Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File: GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier: 1YgSYJ67L0U6tKctDCQ6EsQrzzf8nrEAwsAV2Disnqc=
Subject key identifier: 84:02:4F:34:DD:B2:E6:4C:AE:52:7B:5C:87:C5:BE:80:77:F7:C1:33
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial: 0198443EA28DDD593B43CE4D7CA2AE093C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 01:00:12 +0000
Manifest this update: Sat 26 Jul 2025 01:00:12 +0000
Manifest next update: Sun 27 Jul 2025 01:00:12 +0000
Files and hashes: 1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: Fn4449DenBcKuI+oSM96dWF+FtykHU/HR4gasqmpkrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:a2:8d:dd:59:3b:43:ce:4d:7c:a2:ae:09:3c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
Validity
Not Before: Jul 26 01:00:12 2025 GMT
Not After : Jul 27 01:00:12 2025 GMT
Subject: CN=84024f34ddb2e64cae527b5c87c5be8077f7c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:56:50:fc:ba:5a:44:54:e2:d9:67:b1:4b:02:
6b:2a:99:13:54:1c:40:1b:f9:9a:7c:c5:28:10:b0:
5f:a2:3b:de:07:7d:43:6b:d6:db:9b:b2:bb:6b:04:
ee:b9:55:91:8e:e1:03:63:25:14:b4:b3:42:b4:0a:
66:19:10:5b:85:7f:a0:77:e0:54:16:45:18:86:cc:
0e:9c:7f:fb:0b:c8:91:24:55:25:8c:0a:9e:5c:43:
ad:83:28:0a:89:74:f2:b2:19:93:b0:d6:1e:3d:90:
7e:3a:24:c5:12:11:c4:b2:c5:10:4c:72:fe:08:09:
f4:4f:98:f7:a1:6b:6b:eb:17:6f:a5:ea:fa:6d:ba:
bc:11:bc:a1:51:ea:99:8c:11:95:f6:5a:ea:14:fb:
d3:29:27:08:b7:71:6f:28:60:53:61:3f:1d:29:cf:
55:5f:45:01:c6:74:64:db:58:2f:74:b4:d8:5d:77:
12:ed:22:14:3b:06:3b:5a:15:7c:c9:6f:0a:09:88:
ef:45:5c:11:66:c7:1e:0b:be:3b:b5:7b:74:25:75:
9b:59:ca:c1:5e:9f:39:44:1a:92:59:4e:09:a2:73:
6b:9f:e5:12:39:18:ac:f2:25:51:dc:be:1b:51:b1:
e3:4f:8f:07:61:57:74:5a:0d:57:ed:a9:eb:eb:2a:
30:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:4F:34:DD:B2:E6:4C:AE:52:7B:5C:87:C5:BE:80:77:F7:C1:33
X509v3 Authority Key Identifier:
keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:09:ae:3f:75:41:eb:07:2f:16:65:25:34:62:3a:f3:25:3e:
cb:26:73:fc:d9:fb:4e:62:3f:64:a7:7c:0b:85:f7:a6:57:a4:
1b:53:7d:5b:6a:76:b7:f2:4c:6b:d5:1a:2c:fd:13:58:ff:96:
e6:9e:fc:0e:f3:6e:b8:b7:c1:c9:2f:a6:4a:eb:cd:d0:1b:28:
bc:a1:29:0d:54:22:b7:f2:97:7c:9f:39:60:d6:37:b6:66:1a:
17:a3:3b:46:ed:0a:d6:da:ec:35:b0:f4:f0:a7:ce:b4:f0:49:
59:c6:04:21:d4:53:af:b9:a9:1c:64:88:93:db:bc:6c:76:b1:
11:ea:1a:fd:ce:b2:cb:95:6e:4a:74:b9:a4:70:33:c7:06:69:
b2:48:55:0f:99:4e:93:6a:7c:02:a8:84:ff:7b:3b:79:71:50:
8f:78:1d:d9:97:6d:12:7e:0f:bb:df:00:97:42:df:73:e1:79:
c0:a3:ff:9d:5e:b1:1a:62:1f:42:65:e0:5b:97:d3:67:02:26:
b0:83:a3:6c:f6:5e:49:a6:b7:76:86:9e:da:db:ac:f1:32:24:
1a:49:cd:02:77:44:1c:bb:30:24:d7:c9:79:f1:fe:47:e0:d7:
a5:53:ab:06:e3:69:e2:08:9c:3d:af:ed:a2:56:cf:6f:25:10:
e5:86:de:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPqKN3Vk7Q85NfKKuCTw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky
NDBkYTUwHhcNMjUwNzI2MDEwMDEyWhcNMjUwNzI3MDEwMDEyWjAzMTEwLwYDVQQD
Eyg4NDAyNGYzNGRkYjJlNjRjYWU1MjdiNWM4N2M1YmU4MDc3ZjdjMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31ZQ/LpaRFTi2WexSwJrKpkTVBxA
G/mafMUoELBfojveB31Da9bbm7K7awTuuVWRjuEDYyUUtLNCtApmGRBbhX+gd+BU
FkUYhswOnH/7C8iRJFUljAqeXEOtgygKiXTyshmTsNYePZB+OiTFEhHEssUQTHL+
CAn0T5j3oWtr6xdvper6bbq8EbyhUeqZjBGV9lrqFPvTKScIt3FvKGBTYT8dKc9V
X0UBxnRk21gvdLTYXXcS7SIUOwY7WhV8yW8KCYjvRVwRZsceC747tXt0JXWbWcrB
Xp85RBqSWU4JonNrn+USORis8iVR3L4bUbHjT48HYVd0Wg1X7anr6yow1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQCTzTdsuZMrlJ7XIfFvoB398EzMB8GA1UdIwQY
MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt
Y2FlNmE3MDlkMTRhLzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh
LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugmuP3VB
6wcvFmUlNGI68yU+yyZz/Nn7TmI/ZKd8C4X3plekG1N9W2p2t/JMa9UaLP0TWP+W
5p78DvNuuLfByS+mSuvN0BsovKEpDVQit/KXfJ85YNY3tmYaF6M7Ru0K1trsNbD0
8KfOtPBJWcYEIdRTr7mpHGSIk9u8bHaxEeoa/c6yy5VuSnS5pHAzxwZpskhVD5lO
k2p8AqiE/3s7eXFQj3gd2ZdtEn4Pu98Al0Lfc+F5wKP/nV6xGmIfQmXgW5fTZwIm
sIOjbPZeSaa3doae2tus8TIkGknNAndEHLswJNfJefH+R+DXpVOrBuNp4gicPa/t
olbPbyUQ5Ybepg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:47:08 2025 by rpki-client