa:56:0a:11:75:29:fe:
49:27:d2:cd:9b:b6:19:7b:5f:af:38:66:39:d1:79:a4:7b:12:
df:1b:1c:29:95:7b:b4:38:f6:7b:e1:7f:9d:52:d9:61:46:bf:
b9:df:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:23:42 2025 by rpki-client