Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
File: gAVnqlixEmbTjGRvpkc_VEk3fE0.mft (raw, json)
Hash identifier: U8K9Xvx+YkFwuJ0MlvBU5dmzeKFg4VkoZaGTV9lzOc4=
Subject key identifier: 58:C7:56:4A:1F:90:65:20:58:D0:74:05:D4:DF:D9:31:2E:B5:53:21
Authority key identifier: 80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
Certificate issuer: /CN=800567aa58b11266d38c646fa6473f5449377c4d
Certificate serial: 019848892D9B5C2A5DD0B8670451566DA990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
Manifest number: B8
Signing time: Sat 26 Jul 2025 21:00:06 +0000
Manifest this update: Sat 26 Jul 2025 21:00:06 +0000
Manifest next update: Sun 27 Jul 2025 21:00:06 +0000
Files and hashes: 1: gAVnqlixEmbTjGRvpkc_VEk3fE0.crl (hash: qEaz2GK+YG8Zb7CgjlCC5RdBT/yw8jwyHRAUrsII3PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:2d:9b:5c:2a:5d:d0:b8:67:04:51:56:6d:a9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=800567aa58b11266d38c646fa6473f5449377c4d
Validity
Not Before: Jul 26 21:00:06 2025 GMT
Not After : Jul 27 21:00:06 2025 GMT
Subject: CN=58c7564a1f90652058d07405d4dfd9312eb55321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:95:89:c2:8b:ab:e6:23:1b:15:0a:29:9c:
32:fb:8e:61:e5:1b:76:35:d5:a9:0f:ac:7b:21:10:
b4:00:e3:28:55:55:b0:f6:52:8c:04:4e:9a:aa:0c:
b4:c7:9d:64:43:5a:2b:01:14:e7:70:3f:a7:19:4f:
90:16:e1:ad:d6:29:6e:eb:de:0f:d9:b6:26:9b:86:
33:5b:a6:3a:22:91:fb:59:66:e3:3f:4b:24:cc:49:
06:9d:38:cc:81:ee:2a:ea:7e:e2:52:7c:28:e3:02:
ef:da:e4:cd:e3:6f:03:26:65:ce:b6:24:53:21:ef:
e3:3b:c8:80:58:b2:6b:9d:18:b6:03:4f:33:25:45:
2d:4e:2f:20:e4:0e:bc:49:09:62:1e:89:0f:11:c8:
9f:82:74:52:60:a7:60:84:a6:5a:5f:0f:6e:1c:2c:
7d:93:e9:5a:cb:1a:44:6a:16:8f:c4:81:99:16:2f:
05:98:20:04:f7:26:0c:dc:f3:5b:2e:c4:a8:92:7c:
95:06:9d:45:a5:fa:3d:10:e8:15:58:29:8c:3c:8d:
27:88:a0:f6:21:9e:13:f1:2f:3e:78:1a:65:e2:08:
9a:64:92:b7:94:f9:03:a0:b8:78:0a:7f:c8:e9:32:
ee:1e:cc:c6:c9:d5:6d:a8:ae:96:91:8b:36:4d:12:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:56:4A:1F:90:65:20:58:D0:74:05:D4:DF:D9:31:2E:B5:53:21
X509v3 Authority Key Identifier:
keyid:80:05:67:AA:58:B1:12:66:D3:8C:64:6F:A6:47:3F:54:49:37:7C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAVnqlixEmbTjGRvpkc_VEk3fE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2c74d9-c3e0-496b-a4be-8dd45d2bca7a/1/gAVnqlixEmbTjGRvpkc_VEk3fE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:96:16:96:d7:6f:6c:4a:bd:c6:46:e4:af:08:df:ef:a8:eb:
6f:e2:07:3b:00:77:09:53:cc:b0:39:3e:39:59:18:01:3c:58:
08:cf:a6:12:d6:7b:3f:fc:0b:8c:4b:b8:95:19:05:1e:e3:ff:
a1:84:1a:0e:51:08:6e:77:ee:83:db:7d:e2:91:7a:c8:57:b1:
1b:e0:d0:40:b2:52:cc:fb:53:a0:e9:19:88:19:18:80:a8:a9:
39:bf:e8:61:35:c3:09:19:01:1f:e0:7c:df:8f:b4:0c:16:02:
40:b5:67:fa:96:16:a3:d8:00:51:7b:0a:8b:13:20:50:78:c7:
d6:5e:c5:ef:dc:87:5a:94:ac:b7:b9:a6:ee:4e:77:a5:ab:71:
3c:54:df:df:c0:b8:2a:29:5d:12:e5:6c:f0:39:28:7c:0c:c6:
61:ee:9e:6e:94:23:80:0a:35:4b:99:b3:91:97:36:76:63:aa:
8d:58:dc:39:b5:18:28:d3:9d:a9:f4:17:59:23:e5:e3:12:34:
a5:b3:cc:13:ce:cc:c3:ff:60:b6:9b:37:d4:c4:c9:24:07:5a:
11:4f:14:e1:db:ee:01:5d:17:de:5f:24:bb:fc:c8:c5:04:61:
86:e1:d8:fd:89:d7:75:95:87:5c:61:64:d6:d1:9e:c8:32:f1:
49:39:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:13:23 2025 by rpki-client