Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: mZuGSaVJHBCmzHsZSenpiUVu9zPIqwuvJE6chWEuoJk=
Subject key identifier: 78:51:75:10:46:01:97:3B:19:54:7D:5B:E9:E5:94:67:60:20:0B:20
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 01984AE5C2D44A6ABF39A9EE848E4B955FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 0512
Signing time: Sun 27 Jul 2025 08:00:28 +0000
Manifest this update: Sun 27 Jul 2025 08:00:28 +0000
Manifest next update: Mon 28 Jul 2025 08:00:28 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: tRrJ0ZHkSwR0+uDIfF4TClDQkVpWhKWof/yaEwbaYTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c2:d4:4a:6a:bf:39:a9:ee:84:8e:4b:95:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Jul 27 08:00:28 2025 GMT
Not After : Jul 28 08:00:28 2025 GMT
Subject: CN=785175104601973b19547d5be9e5946760200b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:53:8e:d2:a2:f8:3e:ce:c0:99:9e:a2:8f:
3d:90:9a:a4:9f:45:72:0c:87:59:8d:2d:df:6d:48:
22:8a:22:87:00:32:c7:3a:be:e3:74:1f:9e:87:ff:
15:78:89:2e:b2:ab:b2:50:c6:86:11:17:9b:66:41:
87:3e:a4:d2:fc:aa:57:88:ad:f1:5d:8c:a7:ab:75:
c4:17:a5:61:1d:53:0c:c5:8a:d2:2c:da:e3:4d:d9:
c4:10:8a:cb:83:0c:41:30:3d:47:c3:dd:4e:07:1f:
84:b5:51:89:77:d8:0e:71:8c:d1:37:36:78:ff:0f:
f8:58:5c:e1:08:20:bc:5a:e5:a3:b8:00:62:a6:c7:
7b:ca:49:27:94:98:41:3c:0b:30:69:7b:c4:d9:04:
fa:c6:97:3b:c2:90:01:2a:aa:c6:3a:3d:c3:58:b4:
f5:95:b3:fc:4c:56:cf:6a:5e:7f:5c:4d:47:c6:b4:
fc:0b:6c:fe:b0:48:dc:08:e0:09:19:11:75:44:5e:
52:f2:79:2a:b4:a9:96:da:85:20:f2:e5:fe:47:7c:
5d:84:1a:90:8d:12:3b:f7:35:61:65:40:a2:6a:2a:
7d:a7:c7:75:e4:49:27:12:83:ed:ed:46:38:1f:9d:
27:ba:cd:32:07:53:37:93:5f:ef:1f:04:cc:3d:0f:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:75:10:46:01:97:3B:19:54:7D:5B:E9:E5:94:67:60:20:0B:20
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:82:f1:54:a6:eb:0b:7a:fc:d5:45:b2:b9:a4:6c:68:ef:
28:e2:35:2c:a6:0a:a0:24:6e:0f:cd:55:3b:5d:e9:c9:d7:d4:
db:b8:4d:40:0b:67:fc:05:5c:7a:c5:8e:c7:1c:19:28:48:a2:
0d:bd:a5:bf:8a:44:ae:4d:22:db:9a:ad:3c:67:08:a4:e9:62:
83:e3:a2:e4:54:0c:71:26:ee:1c:72:ec:ea:cb:eb:0a:0c:95:
77:a2:69:fe:bf:90:65:6a:4e:ac:78:0c:13:41:62:d3:96:9b:
59:04:95:95:6e:c8:02:1b:f3:35:75:5b:71:4b:8c:3e:5a:d3:
f5:79:40:dc:36:6b:b0:6a:31:39:b1:0a:6a:8a:33:ca:67:eb:
ca:10:fb:a6:8c:81:8f:4d:af:5b:92:ba:39:a8:80:79:26:01:
f3:3e:77:aa:fd:99:63:e6:ac:2e:a7:bd:c1:ea:99:47:a8:9d:
e1:8e:f8:18:7e:e0:13:d6:80:7a:55:a1:d2:ee:62:b0:2c:c2:
e0:9f:f4:ef:15:36:ae:0c:66:58:dd:29:6e:ec:65:0e:78:22:
c1:4f:c7:75:da:fe:84:26:05:44:0f:a7:bd:f5:0a:88:f1:64:
aa:33:43:dc:c1:98:6a:2c:22:8c:d7:d4:63:f9:91:2a:06:81:
4f:9b:40:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:16:15 2025 by rpki-client