Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: rB831nHQM+N+N0is0ZTYexseHMY6mWgvGL96cAYRTJ4=
Subject key identifier: 0A:B7:D3:4B:92:DD:97:CB:F2:06:B0:CE:5E:1F:E6:78:76:B3:BE:7B
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019936EFF628353A9618E59CDD0CC10C343E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 04:01:59 +0000
Manifest this update: Thu 11 Sep 2025 04:01:59 +0000
Manifest next update: Fri 12 Sep 2025 04:01:59 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: sOKP1w+E5XL26P0RgzgKVrWjXrI3sf6zXklkCHXF28A=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:f6:28:35:3a:96:18:e5:9c:dd:0c:c1:0c:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Sep 11 04:01:59 2025 GMT
Not After : Sep 12 04:01:59 2025 GMT
Subject: CN=0ab7d34b92dd97cbf206b0ce5e1fe67876b3be7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:ce:cc:c1:f3:a2:3c:a1:5e:9f:c8:4e:51:
08:15:87:1a:f2:a5:b7:ab:93:ec:10:9c:d6:bf:ee:
36:41:5a:71:47:a0:6d:10:c5:cf:b1:dd:20:97:e6:
9d:b3:5d:b1:a4:c8:97:d1:28:5e:87:27:cb:8d:a2:
c6:38:9f:b1:a6:8a:35:b6:11:50:2c:ef:bf:0e:c5:
1e:51:78:d2:64:a9:d8:7d:d0:3d:2f:bc:d1:4a:79:
5e:41:fb:13:95:61:5d:73:6f:66:ce:31:9c:4a:ca:
bd:f3:28:4b:96:33:ca:d1:c6:58:f8:71:a8:76:9c:
0d:97:88:e2:eb:a8:ef:4d:61:91:81:02:7e:13:d6:
24:f3:cc:49:58:74:a7:ca:aa:79:81:18:8b:30:81:
37:5a:eb:aa:82:44:aa:f5:61:e2:d7:43:08:d9:f9:
be:0e:76:3a:7a:11:ce:8b:a1:c5:61:f6:f1:f1:b3:
f5:da:de:37:a6:9f:18:6c:72:58:72:3b:a4:06:cc:
a3:9d:45:ab:e6:6c:29:1d:e8:87:7d:7d:49:a6:65:
80:31:bf:c5:34:45:0c:fa:df:52:23:4a:ad:f7:d7:
3a:0b:fb:13:1d:6b:25:c2:ba:31:1b:1e:c6:37:e0:
78:72:c0:78:f5:cb:0f:09:b7:d4:5a:26:88:0f:20:
e9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:D3:4B:92:DD:97:CB:F2:06:B0:CE:5E:1F:E6:78:76:B3:BE:7B
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fb:e8:b9:a7:7c:94:54:a6:a5:5c:d9:3d:e6:7c:fc:e6:cb:
17:0c:0b:3f:19:56:3e:16:32:83:62:b0:4e:86:bf:ad:dd:b1:
22:8a:29:ce:2c:66:63:21:1c:c5:90:56:62:67:a6:1d:32:90:
2f:14:ce:ea:60:5f:e4:1e:a8:2c:af:a9:0f:e2:83:d4:a5:c5:
75:de:93:e0:6d:85:58:e7:6f:eb:29:ad:04:df:6d:a7:88:0c:
c9:3d:c3:7f:ea:21:68:2e:d0:37:ea:ed:73:a2:9a:2d:f8:d2:
4e:c0:df:90:c3:7a:dd:78:a3:af:94:86:04:b3:b1:49:53:2d:
7b:e3:3f:52:33:aa:07:b6:2c:b9:b1:3a:8a:ae:96:0c:0b:a5:
d2:ca:a2:37:d0:ec:a9:d7:3b:2d:68:25:91:3b:90:bf:ce:cd:
0a:0a:17:3a:ed:95:32:09:bd:1f:41:f3:25:93:d7:3b:06:79:
e4:4c:5b:11:07:df:62:e5:73:ea:10:53:ff:18:eb:8a:b0:cc:
59:ba:72:b7:c1:60:1c:53:0d:47:90:51:de:24:8b:56:02:fb:
7f:1b:d9:94:0d:3d:e5:fc:ec:ba:4d:78:e5:46:44:cc:e4:5f:
d9:7a:41:b5:3c:d8:bb:59:a5:44:c8:51:f3:70:90:b9:5e:f1:
04:e8:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:08:27 2025 by rpki-client