Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier: bseoTu4xZrXEwsykLPHV2GBIbkAyRFdj5OWaD1bgAzQ=
Subject key identifier: A0:D7:03:99:E7:87:08:AB:2A:8E:11:D6:E9:FC:5C:96:3B:CA:81:76
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 0198282342D4ED49CA16247D5502C72F0322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number: 15F3
Signing time: Sun 20 Jul 2025 14:00:56 +0000
Manifest this update: Sun 20 Jul 2025 14:00:56 +0000
Manifest next update: Mon 21 Jul 2025 14:00:56 +0000
Files and hashes: 1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=)
2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=)
3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: 9klqJx0khRjdCtYfKRrEGHo7abK4tiISCh17kDu8v+k=)
4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=)
5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=)
6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=)
7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:42:d4:ed:49:ca:16:24:7d:55:02:c7:2f:03:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jul 20 14:00:56 2025 GMT
Not After : Jul 21 14:00:56 2025 GMT
Subject: CN=a0d70399e78708ab2a8e11d6e9fc5c963bca8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:e6:22:30:2f:60:3f:8a:5a:e6:b0:d7:43:
51:65:68:45:ed:19:ea:cc:79:65:f8:73:33:09:d9:
a5:80:4f:1c:7e:e2:e7:fe:dc:3e:86:63:4f:43:e7:
2e:13:cd:c2:91:f6:e4:38:b3:09:45:df:9c:ec:ba:
5c:15:6c:9f:39:37:09:57:59:b1:c3:88:b6:da:21:
45:55:70:c1:58:ae:5d:a9:bd:e4:45:ce:f6:89:1a:
09:11:6d:e4:97:c5:3c:12:f3:7b:1c:46:ab:43:8b:
6e:65:8a:11:b8:35:18:42:d3:21:14:ff:64:ce:3f:
00:0e:b9:b4:97:a6:f1:ed:24:de:ac:e1:1d:cb:a4:
67:33:af:f8:b1:fa:a5:d9:cb:e3:d1:f8:17:7c:40:
9c:82:81:1d:01:b7:b4:b6:da:82:bb:38:58:d2:c1:
0b:70:0a:62:68:68:6a:91:63:17:fc:6c:8b:a3:32:
1e:be:80:d0:f4:20:b4:3e:c9:47:b9:aa:fe:56:5d:
ee:53:e5:23:79:79:b3:39:08:9e:2c:fc:b2:b4:2d:
9f:8b:7f:40:b6:37:5b:5f:f9:f1:23:b3:5d:9c:d5:
0b:0e:8c:d6:5e:bc:b4:af:03:fa:a5:73:e7:aa:df:
b6:2a:8a:b8:f4:5e:a5:57:25:16:c9:33:f9:0c:3f:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:03:99:E7:87:08:AB:2A:8E:11:D6:E9:FC:5C:96:3B:CA:81:76
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:f0:19:bf:04:a7:1f:95:9b:d7:e6:03:e6:2c:37:f3:23:ba:
2c:ad:3f:04:a6:5d:b8:b9:05:61:2f:f3:72:8f:36:c3:06:4a:
75:fa:fb:e6:79:62:47:ba:84:c9:d2:1f:2e:90:5d:95:71:ec:
b2:e9:d6:48:d9:a0:97:78:13:0e:95:aa:71:64:bc:dc:67:91:
c1:61:d0:7a:9a:72:30:3a:93:17:0a:34:fb:f0:32:d4:6b:43:
cd:30:fa:d6:b0:21:71:de:2a:91:26:62:e7:40:cf:57:85:7c:
2b:73:0d:6d:15:68:63:df:b9:b6:db:ca:94:09:2d:74:3f:bb:
46:67:c8:b2:a0:e1:65:2d:8e:73:8f:c0:dd:ca:63:22:ad:55:
48:cb:b0:29:dc:b6:e5:4a:68:2d:c4:82:07:44:d9:59:9c:d9:
cc:f7:77:21:e4:59:07:3d:e8:65:d3:89:77:15:45:19:1c:5d:
6f:12:7c:eb:3b:7d:25:6c:9c:7d:ae:a6:c5:61:3e:e4:44:48:
b8:6a:2a:fb:7f:91:1f:17:86:03:7f:9f:88:f9:dd:e8:de:60:
92:94:cf:9c:fd:61:82:e1:bd:5a:d2:1d:dc:5b:8c:f3:eb:7f:
fb:bc:93:ae:97:83:23:da:37:94:75:86:cc:e1:dc:04:ed:8a:
1e:cf:8e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:32 2025 by rpki-client