Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: 9AfGrSUrSS9qjT/2xu75h4bAMGP7wapDzcdgAbzcgGk=
Subject key identifier: 6C:93:27:4C:B2:F4:C7:21:FA:D1:E5:DE:84:A8:84:A0:71:F3:5A:E9
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 01993124603616EF8BD017D6D54730CD6A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 089C
Signing time: Wed 10 Sep 2025 01:01:31 +0000
Manifest this update: Wed 10 Sep 2025 01:01:31 +0000
Manifest next update: Thu 11 Sep 2025 01:01:31 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: 3VcOpK6DYTZHQa9ezkbD3RDSLQt7vDgRmT1EMPDTqyk=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:60:36:16:ef:8b:d0:17:d6:d5:47:30:cd:6a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Sep 10 01:01:31 2025 GMT
Not After : Sep 11 01:01:31 2025 GMT
Subject: CN=6c93274cb2f4c721fad1e5de84a884a071f35ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:8a:59:9e:61:f4:7c:15:54:13:90:29:eb:
b9:59:a6:72:5b:cc:e3:8e:bc:de:22:39:c5:a6:17:
9a:d2:fd:ea:7a:32:7c:ca:a9:c9:94:2e:91:36:6f:
e4:82:66:06:01:8e:f3:91:c2:14:fa:24:c1:67:ea:
5d:e3:54:9c:34:f6:ec:55:12:b0:28:88:6a:19:ad:
ab:55:de:85:fb:e8:f9:e5:ed:3d:50:43:d1:73:9d:
d9:19:c4:4b:d8:b2:3a:3b:ad:88:57:7d:e6:53:dc:
6b:3b:d4:0c:2a:b1:3c:59:3a:99:8a:52:0f:1f:ef:
07:90:7a:0f:9e:73:71:c0:8d:f8:29:0a:b8:c1:94:
76:19:71:07:24:82:43:bc:2e:bc:b7:e3:30:25:b1:
b7:f8:76:6e:72:fb:d2:83:77:10:3d:6c:db:eb:74:
f8:1e:20:83:4f:a7:4e:c4:b5:8e:a2:f3:0c:42:35:
b6:b5:51:d5:12:37:31:18:8a:13:68:d4:86:32:30:
b1:2d:8b:0c:7f:46:31:5b:95:9b:8b:04:ce:0e:8e:
a3:19:6e:54:49:f7:f1:fe:45:f9:b4:f6:42:ca:79:
07:97:7b:96:47:3e:fb:47:f7:95:b0:bb:3e:e7:a0:
1d:2c:7d:68:0b:4c:52:34:ab:b7:d9:22:9a:f7:a8:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:27:4C:B2:F4:C7:21:FA:D1:E5:DE:84:A8:84:A0:71:F3:5A:E9
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a4:31:3e:22:17:59:d9:d8:e6:e2:09:3d:61:57:a7:c8:b8:
40:ec:db:99:e3:f6:29:3c:23:66:6a:8b:fb:5f:41:24:b0:df:
99:ec:fa:b0:6e:c3:af:9c:ae:10:53:d9:42:bb:96:32:f8:a4:
42:e1:89:2f:a0:25:00:77:cc:fa:aa:4f:25:11:03:af:69:2e:
b8:cd:64:82:1d:81:b1:31:51:d8:49:bd:16:2c:67:23:ad:e7:
c9:1f:aa:9a:d8:e6:b8:7d:a5:c8:22:17:ea:0d:44:5a:d2:04:
4b:19:af:f1:cf:53:5b:58:b4:a9:cb:b2:ca:26:d0:3c:75:69:
f8:e9:e1:b8:4e:05:bf:0f:f8:7f:7a:b7:0e:4b:2c:cb:66:08:
0a:d0:a4:35:60:b6:13:68:85:eb:3c:c6:84:7a:38:eb:db:33:
26:f4:1f:42:2c:78:e3:60:12:f6:c0:c5:5c:11:af:8d:07:68:
1b:96:14:ac:6c:ce:3b:4c:f0:ae:4b:e9:58:17:6a:12:b1:0d:
b1:fb:70:32:85:82:fe:34:00:a1:09:96:65:99:81:73:8a:f8:
ec:56:17:78:f9:2a:c2:22:45:86:34:1f:19:95:76:df:82:b1:
4d:37:8c:6c:70:59:67:3c:e8:f1:c4:0e:f0:e1:32:9e:e0:06:
04:15:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:18:33 2025 by rpki-client