Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File: gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier: xG+HxYzsMTmOhp4zt1An69+DI1GZB8fBDCXB4s2h2Ag=
Subject key identifier: 79:26:15:58:53:88:D7:DE:19:A2:5E:6A:D7:E8:30:4A:00:11:BC:57
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial: 019857FC9C01C36CE393634DB4A41576AEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 21:00:29 +0000
Manifest this update: Tue 29 Jul 2025 21:00:29 +0000
Manifest next update: Wed 30 Jul 2025 21:00:29 +0000
Files and hashes: 1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: gsO0Mx4qCU6PVaqw0COPm7MOPdCsmF0AvmV6rXrAl/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fc:9c:01:c3:6c:e3:93:63:4d:b4:a4:15:76:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Validity
Not Before: Jul 29 21:00:29 2025 GMT
Not After : Jul 30 21:00:29 2025 GMT
Subject: CN=792615585388d7de19a25e6ad7e8304a0011bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2a:8c:1d:b3:e3:f5:63:a9:dc:66:b1:33:94:
45:99:95:c2:2a:c4:c0:5e:c0:21:7d:e6:ba:14:ba:
c5:bb:49:0a:6e:b6:93:f0:52:dc:0a:d7:84:eb:03:
db:95:4b:3a:ce:12:ea:d7:0f:88:c2:1c:56:b4:da:
e6:05:39:b2:3c:90:c4:b6:42:69:d0:8c:42:f2:bd:
6c:d4:89:92:39:a4:39:aa:2f:f0:a2:74:3f:32:71:
0a:98:76:4f:e8:44:cc:0a:91:39:3b:26:f9:c2:67:
6a:2a:db:54:8e:6b:fd:51:82:b8:6d:31:24:6c:f1:
08:c6:36:4f:61:10:40:ab:81:1c:eb:af:18:a6:2b:
45:93:0d:78:e9:5c:2a:c1:8f:48:d5:f8:dc:01:e6:
62:85:c8:5f:96:40:02:f5:e7:09:97:77:b8:16:05:
5d:d6:38:33:b7:d7:5a:5f:37:64:ea:06:36:e8:5d:
03:80:94:86:a4:73:9d:6b:81:94:11:c2:56:92:58:
0d:de:b2:53:fb:79:87:3b:9d:a1:b6:dd:a3:3d:3d:
43:52:e9:66:6f:3c:d3:7a:80:5e:9a:3a:68:57:1f:
0e:10:cc:86:be:f2:5f:9b:53:ec:b0:e9:f2:f5:43:
fe:82:ff:52:28:a9:ed:87:51:d2:ff:db:fa:55:9c:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:15:58:53:88:D7:DE:19:A2:5E:6A:D7:E8:30:4A:00:11:BC:57
X509v3 Authority Key Identifier:
keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:12:e9:f4:43:61:33:e7:b2:b8:11:38:60:4d:02:f2:f5:
9f:8a:38:dd:65:54:62:7c:a0:ab:5b:59:07:51:12:d3:6e:83:
ee:7e:98:d4:f3:90:65:dc:3f:6f:d1:77:e9:08:92:a5:5d:96:
1e:6c:18:37:7f:ed:68:d9:ba:dd:c8:85:5d:02:2a:bf:18:bb:
cd:64:83:71:73:f5:ae:18:df:7a:7c:fd:7d:be:53:ee:c4:ed:
28:7e:bf:b8:60:ca:1a:db:08:77:75:c4:99:c5:fb:82:f6:cc:
81:4d:db:40:e6:5b:5b:aa:f5:a8:94:ac:15:34:c2:4f:aa:b3:
2e:35:03:92:7f:83:59:0c:23:be:7c:e6:f9:ae:20:0c:cd:5b:
72:48:1e:cf:65:a7:a7:f1:b9:76:ce:21:c8:eb:c9:12:97:e5:
91:33:3e:0c:8f:e3:92:54:19:99:cb:a4:0c:db:1b:ed:72:2f:
be:70:33:5f:d2:a3:70:65:d3:6d:59:6f:e2:d1:c3:88:50:73:
4a:96:f1:14:f5:78:bc:69:92:fa:66:4e:9e:c4:b5:f3:72:ee:
df:9c:2c:f9:f5:b4:8f:14:7d:a2:89:0e:96:89:bd:7a:1a:a6:
7b:e4:72:42:a4:83:bb:4d:35:ce:0a:51:6f:c9:5a:b3:f4:cc:
96:8c:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:30:42 2025 by rpki-client