Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
File: gF21Z4E54u6s6Jte6ZgsNUScCzs.mft (raw, json)
Hash identifier: edcrv8MaemUToiME6I5vjAFE+NhTyBZ2yZTWfjI6FRo=
Subject key identifier: 2D:09:0A:41:16:FA:10:80:EF:DB:D8:A1:42:B4:4F:1A:AC:C3:F4:67
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 019849D364B792B7F75ED3E774F1590D3B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
Manifest number: 129F
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: PShglmQTXkIQHkPe8FzwFmHj5JU.roa (hash: /e+wgkBq61bmma1KHWS9Osz5g9pecTkL2xoyoNPkRJQ=)
2: gF21Z4E54u6s6Jte6ZgsNUScCzs.crl (hash: hTJQ/rLVPUgV38JUErGPzzEBgpvIpTz4VWkdxsr3sj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:64:b7:92:b7:f7:5e:d3:e7:74:f1:59:0d:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=2d090a4116fa1080efdbd8a142b44f1aacc3f467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:ec:90:5e:e4:f8:91:74:94:29:1e:0d:37:
84:1e:88:5e:c1:f5:c1:0c:4c:e7:b9:f7:8e:e3:90:
ea:1e:ca:87:14:c0:79:1e:6a:cc:e7:66:f3:1f:ef:
ae:0a:2d:a7:9c:fd:03:d4:32:e8:42:2f:4f:10:db:
6a:3b:32:3d:27:2b:55:ee:0e:fb:45:60:12:b0:ba:
17:06:94:6e:20:bb:9a:50:e5:3c:87:76:32:5c:24:
eb:50:67:dd:a9:f8:0c:58:e5:70:01:10:47:28:5d:
6a:6e:4e:fc:8a:cc:50:a0:d5:93:b0:a0:05:40:eb:
5f:97:49:8e:39:08:68:88:4c:95:c0:1c:bf:49:07:
c7:8d:da:95:1a:81:5a:54:c7:0e:83:1e:34:7e:b5:
78:61:e1:14:01:79:c5:6a:d7:e5:0e:1d:be:7a:64:
5c:bf:55:d6:c5:c4:54:7e:5d:d6:86:65:f5:d5:ad:
8b:06:31:d3:98:46:69:ac:cb:eb:74:05:32:f8:02:
c5:33:6e:b1:4a:a4:5c:16:6d:ca:7c:de:73:28:e1:
c5:2a:13:18:87:60:89:40:f5:39:de:2b:ad:ab:b1:
31:a8:45:ca:ca:a9:c6:f5:e2:27:4e:dd:4a:f2:72:
6d:b4:7a:f3:67:5c:c0:9c:c4:23:39:20:89:f6:4b:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:09:0A:41:16:FA:10:80:EF:DB:D8:A1:42:B4:4F:1A:AC:C3:F4:67
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:c8:41:b1:8a:4b:20:4b:6b:90:dd:80:66:17:38:f3:6d:
4b:1c:ad:48:49:26:5a:93:73:62:d4:2b:1d:7a:15:22:30:dd:
ab:b1:f9:aa:da:2a:cd:34:13:16:f8:a2:73:18:8c:fe:c0:75:
dc:4b:23:4d:59:d5:1d:64:26:46:67:1f:01:56:11:8f:a2:d9:
7b:4a:97:d1:a0:d2:95:f3:22:a9:4c:0b:5b:bb:b0:f0:df:4a:
46:f9:c4:96:0b:fb:a5:7b:73:93:57:ec:8a:75:2a:ae:5e:35:
df:d1:c0:34:39:a8:1d:99:c6:3f:d9:da:32:27:83:d4:05:9b:
3f:bc:2f:8c:d1:b0:5a:26:77:fb:3e:52:e4:c7:9e:0c:26:d4:
8e:a3:69:0a:fe:04:a1:dd:00:7a:df:86:8b:b1:9c:8f:a0:56:
b3:ef:25:fb:25:d3:2f:b8:53:8c:83:35:dd:b3:3e:a5:26:4e:
a8:e2:68:d8:94:4e:dd:9e:cb:3a:46:3e:38:ca:5f:1e:0c:14:
53:c1:ac:a7:98:ef:43:b9:3a:5a:4a:1f:f3:42:0d:a0:d2:d1:
77:5c:61:1a:18:f5:71:08:43:86:69:14:71:a4:38:7b:e1:5b:
ea:31:d5:9d:1c:dd:33:1d:06:9c:3d:a1:bb:01:34:76:05:6b:
4d:58:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:58:36 2025 by rpki-client