Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: 6bAv8LX1RE2Cj7C2aJyhb3F9FlvnZZOcMI7IrDzONyY=
Subject key identifier: D7:07:26:44:E2:93:68:B0:DE:49:58:BD:9F:B1:6C:5B:CA:FD:01:B3
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01983803D7FF899831BD77C21C40A4FC9315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 15F9
Signing time: Wed 23 Jul 2025 16:00:32 +0000
Manifest this update: Wed 23 Jul 2025 16:00:32 +0000
Manifest next update: Thu 24 Jul 2025 16:00:32 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: uNUAD0HcSzYXX6gCMCt78HoNSRpGuPX3ePmNeUUAyo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:03:d7:ff:89:98:31:bd:77:c2:1c:40:a4:fc:93:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jul 23 16:00:32 2025 GMT
Not After : Jul 24 16:00:32 2025 GMT
Subject: CN=d7072644e29368b0de4958bd9fb16c5bcafd01b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:bb:a8:54:7a:f0:70:4c:ae:3f:12:f9:bf:
aa:44:12:9e:ac:59:42:a4:93:71:67:32:fb:33:e5:
e6:3d:1a:eb:93:d3:8b:e6:7f:5e:78:07:c9:96:20:
84:f3:66:2f:0a:e2:fd:61:ac:7e:6c:d3:bb:26:1d:
f0:54:fc:b9:af:3a:d5:ff:61:47:a3:f5:e8:38:32:
5d:b3:2e:cd:07:15:8f:1f:57:a4:09:94:3b:c0:84:
ab:4e:4d:88:4e:8f:67:70:33:f7:59:11:7c:ad:4d:
8a:c1:72:9b:62:ca:9f:42:90:a4:87:ca:71:25:74:
2d:9b:4b:70:ea:09:c2:2c:d4:56:79:2e:4a:7b:21:
c4:24:46:24:84:e7:45:e2:19:f2:25:32:dd:55:20:
a2:49:35:06:bb:d0:b3:ac:47:86:b3:18:5b:02:e4:
36:40:62:32:be:e2:ea:96:ea:d5:30:42:c8:07:53:
a5:01:20:8a:59:60:be:68:5e:b1:36:75:cf:7a:4c:
a6:8d:db:83:15:cd:7b:d6:de:7b:d6:c9:e4:ac:30:
a1:3e:55:ff:be:b9:6d:7e:75:a5:95:ec:53:57:1d:
c3:91:31:71:6c:2d:2f:72:f3:6b:f0:64:9c:53:98:
d9:aa:64:c2:1f:91:30:11:b2:6e:a1:78:84:dd:a5:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:26:44:E2:93:68:B0:DE:49:58:BD:9F:B1:6C:5B:CA:FD:01:B3
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:05:88:b2:21:28:a1:41:aa:99:f0:81:20:ef:5c:0f:93:a6:
34:86:5a:00:f9:ab:8c:52:94:e5:89:68:e5:e3:1e:74:0e:a4:
5b:6b:3b:e1:dd:7f:75:a2:d8:7b:64:e5:0d:51:41:24:78:85:
de:3b:6b:c1:36:8e:bc:11:9d:73:37:b5:5c:dc:4a:08:c6:19:
13:99:78:66:9e:c6:9d:37:91:fb:fb:a7:b6:7c:19:6d:70:94:
d1:c7:b2:65:e3:1a:63:33:e3:bc:b0:da:fd:67:66:90:d8:bf:
ce:9c:5b:be:8e:28:a5:d3:d8:56:51:c5:86:75:34:a1:98:ef:
0b:e0:0f:e0:e6:5b:fd:5b:98:fe:83:6e:1b:27:87:7b:cc:47:
2b:26:52:d1:76:25:d4:a8:fe:92:83:fd:13:5a:9e:3d:53:8e:
64:85:09:70:c6:38:9c:fe:75:7d:d0:e7:d2:4b:50:cc:6b:7c:
bc:8e:cf:20:6a:02:52:4a:e7:12:86:1f:87:ae:9d:c6:16:23:
a7:5b:69:a8:b6:5b:23:db:11:4f:29:44:03:22:8d:dd:12:1c:
3e:ef:46:1e:eb:fb:55:18:da:ec:c7:8c:54:8c:af:66:8b:e5:
f3:a0:b8:ad:a3:2a:cf:c8:50:e9:44:86:c8:91:ed:c7:8e:21:
b9:87:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:37:29 2025 by rpki-client