Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: v1VsXZxnh+BPWXtnICulovh7nZLIEMEVVTHQm/3O4YM=
Subject key identifier: 2C:08:37:13:D2:8E:FB:2E:9C:BE:EA:9F:A4:A5:66:1C:03:1C:ED:BF
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 0198534488B46E65FEF637619D62D2FDEB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 23:00:56 +0000
Manifest this update: Mon 28 Jul 2025 23:00:56 +0000
Manifest next update: Tue 29 Jul 2025 23:00:56 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: lpBh8liqQG/Yj2kKMfQaru1gYatFpodCz3VYZIZyqsg=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:88:b4:6e:65:fe:f6:37:61:9d:62:d2:fd:eb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jul 28 23:00:56 2025 GMT
Not After : Jul 29 23:00:56 2025 GMT
Subject: CN=2c083713d28efb2e9cbeea9fa4a5661c031cedbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:6f:0e:bc:a1:60:10:2c:81:f0:1c:b3:1c:
ef:e4:fc:ae:68:fd:dd:79:55:3f:bf:d6:b0:87:13:
0a:ba:ed:78:99:97:fb:2e:a2:fd:42:c7:a4:f5:b4:
bc:a5:7a:30:3c:49:2c:71:1d:33:c9:3d:9c:8a:00:
ef:47:56:ef:49:6f:c9:04:0f:45:38:9f:89:ed:5b:
35:7e:b7:1c:43:30:d0:e6:dc:30:4f:73:c4:f5:d8:
bf:ad:49:5a:2f:a0:70:0c:cc:da:e5:ec:97:b2:98:
d5:4c:ec:3c:be:a2:fe:ae:79:5a:e5:fd:10:94:c9:
b3:02:e1:fc:1b:e9:51:23:2b:37:1c:69:40:fb:9b:
05:66:f2:2d:43:13:4f:83:5c:4d:c0:08:be:dd:14:
19:a0:49:c4:f5:5f:0f:1b:65:c9:14:5c:d1:0d:96:
cf:a1:ef:23:37:5c:a0:af:37:b0:b3:a1:aa:4e:c6:
49:0b:7d:ca:52:1e:ed:9f:7a:ea:34:59:fe:3a:be:
25:3d:46:c0:91:23:9b:3d:9d:c4:22:b8:d8:12:69:
8d:ba:1c:68:65:55:b3:60:8d:56:1d:f6:4a:02:42:
08:f1:f8:81:42:e6:70:3f:7e:d5:c6:3d:d9:33:89:
4f:67:de:86:83:6f:6e:66:f3:dd:b7:f0:44:2e:60:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:08:37:13:D2:8E:FB:2E:9C:BE:EA:9F:A4:A5:66:1C:03:1C:ED:BF
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0f:40:46:fe:84:c9:34:7c:9f:63:f2:de:96:dc:5b:60:25:
6d:31:a1:4f:ad:2c:30:a7:24:bb:1a:de:26:50:81:cb:f8:b3:
d6:59:86:b4:8b:1e:bb:c9:9d:72:7f:0e:89:f4:d1:0a:65:fa:
70:cc:20:14:8a:08:d4:ec:e9:fe:28:03:81:1d:66:9c:b2:79:
9a:72:37:3d:07:36:bd:2f:a2:01:4b:88:f6:8f:a3:0e:c3:f1:
a9:0c:33:e7:bc:6e:18:27:49:f9:d5:4b:10:bf:15:c3:30:7c:
f9:3b:bf:2d:8a:f2:55:87:99:f1:89:c0:98:15:12:e8:6d:2a:
e1:a0:65:d2:cb:6d:bc:00:65:4f:a6:53:68:cf:21:29:c2:9f:
87:bf:01:9f:48:73:85:db:04:87:52:63:a8:a7:d4:7b:6c:e2:
bd:5c:6a:33:69:ba:5d:4e:5d:45:50:4c:8f:e6:e2:89:35:9f:
8f:c4:3e:17:01:c9:65:b5:25:54:35:14:ce:c9:5b:6f:2a:01:
3c:13:aa:22:e2:f1:80:57:d5:e3:0f:ff:45:e5:e5:79:74:d7:
0a:a0:a1:80:bf:79:df:ee:7f:e0:1f:87:aa:ed:36:e8:df:3b:
09:eb:bf:a2:c8:5a:3f:44:f1:5f:7c:17:42:f1:84:93:aa:6c:
e9:6f:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:17 2025 by rpki-client