Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: er9NPakK3dWPQq/s8fnVrSl2L+J9ObGWxrGw0DpvJv0=
Subject key identifier: 0E:29:39:36:D7:E4:A1:0F:D2:21:74:56:C6:6C:CF:10:A8:B7:9D:D4
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01983FBE20FC40A41CE97A058DF3E9D712D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 15FD
Signing time: Fri 25 Jul 2025 04:01:21 +0000
Manifest this update: Fri 25 Jul 2025 04:01:21 +0000
Manifest next update: Sat 26 Jul 2025 04:01:21 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: S+yza2+AhaVNN1XFCyaTqBXIZd5nUYsCYnMr6tMRt40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:20:fc:40:a4:1c:e9:7a:05:8d:f3:e9:d7:12:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jul 25 04:01:21 2025 GMT
Not After : Jul 26 04:01:21 2025 GMT
Subject: CN=0e293936d7e4a10fd2217456c66ccf10a8b79dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:ab:21:f3:11:0f:15:8b:75:07:f5:ab:42:
39:96:9f:7f:0a:f7:53:b1:e5:b6:6d:d8:44:6b:d9:
dd:ea:ca:34:0f:b5:6f:50:8b:c7:23:05:de:d0:02:
45:5f:c7:34:12:82:a1:43:d8:6f:c5:13:51:f9:bd:
a4:0f:5b:c6:07:74:4a:fc:e1:a5:1f:d2:48:f9:a9:
88:b0:37:54:9d:7d:a8:af:b9:7b:83:57:c5:88:e5:
45:aa:4b:50:2e:b0:3c:17:dc:60:54:10:28:c6:b5:
3e:87:ed:f6:6b:ff:cc:3e:64:29:ce:c6:ca:98:d2:
f3:35:bf:89:d5:8a:48:20:13:34:67:cd:65:59:d5:
0b:30:01:9f:6c:9c:6c:66:10:24:68:f2:ce:c9:a6:
6b:b7:c8:eb:d4:d0:61:c0:b4:d0:e4:c1:98:19:23:
ea:2a:26:f4:26:fe:55:f0:f4:28:62:83:ea:ce:e5:
8b:12:19:30:30:34:40:59:d9:31:60:94:15:49:ec:
07:e8:8c:c1:1c:e2:1c:96:4c:18:3a:a4:15:5a:00:
c2:67:62:0b:50:62:6a:b5:3f:86:0d:0d:17:ba:bd:
84:b2:55:8c:e7:6d:a5:54:95:5a:1c:4a:b4:3c:be:
0d:42:bb:e9:64:55:fd:31:37:a0:d9:7c:e6:67:59:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:39:36:D7:E4:A1:0F:D2:21:74:56:C6:6C:CF:10:A8:B7:9D:D4
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:a6:19:ef:7c:17:01:11:c5:c2:f4:20:72:52:ae:b5:aa:
a8:6f:e3:e7:3f:3d:17:46:56:1e:3b:e4:5e:9f:a5:98:91:bc:
67:dd:c6:ec:93:33:37:71:06:31:9c:89:94:07:08:6f:6c:cc:
f3:7d:ad:7d:e5:fe:13:ee:8b:50:56:f9:ba:73:45:57:81:22:
3b:c4:14:66:56:48:89:21:be:27:7f:d3:ed:a4:19:06:c3:a4:
ce:90:0d:11:dc:dc:88:08:41:ed:e0:d8:96:fc:9e:30:92:a3:
e0:17:62:97:89:69:e9:09:08:38:79:92:a5:c8:72:a5:d2:95:
7f:be:d2:7f:bb:b8:fd:8f:67:f0:88:a0:52:bb:42:6f:5a:7d:
e5:82:92:f5:04:e3:7a:d0:07:c7:e4:36:48:ec:2f:df:6b:4c:
29:ae:e3:ae:11:fa:b0:20:24:91:c5:53:36:b5:d4:d4:3e:d5:
39:78:5d:66:7a:ff:74:aa:a6:74:75:86:ce:73:f0:96:d7:3d:
ba:e8:08:6c:9e:ee:a6:51:e8:d6:84:e5:c2:ab:c5:9a:5d:cd:
1f:0e:4a:5e:ea:fa:f1:db:41:06:c5:b7:95:27:38:ef:59:f1:
a0:7a:db:cd:18:4b:9c:60:2f:4a:8d:3b:ac:af:4f:38:bc:00:
b9:ef:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:58:08 2025 by rpki-client