Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File: gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier: hL/DYD/hXlo+Bs5mxOadvThzfv9aJZJEYQSFPg/9BSg=
Subject key identifier: 9E:C2:C3:E8:90:7A:BD:AB:89:04:D1:E7:2B:47:B9:3F:D6:E8:C8:F1
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 01983194066936285603DA11E823AFCA98EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number: 15F6
Signing time: Tue 22 Jul 2025 10:00:41 +0000
Manifest this update: Tue 22 Jul 2025 10:00:41 +0000
Manifest next update: Wed 23 Jul 2025 10:00:41 +0000
Files and hashes: 1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: FAvlR3QYEzPf527VNSYR96E1skrC7CgQVtFuTQHMUd4=)
3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:94:06:69:36:28:56:03:da:11:e8:23:af:ca:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Jul 22 10:00:41 2025 GMT
Not After : Jul 23 10:00:41 2025 GMT
Subject: CN=9ec2c3e8907abdab8904d1e72b47b93fd6e8c8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:1b:a9:8d:70:2a:50:2b:ae:00:f8:f1:13:
12:7e:f7:c0:47:57:06:e3:fc:91:62:80:6d:23:e4:
ca:05:79:7c:bd:55:75:c6:38:5c:37:bf:1b:77:33:
32:60:1b:80:e7:48:a3:af:2f:97:d0:92:a1:2f:1d:
ff:4b:e3:7c:97:94:78:9b:ab:be:70:0a:27:28:3f:
da:ff:12:ff:2d:11:dd:ce:da:5c:6e:d0:ac:b0:3b:
ac:11:a4:5a:b6:e9:5f:5c:c6:f4:ab:c3:15:d0:f4:
a9:64:6d:00:ae:8d:e3:0e:6d:26:88:8a:d3:af:64:
5e:30:55:79:80:17:63:4e:52:c4:4e:42:be:61:08:
2a:90:54:d5:66:61:12:6b:db:03:fe:60:e1:56:47:
c4:7a:8b:a2:04:2e:f0:2d:94:d4:ee:f4:01:ca:46:
85:d4:e4:e9:a9:f9:1b:0c:07:b8:d4:e3:87:b6:93:
5c:00:49:85:62:20:37:72:87:24:84:1d:fa:a0:7e:
c2:4f:ce:38:96:d7:ea:06:b6:a0:52:98:0d:6f:09:
fd:c5:cb:0f:74:70:6e:0a:ff:8c:4e:20:8c:f3:b2:
e9:ea:9e:ae:78:de:fa:20:97:8f:af:fc:cc:31:34:
5e:9e:4a:06:15:10:d2:4e:c9:5e:55:f0:2d:49:85:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C2:C3:E8:90:7A:BD:AB:89:04:D1:E7:2B:47:B9:3F:D6:E8:C8:F1
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ff:54:ef:3c:26:2d:d9:95:0b:39:14:54:45:42:a3:ae:f5:
58:83:d8:92:48:6c:b9:d9:05:b5:98:7e:15:be:c0:e3:0a:76:
62:0c:30:1d:9a:8b:43:54:da:d5:f3:da:61:91:48:41:ec:9e:
21:69:c2:cd:c6:ca:8a:05:43:d3:00:13:10:70:c4:ba:07:d9:
21:c9:0f:be:0f:1f:3f:e8:1e:50:4b:79:48:da:b4:17:55:24:
a2:13:e4:ae:cb:8b:fa:ec:b9:bf:17:f6:03:c2:75:f5:a4:2c:
6d:ac:e3:21:d9:f6:68:2f:14:74:c9:68:c7:b3:d1:47:cd:2f:
ab:46:0f:9f:9d:6d:67:27:d3:8d:4e:71:45:d9:ff:3e:69:2e:
fc:a5:8b:84:32:94:af:8f:e8:0a:4d:6b:f7:05:23:28:9d:5b:
1f:38:83:95:7a:b9:08:f4:ea:99:3e:b5:3f:41:48:11:20:a1:
dd:af:ac:f1:08:0a:13:f8:6e:25:3d:35:6a:a0:b6:cb:6d:e3:
6e:34:27:dd:31:3e:99:21:d7:d4:0d:3f:09:00:2d:bd:eb:60:
9d:da:c8:4b:ba:c3:3a:5c:a3:ef:9c:58:79:91:b1:db:1b:22:
51:fa:af:0b:dd:f6:83:f0:cc:45:e9:8c:fa:4c:20:89:b3:3e:
7c:45:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:49:43 2025 by rpki-client