Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
File: gViH9Fq7wIGqRpplwXmN5hENnIk.mft (raw, json)
Hash identifier: mGHycFVzBFdsAtzs76zSoSGo1QuVEV3vikqY3p3pApw=
Subject key identifier: D5:E3:67:7F:B0:1C:15:73:1E:13:C5:07:DC:5E:E9:D4:17:9E:6F:97
Authority key identifier: 81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
Certificate issuer: /CN=815887f45abbc081aa469a65c1798de6110d9c89
Certificate serial: 01984965553FC8725F2BE48C81A55C62E2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 01:00:34 +0000
Manifest this update: Sun 27 Jul 2025 01:00:34 +0000
Manifest next update: Mon 28 Jul 2025 01:00:34 +0000
Files and hashes: 1: a4XCmBSUFP_yl4L96gtg6U9Ozn0.roa (hash: FJxd7UG3Dpf9Q0TJKoxdhkygKRFy48iyIOOg3rogNwA=)
2: gViH9Fq7wIGqRpplwXmN5hENnIk.crl (hash: TB1SxV5IHqSam0bWB4QKROy9SuZegistqhvL1+I0qBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:55:3f:c8:72:5f:2b:e4:8c:81:a5:5c:62:e2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815887f45abbc081aa469a65c1798de6110d9c89
Validity
Not Before: Jul 27 01:00:34 2025 GMT
Not After : Jul 28 01:00:34 2025 GMT
Subject: CN=d5e3677fb01c15731e13c507dc5ee9d4179e6f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:3f:28:c3:16:73:4e:4d:a6:03:4e:25:68:
50:2a:9b:2c:af:70:b9:02:cc:be:85:0f:36:0b:3c:
75:4e:58:df:85:bf:6e:e9:41:a8:2b:7d:29:af:b3:
fd:6f:9a:e2:ab:61:cb:e9:d2:34:92:07:50:f5:35:
74:e5:2c:26:62:82:9c:3d:1f:dd:c5:f2:3f:38:e6:
6f:46:50:79:99:40:f1:2d:88:75:e3:49:5b:ab:bd:
05:cb:08:64:b3:e6:01:fd:49:66:1a:b6:43:80:2e:
8b:da:a7:ee:60:f1:1d:44:e1:db:72:fb:14:de:7c:
cb:7c:26:d0:35:3e:1c:ad:10:76:97:66:eb:f3:bf:
4b:8d:8f:db:80:c9:fc:fc:6d:c6:70:b4:7a:47:51:
51:5c:6b:fa:c8:06:24:a8:c5:06:ac:3e:60:a3:88:
80:32:2d:36:19:f0:37:6e:b2:f0:b4:aa:d9:fa:f8:
a7:d0:84:0c:21:ce:b4:98:d9:7b:4c:8c:22:f5:07:
ef:0a:45:8d:f4:fd:f7:33:8f:f1:78:f4:9f:a0:c6:
f8:3b:85:27:3a:37:47:16:cd:d3:66:0f:59:7a:31:
00:d1:df:6a:94:63:c4:f9:d6:4c:5f:1a:6e:9f:8b:
f4:c2:b4:f8:8d:a1:b7:1c:cd:f4:45:a9:7d:23:aa:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E3:67:7F:B0:1C:15:73:1E:13:C5:07:DC:5E:E9:D4:17:9E:6F:97
X509v3 Authority Key Identifier:
keyid:81:58:87:F4:5A:BB:C0:81:AA:46:9A:65:C1:79:8D:E6:11:0D:9C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gViH9Fq7wIGqRpplwXmN5hENnIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/gViH9Fq7wIGqRpplwXmN5hENnIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:41:62:6d:14:aa:39:c6:06:64:1c:dc:5f:21:c9:e1:a4:01:
36:af:fd:9c:0a:a4:0e:ad:3e:e8:92:5d:a4:e9:97:fc:6b:00:
4f:46:cb:6b:91:0e:19:73:dc:ce:19:50:96:fe:21:94:a8:1d:
1b:67:fe:c1:b9:2c:ca:e8:4e:97:1f:92:77:aa:ea:dc:6e:d7:
ea:da:b8:5a:56:58:e5:09:28:f7:d3:c7:a9:c8:32:2c:18:19:
0b:67:d4:6c:be:94:b0:b7:f0:9c:b4:48:b8:81:79:53:de:91:
3c:5b:10:3e:2a:9b:29:2a:68:6b:53:e9:f0:f8:c4:df:29:f5:
96:1a:14:c2:60:11:b5:bc:a8:55:a8:54:ba:b8:06:e1:84:cc:
a6:e8:00:b3:2f:85:9f:7e:2c:d0:6e:54:38:c7:a8:81:3e:10:
27:c4:4e:d9:8d:26:a2:f6:a2:80:1b:20:ba:f9:a9:c7:83:02:
de:89:61:38:68:95:4a:82:3c:86:43:e5:d2:e7:eb:f0:b4:08:
f7:31:60:cb:1e:b8:7f:9f:ec:72:d4:1c:6a:de:b4:de:b9:b9:
f6:87:da:2b:66:8a:2b:c0:c4:b0:f4:46:c7:91:e2:04:ef:17:
f0:b8:6c:5c:49:76:9d:0e:76:50:19:97:41:44:56:1e:9d:29:
6b:6f:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:29:06 2025 by rpki-client