Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: wBoyz6lVjwxZR/QxAcZaw1tVTQzeenibc9VlsMGlS08=
Subject key identifier: 3F:89:32:8A:BD:A4:FF:8A:22:0E:E1:4C:DA:C4:44:72:29:8F:04:5A
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 019854FCCA3BE082F6785A7AFAB740530746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 07:01:49 +0000
Manifest this update: Tue 29 Jul 2025 07:01:49 +0000
Manifest next update: Wed 30 Jul 2025 07:01:49 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: ItoYWv0I+iBxHhkuKX5WxFpqQPpyM1Iz2if1fkNox7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:ca:3b:e0:82:f6:78:5a:7a:fa:b7:40:53:07:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Jul 29 07:01:49 2025 GMT
Not After : Jul 30 07:01:49 2025 GMT
Subject: CN=3f89328abda4ff8a220ee14cdac44472298f045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:e0:44:68:a4:90:74:9c:78:9a:4a:43:a2:
e5:fb:aa:ed:ff:f7:4f:13:56:23:a0:51:65:27:22:
aa:80:dc:8e:fb:66:93:c6:13:34:6a:b3:e0:48:dd:
2a:bf:d6:1a:b4:32:c6:ba:11:2e:f0:fe:58:a7:df:
cf:48:69:a3:bb:4f:67:50:c1:85:7b:29:43:ca:dd:
b1:e0:ef:5b:cf:e8:cf:32:3e:b6:ec:e5:be:de:8e:
9a:a2:71:79:a9:4c:88:2b:f7:ca:3c:dd:c8:7a:b2:
a0:1b:80:6b:09:ff:ec:c5:6a:03:bc:62:b4:2b:fb:
08:04:b6:c7:1f:5b:21:31:ca:72:52:b3:75:81:4a:
99:f3:51:de:08:ce:64:64:6b:0b:a1:0e:94:05:68:
7c:20:1c:40:4f:14:ba:ab:58:24:31:63:e6:d3:7e:
d8:59:61:8a:d3:a8:f0:c0:ed:8e:e2:a2:71:e1:78:
9c:de:96:7f:92:10:34:f6:3c:fa:a0:26:77:cf:54:
88:a7:35:b7:1e:3f:ae:1c:a2:83:09:fb:d4:ee:0e:
9a:d1:69:fb:9a:b0:8a:bb:83:e5:4b:68:51:38:2d:
19:73:d8:ae:00:97:b4:df:b5:be:04:b8:89:a3:dc:
11:84:d0:54:75:ba:33:bb:f0:be:7d:e7:0c:12:26:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:32:8A:BD:A4:FF:8A:22:0E:E1:4C:DA:C4:44:72:29:8F:04:5A
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:77:ad:76:36:fd:26:a0:46:d2:73:d7:3e:fb:25:30:9a:01:
b8:5e:a3:53:8d:bc:8a:fd:dc:b3:8c:00:0e:f1:22:4b:ac:68:
e3:ac:57:b1:fa:7c:69:94:c7:5c:ab:11:4a:70:db:17:6c:cb:
1f:b1:24:33:c0:10:45:f9:c7:e3:1d:d8:fc:af:b3:ad:4b:e0:
33:3a:40:92:9f:e3:9e:1d:a0:77:a9:c3:30:fd:ae:32:28:5a:
f3:e1:b8:55:75:bb:57:6c:6d:a6:7f:e7:83:f1:60:94:70:05:
72:e3:69:57:db:26:25:fc:d5:88:ff:40:61:86:b6:83:e4:37:
60:b7:ca:e0:4d:e3:b0:4b:d4:90:46:24:16:65:4e:fa:9a:1e:
44:21:2e:d3:1e:c9:d1:ae:ff:cf:b0:69:e9:59:e5:93:32:cc:
be:0a:e9:98:15:83:19:e1:2d:93:87:f7:fa:20:82:64:d7:79:
8e:98:8a:9d:d0:b7:c8:96:22:a3:fc:57:f3:9f:3d:34:82:fb:
dd:ee:96:8e:a5:b1:30:3d:98:1d:45:2b:1d:e4:0d:78:a1:b1:
72:b6:b9:f3:81:c6:f8:2e:ce:3f:3f:8f:f8:36:17:48:66:53:
5a:54:2f:2b:1e:48:f9:c1:46:a9:55:29:a6:6b:9d:a8:8b:09:
ed:fb:7a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/Mo74IL2eFp6+rdAUwdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMzYwYmI4YTBlOTczYTk4YTMxN2RmYmFhMzdhYzNjMTRj
NTg3MDUwHhcNMjUwNzI5MDcwMTQ5WhcNMjUwNzMwMDcwMTQ5WjAzMTEwLwYDVQQD
EygzZjg5MzI4YWJkYTRmZjhhMjIwZWUxNGNkYWM0NDQ3MjI5OGYwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH7gRGikkHSceJpKQ6Ll+6rt//dP
E1YjoFFlJyKqgNyO+2aTxhM0arPgSN0qv9YatDLGuhEu8P5Yp9/PSGmju09nUMGF
eylDyt2x4O9bz+jPMj627OW+3o6aonF5qUyIK/fKPN3IerKgG4BrCf/sxWoDvGK0
K/sIBLbHH1shMcpyUrN1gUqZ81HeCM5kZGsLoQ6UBWh8IBxATxS6q1gkMWPm037Y
WWGK06jwwO2O4qJx4Xic3pZ/khA09jz6oCZ3z1SIpzW3Hj+uHKKDCfvU7g6a0Wn7
mrCKu4PlS2hROC0Zc9iuAJe037W+BLiJo9wRhNBUdbozu/C+fecMEibVWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+JMoq9pP+KIg7hTNrERHIpjwRaMB8GA1UdIwQY
MBaAFBo2C7ig6XOpijF9+6o3rDwUxYcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAt
MzA3ZTViODFiYmNlLzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAtMzA3ZTViODFiYmNl
LzEvR2pZTHVLRHBjNm1LTVgzN3FqZXNQQlRGaHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnetdjb9
JqBG0nPXPvslMJoBuF6jU428iv3cs4wADvEiS6xo46xXsfp8aZTHXKsRSnDbF2zL
H7EkM8AQRfnH4x3Y/K+zrUvgMzpAkp/jnh2gd6nDMP2uMiha8+G4VXW7V2xtpn/n
g/FglHAFcuNpV9smJfzViP9AYYa2g+Q3YLfK4E3jsEvUkEYkFmVO+poeRCEu0x7J
0a7/z7Bp6VnlkzLMvgrpmBWDGeEtk4f3+iCCZNd5jpiKndC3yJYio/xX8589NIL7
3e6WjqWxMD2YHUUrHeQNeKGxcra584HG+C7OPz+P+DYXSGZTWlQvKx5I+cFGqVUp
pmudqIsJ7ft6Og==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:02:46 2025 by rpki-client