Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: 5UgwRtiaKjxvZVmN3WBjIWMQIzekeKkRDAQUF/wqTrU=
Subject key identifier: E1:CE:75:97:71:B7:46:10:15:06:9A:44:BF:21:9C:58:D6:A8:1D:9D
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 01984A77FC679609725A33E6DCA711AE7613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 0FF9
Signing time: Sun 27 Jul 2025 06:00:33 +0000
Manifest this update: Sun 27 Jul 2025 06:00:33 +0000
Manifest next update: Mon 28 Jul 2025 06:00:33 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: AxwmTvjdIF0j1UN3or42jKylNG2c1pg1DiArDAnkrkM=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:fc:67:96:09:72:5a:33:e6:dc:a7:11:ae:76:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jul 27 06:00:33 2025 GMT
Not After : Jul 28 06:00:33 2025 GMT
Subject: CN=e1ce759771b7461015069a44bf219c58d6a81d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:bf:b1:47:7b:2f:94:79:6a:97:8c:2f:74:
5a:7f:31:d0:fe:17:85:6d:bb:4d:89:44:c3:a4:19:
02:70:0c:12:c7:8c:cd:e4:a3:73:83:14:b1:59:9a:
98:80:da:89:3c:34:22:4d:34:0e:25:f9:91:12:fb:
13:fb:76:b6:29:2e:53:99:48:5d:fd:27:4e:4b:79:
09:67:b2:be:10:21:62:98:1d:a3:f9:f0:b4:25:5c:
42:27:d7:39:95:34:c4:54:57:00:d2:10:a0:ac:07:
5c:90:e8:75:d3:ce:0d:6e:b7:75:3d:2a:57:c4:0b:
9d:98:ab:26:d2:09:82:44:3b:ca:ec:76:51:91:ee:
98:fb:b2:b4:67:c5:b1:90:a2:b5:e5:75:80:6a:85:
63:44:51:46:e6:2b:d6:bf:71:94:37:a4:c2:f0:4b:
29:fb:58:ca:56:03:1a:ec:e3:aa:5c:8b:ef:63:00:
17:9b:45:f8:cc:29:28:27:db:2c:f9:39:a2:bd:5e:
2a:0c:d5:82:13:03:82:58:02:3a:e6:3b:e0:90:ef:
3f:a8:a6:02:63:79:dd:4e:29:2c:d6:e6:90:ce:35:
84:e6:7d:67:15:60:32:57:9c:86:c6:ad:d9:bc:c2:
59:69:35:51:a4:3c:8a:fd:5e:58:6f:fd:31:fb:d1:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CE:75:97:71:B7:46:10:15:06:9A:44:BF:21:9C:58:D6:A8:1D:9D
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:e1:42:0f:3d:ea:37:a9:19:71:b5:9c:2c:81:66:f7:bc:
5a:c5:eb:98:b6:fb:b5:21:2d:b3:83:dc:f1:dc:fe:28:8f:52:
7b:e9:cb:25:7c:c3:88:a8:3c:60:ae:cf:14:a9:c5:bb:f7:c8:
21:e3:0e:76:07:78:fb:86:a3:f7:bd:cf:bc:c5:cd:34:3c:3c:
2c:1a:b3:2a:f2:7b:15:6a:97:5d:44:fa:91:d7:a2:e4:cd:e4:
ad:d8:d4:53:85:62:66:ce:77:67:7f:49:e7:9f:fd:39:24:72:
1a:5e:90:a8:bd:49:80:31:f4:62:03:2a:24:cc:b9:a0:e7:c3:
17:f1:f3:6b:8b:4c:bc:15:a7:2a:26:0c:13:1f:55:fe:99:83:
21:c1:8c:ba:30:5d:b8:f2:ee:a8:da:64:64:23:df:e2:c8:93:
93:fd:b7:a3:34:b2:8e:6f:e9:0e:fb:16:dc:5b:5c:62:a1:1c:
56:da:a4:d4:b4:8f:4d:c2:7e:de:96:ef:63:28:e9:dd:81:a1:
c0:23:36:6a:f2:f0:c3:b3:50:b5:0e:8f:58:ea:bf:2a:07:33:
3f:4d:84:3c:8c:00:50:1c:e8:cf:9f:bb:fc:12:a4:d1:75:d4:
0d:4b:35:71:a2:91:88:e9:41:ec:f3:d2:80:8a:12:39:31:d0:
02:b6:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:06 2025 by rpki-client