Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: Z1na6IM3UD9e9Rqf/Gd0rx+MKCCj+xPYF+G1ThxKmJI=
Subject key identifier: AC:D0:96:35:3B:79:EE:20:94:07:26:A5:07:6E:64:A4:42:8E:E5:1A
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 0198C949C0FB4F5DA890476F3EA48206F47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 1649
Signing time: Wed 20 Aug 2025 21:01:50 +0000
Manifest this update: Wed 20 Aug 2025 21:01:50 +0000
Manifest next update: Thu 21 Aug 2025 21:01:50 +0000
Files and hashes: 1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
2: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: 9UNpUWHolJsVyXqXX0Nb0v5OGuYoYs9dqMAFBhiEtUs=)
3: o7DFQSNSbtxlgxW6FLch62D8QIA.roa (hash: OW5TPqzlu/5OlPd3vdKxLAlylVm0d636/VsxyEnIicU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:c0:fb:4f:5d:a8:90:47:6f:3e:a4:82:06:f4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Aug 20 21:01:50 2025 GMT
Not After : Aug 21 21:01:50 2025 GMT
Subject: CN=acd096353b79ee20940726a5076e64a4428ee51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:04:ce:c7:4d:ff:8e:d6:31:1d:51:c4:a0:
19:6e:52:a9:51:a8:f3:be:7d:0d:21:a8:17:62:53:
15:ad:ef:1a:8d:3f:cf:f9:24:ff:32:c8:8c:f2:83:
ba:71:62:81:72:64:b9:c3:d0:07:81:71:6f:5c:fa:
12:04:f9:f8:31:ab:0d:3a:26:ca:24:9a:6b:d7:43:
47:7a:46:81:8e:02:04:2f:e3:b2:ab:e5:2e:eb:12:
76:16:62:62:64:c2:5c:fb:28:10:20:36:d8:3b:57:
15:4b:87:45:74:2b:94:51:90:77:e6:7d:e8:50:ac:
bd:59:21:34:d6:2e:c9:43:a6:cf:22:52:12:c4:0c:
bf:88:68:ad:0c:71:57:27:d9:2d:f1:d2:d3:03:c3:
46:c8:d7:0a:ed:d1:67:0a:51:1b:08:ea:e4:bd:52:
52:87:86:0b:69:9e:f6:86:23:e7:e7:bf:42:84:3e:
8b:5f:08:01:17:fc:53:6f:9a:d5:32:16:29:1d:ee:
cc:8a:86:fa:90:cc:be:be:f6:b4:a4:21:6a:94:94:
19:f4:8c:e1:b7:e7:c4:4e:0d:3e:c6:f6:72:ba:24:
8e:fc:20:2c:03:1c:0c:91:fd:ba:d8:03:a6:d9:31:
09:4e:db:74:e9:8f:71:79:a2:82:b0:19:06:0f:2b:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D0:96:35:3B:79:EE:20:94:07:26:A5:07:6E:64:A4:42:8E:E5:1A
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3b:1a:61:9f:19:59:d1:95:1b:d8:69:aa:8f:43:91:17:79:
ee:4a:cb:23:73:fa:3f:74:25:06:fc:9e:4d:f2:76:d4:ea:c8:
1e:e0:04:c3:9e:0b:05:07:88:b4:77:36:ed:32:62:a7:9b:5f:
6e:b1:46:91:29:c9:2d:85:ab:5b:a1:89:3b:81:19:2e:65:ae:
9e:5d:9e:bd:61:1a:c5:35:82:77:02:75:d7:0e:1d:eb:94:b8:
38:47:7f:ad:1d:91:42:9d:81:2c:74:e1:db:35:ce:49:83:a6:
12:5a:4e:96:73:09:19:b4:f5:eb:bf:5d:f8:2d:8e:1e:3d:42:
e5:cb:18:47:2b:01:69:0f:e5:4e:c3:80:3a:fb:40:06:a3:46:
3d:60:44:a8:ae:90:ac:77:5d:ca:d5:bb:61:4c:62:1b:e1:25:
03:42:ef:93:68:d5:b6:89:cc:5b:9a:74:e5:5a:bd:70:34:33:
1e:8a:c2:7e:0b:66:5a:9a:f0:ae:b3:31:b0:d6:32:ec:5e:a6:
1b:be:34:1a:ed:44:91:a6:b5:d0:c7:60:97:8e:30:5b:ae:18:
59:28:b5:bf:6e:2a:10:86:f1:45:5c:b0:60:b0:f2:b4:bd:f0:
f6:c2:44:a2:35:2c:4d:c9:8a:ac:ae:2d:62:40:70:a7:27:88:
65:2b:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:15 2025 by rpki-client