Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File: giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier: 57cVEakxyOK2TIyxuxjJRL49B/3pwYEKzwkSpV+Oxbs=
Subject key identifier: 63:0A:2D:7C:2C:CA:4E:06:35:D3:50:97:58:7E:C3:22:77:53:0B:11
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 0198537B24C249409BBE8B159BCA5EAD7C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number: 14F7
Signing time: Tue 29 Jul 2025 00:00:35 +0000
Manifest this update: Tue 29 Jul 2025 00:00:35 +0000
Manifest next update: Wed 30 Jul 2025 00:00:35 +0000
Files and hashes: 1: bHa5FimsimJ7r5ToFYrryDiB-9M.roa (hash: fOdUqsDSfmPIMyaQ7PWVxrcyqzptZELP3xikWCnwSh0=)
2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: czAeQBLJC+TmjdhjgdXwuoN7shp8Jy9fi1ZVvzxmoTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:24:c2:49:40:9b:be:8b:15:9b:ca:5e:ad:7c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Jul 29 00:00:35 2025 GMT
Not After : Jul 30 00:00:35 2025 GMT
Subject: CN=630a2d7c2cca4e0635d35097587ec32277530b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:db:e8:cc:90:33:de:d7:c1:3e:d6:63:d5:
81:a4:5e:40:4f:26:31:8d:46:f3:d9:4f:2f:6f:5b:
1f:ec:3b:d4:be:e2:c8:13:a8:9e:ef:6d:52:be:84:
b0:71:9a:2d:3c:7d:d8:7d:9b:66:a7:47:ed:8b:76:
a3:5e:c2:f5:2f:e0:42:b1:be:2c:c5:cb:15:30:2d:
32:70:8b:e2:7f:74:d2:12:58:ab:7a:ce:a5:3d:e1:
89:2a:6a:bd:48:a7:77:e5:82:c2:c5:98:95:43:51:
b0:7d:14:01:05:dd:f0:1d:8b:dc:74:80:17:dc:90:
9d:98:2d:11:56:76:21:1e:33:26:07:40:24:05:50:
25:df:9a:c6:aa:e1:a4:35:25:b3:eb:f8:45:3b:c4:
d6:47:2a:fa:84:c2:b7:9b:38:0b:d1:d7:b5:7c:80:
93:44:71:8c:4f:39:b8:e4:db:68:ea:27:58:fe:0a:
e5:dd:c7:a0:ee:12:dd:49:fc:31:67:21:3d:1f:27:
40:59:21:37:13:c5:2b:7e:41:e9:05:e4:e0:30:f6:
82:b4:e7:7a:70:37:b3:94:5b:47:39:aa:3e:b3:07:
64:b4:67:09:3c:ae:c0:f8:1e:4b:cd:38:75:a5:47:
94:e0:d9:81:72:84:1d:be:46:3b:6a:a2:20:62:89:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:2D:7C:2C:CA:4E:06:35:D3:50:97:58:7E:C3:22:77:53:0B:11
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:05:24:95:9e:29:64:1b:6b:af:26:c1:73:04:90:f5:8b:
f1:97:e2:39:8b:a3:80:9b:50:3a:28:44:a0:39:ec:7f:de:01:
65:a6:a6:97:27:e5:4b:98:a0:6c:5c:a2:ef:03:3f:83:9a:27:
e0:2b:26:99:27:9f:b8:cc:98:85:07:a9:c0:c2:ba:46:ab:c9:
73:5e:5f:dc:51:6f:f3:56:aa:2c:71:f1:77:c3:4e:81:2a:b9:
4d:b0:bf:1a:bb:ca:5f:09:3d:fd:8d:0e:d3:88:3d:44:16:e7:
a3:ce:9c:2b:60:64:cb:f5:3d:cf:91:de:99:63:73:78:9b:90:
0a:64:cb:ba:42:b7:25:99:25:66:a5:d6:f4:12:a7:a6:a0:d9:
09:00:5e:9d:48:15:c0:88:6e:ae:77:30:a6:92:69:ed:80:ba:
0c:74:71:21:a1:d1:ec:23:00:ab:fb:1a:7f:fb:c0:75:ca:84:
59:4d:bc:e6:5c:e3:b6:ae:43:0c:d2:dd:2d:1e:b4:08:b9:d1:
7d:72:b2:33:58:55:85:e9:d9:8d:67:73:c6:83:08:2d:d2:25:
0e:1f:c6:02:e6:c4:e1:4a:ce:69:31:92:90:4d:5e:9b:c0:db:
d8:d5:5f:e0:77:f9:4d:3f:17:e1:74:a0:aa:95:a9:89:31:94:
bd:66:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:51 2025 by rpki-client