
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File: gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier: +FVY9Xd010Gq0NYAVpGsMfBPvsZKgAIvIUBD1nSAQ7Y=
Subject key identifier: 2D:20:BB:51:CA:F8:37:68:C5:E5:BC:97:40:19:0B:FB:58:CB:16:2D
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer: /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial: 019916BEE0878595CC365BECFAEEF7A6679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number: 0808
Signing time: Thu 04 Sep 2025 22:00:31 +0000
Manifest this update: Thu 04 Sep 2025 22:00:31 +0000
Manifest next update: Fri 05 Sep 2025 22:00:31 +0000
Files and hashes: 1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: jz1c9w6lAti9Y48Wxgl8lBax71jG38AcqGykgqfP+c4=)
2: tgPmLmeCalXg1Y4YKFYEpDBpLis.roa (hash: E95Pu7lKY/fzLNqx288foQ/dCyRdu2HVykfNqinzNk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:e0:87:85:95:cc:36:5b:ec:fa:ee:f7:a6:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
Validity
Not Before: Sep 4 22:00:31 2025 GMT
Not After : Sep 5 22:00:31 2025 GMT
Subject: CN=2d20bb51caf83768c5e5bc9740190bfb58cb162d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:65:f3:8d:1b:82:fa:66:b2:c8:a8:18:f9:
68:0f:45:06:f8:6a:fe:31:73:4f:bb:af:96:83:83:
d9:b6:13:0a:68:f8:f9:35:67:04:30:de:0d:5c:63:
54:6e:47:58:48:05:52:a8:38:5c:be:f1:41:a3:b4:
f1:8c:4a:49:fb:4a:4a:88:70:35:26:78:2b:90:cd:
fa:49:9c:e2:ef:2e:32:20:f4:d0:07:21:ea:77:0e:
96:b4:a0:65:03:c4:2d:6c:e5:57:44:26:af:bd:35:
87:86:9e:80:23:37:92:ac:be:9b:45:42:cf:4f:00:
31:c1:fc:31:cc:63:c8:25:91:4b:81:24:2a:d8:07:
3b:69:ab:11:e1:26:74:c2:90:70:d6:f5:6a:4f:3c:
ee:67:bb:15:bb:6e:58:a7:d4:94:91:a1:17:d6:cb:
7e:03:f6:22:88:11:af:6f:16:9e:d9:5b:8a:b1:4e:
92:84:f0:3c:63:f9:bb:6e:5a:b5:4a:93:4f:68:cf:
0a:08:47:e6:52:14:c2:99:10:2f:f1:34:4c:60:2a:
46:87:89:f0:4b:70:4f:9d:17:16:ec:a6:e1:7a:d6:
76:a3:3a:5c:77:a4:2b:9b:e4:54:20:e3:33:17:06:
98:ee:80:d8:2d:be:97:7f:bc:35:a3:c1:92:dc:3c:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:BB:51:CA:F8:37:68:C5:E5:BC:97:40:19:0B:FB:58:CB:16:2D
X509v3 Authority Key Identifier:
keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ce:bb:84:b6:ed:0b:94:cc:d8:74:ae:09:f1:e2:4a:d2:be:
a8:60:20:da:a9:da:78:d7:82:b6:86:db:3a:3a:3f:58:ef:4f:
cf:08:da:3f:a9:34:27:cb:8a:0e:b1:e9:f6:71:88:dd:6c:48:
86:59:91:e4:a6:74:41:a3:a7:b2:11:16:d6:62:95:b7:3b:b3:
07:fc:58:95:c1:15:dc:b0:92:5a:ba:25:04:f0:fa:8e:f9:71:
9e:b7:fb:2e:e4:8c:0d:69:56:b2:f9:80:90:91:06:31:63:b6:
28:e1:8a:e0:48:3c:00:1f:6f:69:aa:69:c6:89:ba:f2:bf:2b:
20:5a:2f:76:95:8e:af:8e:a9:23:10:e2:48:51:f0:52:1d:cb:
8d:44:f6:b9:b7:cc:a8:10:5f:a5:d2:4a:43:90:fd:b9:9a:bd:
fa:63:4d:40:02:47:b8:52:fa:9f:f3:b6:c6:1f:e2:17:09:c0:
f9:6a:99:28:d5:74:94:79:77:b4:2e:90:70:8e:0d:41:85:5a:
11:5d:05:9a:e4:6e:59:7d:03:92:7c:81:9a:20:91:ef:df:39:
be:5c:5f:cd:5a:8b:98:3f:b9:0f:e5:bb:90:53:0b:ef:e4:70:
d4:70:a3:e2:18:b7:b7:59:2b:01:26:d1:73:f8:fc:df:44:4b:
28:3e:bc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:35 2025 by rpki-client