Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: PJ+29F8w/PoP+aTWKoKo8VvWCnsuqgwhf34BPC0fn+I=
Subject key identifier: 77:EC:D2:9B:EC:86:58:CF:3E:3A:82:F0:91:ED:E4:84:8C:C3:5A:A7
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 01984AE57EC1A3020868F954D117F2DECFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:10 +0000
Manifest this update: Sun 27 Jul 2025 08:00:10 +0000
Manifest next update: Mon 28 Jul 2025 08:00:10 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: hW2RDZoCCWGp1ASfWaME2fNfJJ7XWa1C4toE+GA/4q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7e:c1:a3:02:08:68:f9:54:d1:17:f2:de:cf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jul 27 08:00:10 2025 GMT
Not After : Jul 28 08:00:10 2025 GMT
Subject: CN=77ecd29bec8658cf3e3a82f091ede4848cc35aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:b5:49:b4:3f:69:db:82:b1:fa:c1:73:dc:
11:80:91:3a:6c:c6:46:ab:00:42:6b:45:e6:0d:54:
ca:b1:c1:57:61:cc:7d:0d:3c:d2:4d:87:3c:07:93:
54:98:17:b5:1e:ad:96:59:1a:d7:4b:2d:07:77:4c:
49:02:b5:19:58:ce:41:be:e9:5d:93:0f:52:48:d9:
ff:bf:5f:82:b8:73:31:40:8e:fc:d3:60:e9:62:68:
43:7f:36:97:f5:f7:b5:ed:15:df:25:a9:45:75:81:
b3:ac:53:16:eb:6e:b2:88:df:66:18:6c:ec:42:15:
e3:e5:c0:cc:da:9c:be:bc:74:da:81:e0:1d:55:7f:
60:3a:f4:57:95:50:f7:a9:50:7b:02:fa:d2:2f:58:
25:2d:87:90:31:fe:35:98:df:13:f4:b1:93:a3:23:
80:90:92:1a:a3:90:73:5f:4b:9e:16:66:a9:5c:bd:
e2:a0:0e:00:b4:45:cd:06:5b:5e:d1:39:69:49:89:
08:d9:19:3e:88:3f:de:c2:c7:7a:45:9d:52:53:e5:
1c:a4:3c:5a:60:a8:40:1a:dd:9b:2e:d8:b0:82:ec:
01:74:d3:bb:d3:ec:da:2d:cf:2a:54:7a:71:23:b0:
07:cf:c5:15:d2:7c:5a:1b:e5:e6:fc:6e:4a:50:eb:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EC:D2:9B:EC:86:58:CF:3E:3A:82:F0:91:ED:E4:84:8C:C3:5A:A7
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:66:37:29:d4:91:69:ad:d4:f5:38:13:a6:42:b9:d8:4d:46:
1f:5b:0d:4f:da:84:ec:f6:1d:6c:44:2e:23:57:51:4f:cd:1b:
3e:a3:16:04:d3:fc:04:23:4f:c7:70:12:2b:f5:cc:a3:ea:fb:
ed:04:d7:66:09:50:4f:d6:ab:8f:53:ab:ae:0a:98:83:04:60:
57:cf:10:b1:c7:a1:a5:d2:ec:d0:92:18:c0:91:25:53:a7:5b:
fd:e1:7e:fd:a8:5b:06:a6:7b:7a:f2:44:05:8b:86:db:22:95:
74:c6:cc:a7:a1:98:61:35:08:78:c5:f9:b8:23:38:7b:b4:02:
a4:08:83:55:b3:b0:37:25:ae:10:ed:1f:eb:80:2e:a2:6d:28:
bb:66:b1:8c:90:bc:86:cd:89:99:32:09:0d:4d:9b:78:80:fe:
2a:95:77:5a:5e:4e:61:05:55:f2:5b:84:ad:e3:2e:bc:6f:e2:
75:f3:17:36:9a:b0:d5:07:0f:3a:5f:39:cb:eb:bc:b8:62:0e:
6b:1e:1d:df:97:d6:de:f5:90:44:48:88:88:d4:2a:de:aa:c7:
8e:4c:3b:72:12:a6:b3:12:93:05:19:44:9f:13:68:0a:e5:43:
79:18:f6:0f:1e:6b:86:7f:00:30:19:f1:3e:9b:61:3b:2d:8e:
d3:ab:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:27 2025 by rpki-client