Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: GQhC5IPTbwCUMR1LCjdRM9+gNFoNKLIW1ORgQa7sTPM=
Subject key identifier: E0:24:EA:CA:80:CA:73:E4:BB:5C:A5:8B:0F:C9:74:80:D8:4D:38:2A
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 019922C344B83518FF0032DC01EC9A8F1520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 1657
Signing time: Sun 07 Sep 2025 06:00:46 +0000
Manifest this update: Sun 07 Sep 2025 06:00:46 +0000
Manifest next update: Mon 08 Sep 2025 06:00:46 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: 3MvL3ojLadJmjRBFLTt3Bz+OfbB5rQ7s+aymXa9rCdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:44:b8:35:18:ff:00:32:dc:01:ec:9a:8f:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Sep 7 06:00:46 2025 GMT
Not After : Sep 8 06:00:46 2025 GMT
Subject: CN=e024eaca80ca73e4bb5ca58b0fc97480d84d382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:ac:1e:96:71:83:62:9b:b3:e8:60:cd:e3:
bd:40:05:12:01:aa:bc:0c:7b:7c:27:43:e8:c0:31:
94:91:44:35:2b:e0:9e:e6:d9:75:8a:cc:c9:bd:3f:
55:82:00:23:47:f8:6c:9a:ba:1c:44:77:b3:de:3d:
82:64:33:a7:26:86:22:ea:93:db:21:a1:35:42:4a:
a5:26:7d:3d:a2:aa:35:a7:03:c8:14:39:0f:2e:f1:
38:88:a2:00:1b:3d:ba:b5:aa:d9:48:76:cd:2b:14:
31:61:a7:c8:24:db:c1:35:05:01:f6:a7:38:81:1a:
13:78:99:b4:22:2a:66:a4:da:07:16:bf:5c:94:6b:
60:a3:50:9a:ac:8e:59:d6:ef:a6:f9:80:b7:d5:02:
66:48:68:4f:5a:9d:3c:4b:b8:cd:77:44:fb:09:28:
f9:93:71:dd:15:98:1c:16:c0:44:5a:cf:df:4b:ec:
a4:d9:0b:3c:47:cf:5c:c8:4e:c7:a7:ed:d7:30:aa:
40:3b:d0:4a:1e:82:34:c7:a4:18:f9:ef:1c:45:0d:
c2:23:e0:1e:4a:6e:97:4a:ba:ac:c4:21:4d:a7:ac:
33:a0:e2:2e:04:aa:51:4e:af:d5:fd:e5:72:47:af:
f3:7c:92:26:60:15:6e:b2:27:61:a7:ab:54:4e:54:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:EA:CA:80:CA:73:E4:BB:5C:A5:8B:0F:C9:74:80:D8:4D:38:2A
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8d:2c:1c:cf:ef:0f:7f:cf:ea:d3:03:f5:20:b3:bb:aa:93:
4e:74:0b:2c:4e:bc:1d:8a:cf:f4:88:26:cf:be:9c:af:7a:9a:
f2:ec:7f:7c:8d:62:23:88:26:43:fe:f4:fe:eb:2a:74:fb:69:
d5:38:42:ee:2f:a3:b2:28:1d:b4:13:53:aa:9e:95:fb:1c:07:
90:2c:00:08:eb:6e:5b:4d:f2:79:ef:71:63:a7:ff:bf:82:f0:
64:31:7f:36:6c:a3:fe:2c:61:d2:df:54:1f:8a:af:60:5b:10:
d7:92:26:f9:4b:1a:e2:d7:7e:d2:13:51:df:90:bf:ac:ad:28:
e0:ba:5a:4a:0f:20:78:78:fe:a2:ca:37:fd:08:f2:5f:95:8c:
13:5f:34:ea:39:0e:66:9b:17:fb:ef:5c:c7:fe:04:36:73:af:
0e:e2:24:c5:61:1b:8e:9e:27:70:ef:e7:68:9a:52:70:95:09:
4f:e5:14:4f:a3:d4:ce:5d:65:da:0b:65:89:93:fb:fa:17:7d:
cd:18:cf:15:c4:57:db:1f:70:be:af:17:db:d1:de:b5:03:3d:
9c:44:82:06:89:a5:ae:f0:b6:08:03:de:15:2d:57:fe:51:4a:
53:0a:2c:c1:27:b1:c8:3e:9a:82:b0:45:0c:33:15:ca:57:8e:
00:bc:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client