Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: RatycHbBkywYxpC8tfiHMxq6o6stVdA4lDxEoaQ+aG8=
Subject key identifier: 18:EA:EF:B2:4D:22:C3:E7:D7:07:DE:04:12:40:F7:BE:42:D8:76:2F
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0199221E40CD77D3AE600D75949B470D0226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 09BC
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: jDseBJqBVDNlGXtZNoIbYD9XD3gn+UgLT1hCXAeWYYM=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:40:cd:77:d3:ae:60:0d:75:94:9b:47:0d:02:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=18eaefb24d22c3e7d707de041240f7be42d8762f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:72:d5:72:2e:6b:ee:f2:63:b4:b6:94:de:
44:85:9a:8d:4d:58:a2:0a:53:da:4a:c9:c1:a3:79:
c6:78:99:f4:6b:1b:5a:1b:fc:01:e4:c1:a3:96:a8:
f9:9f:ac:cc:dc:0d:c4:f6:73:12:d6:24:4a:ab:a1:
08:2f:10:a3:13:aa:80:d6:6f:5a:66:11:ee:2a:ee:
0c:63:b0:8b:41:43:16:e5:18:1a:46:6d:40:ce:6c:
2b:b1:9f:c2:fb:d0:cf:ad:d0:a6:8c:13:4d:35:c8:
9a:e6:42:ef:2a:9f:d1:f0:e0:f5:c2:40:5c:52:e5:
35:47:d4:a0:b6:6c:8b:fc:4d:6f:fd:ab:72:f1:cf:
3e:2c:eb:c0:60:ce:59:34:32:ae:41:04:54:15:63:
b5:57:a6:56:75:41:38:8b:5d:a7:b7:c7:04:31:76:
b2:41:ee:c7:6f:e6:78:b6:81:15:18:69:6e:8f:8c:
51:c6:33:0f:ae:80:9d:47:4e:44:1b:03:bc:cc:9a:
96:69:5c:39:95:3f:08:46:0e:3d:29:c8:7f:f7:56:
e6:32:3c:dc:c8:f1:3f:d1:61:95:a6:29:ae:e1:99:
e2:b0:ce:dc:2f:34:8a:6c:07:16:78:04:1a:61:1e:
9c:44:20:ad:58:e2:d4:06:30:3c:bb:d8:f0:5b:e6:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EA:EF:B2:4D:22:C3:E7:D7:07:DE:04:12:40:F7:BE:42:D8:76:2F
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:17:78:33:20:08:b5:6a:f1:11:34:ab:23:c4:d4:36:45:b1:
42:f9:9d:05:d1:2b:98:c1:e5:28:b9:f1:71:32:10:b0:94:ed:
5e:b2:6f:44:19:a0:2b:a0:1e:4f:52:6f:b9:c8:81:38:15:67:
5a:3f:49:9d:32:0a:d3:70:b5:25:d3:93:38:84:fa:1f:1c:3c:
3b:fc:b5:ae:8d:0c:3d:05:de:3c:d4:3b:aa:db:76:0e:67:37:
82:2f:38:43:1e:6f:3e:6e:fe:78:d6:91:e0:6f:d9:ac:1c:d1:
96:ea:17:3b:a3:b7:ff:b7:74:b4:78:44:1f:67:8c:d0:9a:a3:
a7:5e:60:fa:95:06:b3:a0:62:d3:6f:10:ac:2c:10:05:0b:9c:
d1:e8:c7:86:2f:1c:0c:ac:1b:ce:b3:98:71:06:25:d9:27:25:
bb:5a:40:0d:68:34:04:71:66:24:79:0f:bf:f8:1f:5f:f1:31:
72:02:26:a5:c7:8f:01:99:f7:0c:49:01:cf:0f:8d:c8:95:4e:
0c:e3:40:9b:b2:95:5c:d9:0d:00:9a:97:56:2e:eb:d9:59:81:
7c:b8:d1:85:89:f7:64:bc:ef:b2:be:18:5a:7d:81:cd:8f:91:
61:94:5b:39:c2:fe:b8:75:e1:e7:85:af:2e:68:20:67:1a:25:
8d:92:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:37 2025 by rpki-client