Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File: GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier: YCHE0djpmTlylaNBxwaZB0nWSt33zRaFkQUTMDJjtUU=
Subject key identifier: 71:6D:38:4B:8F:8C:4E:5C:21:AA:37:00:A2:4C:05:CA:F1:AA:04:D7
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 0198443F01282923940F4FF0BC27AF74BCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 01:00:36 +0000
Manifest this update: Sat 26 Jul 2025 01:00:36 +0000
Manifest next update: Sun 27 Jul 2025 01:00:36 +0000
Files and hashes: 1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: CBk8EMPvqaAKt1/GFi/dSb66rHmjWCqeYv1A/IVR1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3f:01:28:29:23:94:0f:4f:f0:bc:27:af:74:bc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jul 26 01:00:36 2025 GMT
Not After : Jul 27 01:00:36 2025 GMT
Subject: CN=716d384b8f8c4e5c21aa3700a24c05caf1aa04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:1d:c1:d1:ec:17:e8:bc:fa:07:38:b9:2c:
5c:02:34:fe:df:86:1a:9c:c8:ba:9d:35:bd:4e:39:
53:53:fb:9e:4b:f7:3a:8b:91:35:eb:ba:10:da:8b:
07:36:d6:fe:62:b6:da:e3:46:b8:39:d2:18:5e:0f:
6f:7e:25:a0:c6:ac:32:fc:b0:26:ce:77:57:37:0a:
3d:d3:c3:bb:05:a0:d2:66:41:24:75:22:63:fc:b9:
75:08:18:5e:48:20:31:70:0e:2a:4d:2a:02:93:f7:
c4:20:cb:de:02:c1:e3:c6:d6:42:2b:cc:eb:94:c3:
2e:ae:8e:85:97:41:b0:7e:6b:76:30:38:a7:3a:75:
c1:85:cc:0d:00:33:f2:f5:18:12:86:c3:e0:57:71:
72:63:db:18:63:33:88:80:2f:56:d0:d0:91:28:1b:
f2:db:5c:2b:e0:88:14:8c:c9:4c:2e:75:e9:9c:af:
85:4e:5a:98:4b:3c:df:9d:06:02:dd:91:f4:6a:7c:
41:11:30:41:0d:c5:c4:50:0a:55:96:6d:c5:5c:69:
f5:d3:76:95:12:83:f3:2d:bd:d1:c8:8f:08:a2:4d:
f3:3b:bd:e5:b8:af:02:51:26:49:d3:f4:36:c8:1e:
d8:58:41:32:60:24:7a:70:a8:65:13:ec:56:dc:3d:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6D:38:4B:8F:8C:4E:5C:21:AA:37:00:A2:4C:05:CA:F1:AA:04:D7
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4a:7d:da:90:f2:e1:e7:ba:25:e7:67:10:b9:0c:6b:63:71:
50:c9:fa:a4:6f:a6:87:79:a6:69:b5:59:98:17:eb:13:ef:25:
33:ec:92:b5:59:f6:e5:85:bf:1f:dd:d8:44:be:07:3d:21:cb:
a8:3c:c3:0f:dd:61:5a:4e:4e:49:92:37:4c:29:d7:a4:3c:32:
3e:33:03:41:26:36:e9:d5:60:64:31:70:4d:b4:08:05:3a:63:
d3:b1:e1:f5:76:41:57:c1:fe:64:35:ca:aa:9d:58:8a:d8:02:
91:3a:27:b0:91:32:56:ac:ae:7a:b8:22:99:ac:64:d7:8a:3f:
e9:c1:ea:3b:eb:d9:0b:4b:39:7b:6e:57:66:9e:22:19:df:2f:
2c:02:68:a0:b4:89:80:6c:1c:e8:ce:5c:45:ea:fa:06:e3:79:
be:c0:d0:b2:7a:36:76:c0:5d:6b:2e:94:7c:0b:6e:41:5d:ec:
ca:8a:ae:b9:1e:9a:10:76:00:d1:a9:2d:df:eb:4d:94:3f:e7:
6b:e7:d3:fd:26:f6:77:6f:60:d8:3a:03:77:90:bc:58:83:ab:
cd:0a:a0:fd:fe:63:ef:9f:62:64:c2:f8:ca:4e:96:36:69:01:
fa:2a:1e:3f:47:82:a4:62:4d:eb:8b:b9:ae:b4:c6:0b:44:fb:
7b:d6:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:53:58 2025 by rpki-client