Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier: ZMAgQMntomyDVujDq32uTEJyr9k6WuGmwLDIvzoPVN0=
Subject key identifier: 42:16:71:28:11:F5:40:1E:C1:D9:84:11:06:90:CA:98:84:7E:0F:CB
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019853445092870323CC1E79E2B50FFCCB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number: 0761
Signing time: Mon 28 Jul 2025 23:00:42 +0000
Manifest this update: Mon 28 Jul 2025 23:00:42 +0000
Manifest next update: Tue 29 Jul 2025 23:00:42 +0000
Files and hashes: 1: U15Qt1jB_OrSJnk2-GsuZxl_HGg.roa (hash: ViBEGhLSRDySzjvRDBVQx2K1SB4Zl4Aix1chhJ6C9AM=)
2: gHPWHyifWHwygl6RXc-S_BViAv0.roa (hash: z+ENnJP8gUh9QOydmc0fMConfO5crb4XF9elye+KrnQ=)
3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: eEzPD90PtzwKa5eu9ygPakUHyiwo52TC6DK2/k0+RJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:50:92:87:03:23:cc:1e:79:e2:b5:0f:fc:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jul 28 23:00:42 2025 GMT
Not After : Jul 29 23:00:42 2025 GMT
Subject: CN=4216712811f5401ec1d984110690ca98847e0fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:cb:66:83:b4:45:45:75:be:83:a6:ea:0b:
d7:85:08:85:87:40:a4:c1:03:95:e8:6b:50:70:1d:
37:98:12:96:17:f0:71:01:e1:68:11:31:2c:3f:26:
ff:43:af:e9:e5:21:28:e7:d3:f2:59:f6:d0:37:d6:
70:2d:af:a8:2c:91:09:94:64:04:09:fb:f0:26:99:
c4:94:62:e5:f5:cc:80:1c:c4:72:7f:1a:3f:28:0a:
20:e1:6d:7a:a1:32:95:22:6e:4a:03:42:8a:b0:e6:
77:f9:ff:1f:cb:46:0d:34:9b:0d:6f:86:16:e5:e9:
6d:5b:0d:7d:41:f0:dc:a6:d9:48:1b:b8:ad:3a:62:
38:be:74:f5:08:d0:1b:8a:62:f8:38:93:e2:8b:0e:
f0:d4:8a:7e:da:88:8e:46:c0:08:d4:c6:7f:6c:ff:
a1:aa:66:1b:f6:98:8d:45:0c:4a:57:bd:08:95:5c:
76:39:92:1c:29:cc:4f:b2:98:1b:15:e0:79:31:b2:
a7:90:73:95:47:33:87:d1:14:19:34:89:52:99:db:
be:59:99:61:be:c1:ce:4f:79:c9:eb:f2:7b:36:62:
e4:7b:50:39:1c:81:83:ac:54:72:5e:81:d2:df:07:
47:b3:0e:8a:9a:80:e3:41:84:73:3a:09:bc:c7:26:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:71:28:11:F5:40:1E:C1:D9:84:11:06:90:CA:98:84:7E:0F:CB
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:fd:2a:c9:0e:20:19:be:08:b1:57:8e:fb:65:fd:fe:13:
9f:87:26:26:19:4a:db:bb:51:83:81:2b:77:3b:e3:29:c2:01:
78:c8:ef:53:c5:b6:87:6f:98:bc:b5:29:39:73:14:9c:92:20:
33:90:de:5f:74:db:7a:15:42:c2:d4:86:55:43:d9:6d:ef:8e:
32:8e:15:a4:c6:d8:46:56:89:97:d8:bf:60:80:d7:4d:76:4e:
62:97:b3:d8:96:dc:4d:39:f1:c5:0b:5d:fd:b1:90:fc:a1:f6:
dd:b8:b4:c0:0f:a3:b3:dc:87:81:b3:e4:b3:38:c9:48:3b:fd:
4e:f7:5e:c7:58:08:9f:11:cb:d0:90:12:fc:32:45:58:62:c7:
72:ec:fd:8d:9c:2a:14:54:ec:91:23:93:11:6c:0a:ad:13:47:
3c:75:d5:d6:24:07:29:93:5b:26:81:17:d8:b0:29:e8:b0:9e:
87:97:34:2f:b8:fc:a0:5e:60:b6:f8:b6:f1:c6:e8:71:c9:49:
74:7a:76:80:7f:09:fe:93:62:6f:3a:93:8b:cc:26:1f:8a:9d:
3f:52:56:ff:ef:97:0e:24:e8:29:12:65:ca:d7:91:a6:84:02:
52:28:35:b2:7f:16:ce:ef:25:d1:47:34:ad:8d:b9:c0:31:c0:
b0:4f:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:32:12 2025 by rpki-client