Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File: gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier: 174Idt54aXcz2biGsXdn+wI/p1qyWNiLwHA/r3IV9eI=
Subject key identifier: C3:93:6A:99:E8:57:55:96:39:23:0A:43:7F:16:04:52:E2:CA:E1:C4
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0199350208AAFB78134ED7A4EC4AEBB2A633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number: 0C1C
Signing time: Wed 10 Sep 2025 19:02:29 +0000
Manifest this update: Wed 10 Sep 2025 19:02:29 +0000
Manifest next update: Thu 11 Sep 2025 19:02:29 +0000
Files and hashes: 1: KQTK1M5p1w2tgkimZwP7TTABtyY.roa (hash: LTRVwyOZnYQaG256SSamw/dl7HTrEkfEZ7OCXHYqevA=)
2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: nufrGtMUPp/8WW90QjZHTIt7A/d/J3zcR0OCWBhqqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:08:aa:fb:78:13:4e:d7:a4:ec:4a:eb:b2:a6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Sep 10 19:02:29 2025 GMT
Not After : Sep 11 19:02:29 2025 GMT
Subject: CN=c3936a99e857559639230a437f160452e2cae1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:8e:33:d2:cd:6a:46:01:1e:3d:be:63:a0:
01:8a:7b:db:75:76:72:32:66:e0:b9:e8:42:74:c0:
43:6a:96:8a:d0:8d:7b:75:bc:81:51:80:61:dd:b0:
98:ff:f7:7d:2e:9d:67:59:47:6d:6d:99:d3:12:be:
62:d4:7e:1f:ef:51:9b:cf:95:02:50:3c:e1:10:0c:
86:10:06:df:52:05:33:99:6a:d4:d4:19:e5:20:96:
19:16:b3:11:be:25:a6:d7:36:1e:c1:f0:53:f4:a1:
09:16:db:e6:70:75:ad:5b:7e:c1:16:06:3d:26:aa:
5a:da:b2:90:2f:70:95:fd:87:6b:1b:b6:e7:63:a0:
df:37:48:ec:1a:cc:72:c7:7b:78:74:9b:01:c0:a6:
0d:73:37:51:ca:54:a8:75:52:76:0a:b0:c5:dd:07:
49:56:a9:7c:a3:f0:c4:27:cc:86:82:ef:e7:cc:b4:
ec:02:cf:e0:f3:b8:8a:c6:6a:ea:1e:fc:02:b6:fa:
8f:af:22:22:aa:f9:39:03:3e:69:6a:b3:65:a9:f8:
e4:2c:e9:93:0c:66:95:db:d4:1f:8b:26:cc:eb:fc:
68:f0:12:f8:8c:6f:d4:e0:3c:38:13:b6:b1:4e:73:
5b:56:35:a4:87:0c:4d:7b:1c:c0:a3:50:bf:2c:c9:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:6A:99:E8:57:55:96:39:23:0A:43:7F:16:04:52:E2:CA:E1:C4
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4a:b6:13:e2:42:36:61:b5:f5:12:b4:88:e1:c1:a0:ff:1f:
d9:53:66:20:36:55:73:de:37:66:55:cb:37:43:03:98:e0:ce:
13:ad:78:16:82:a9:64:67:33:b9:c6:0c:a7:eb:ed:f8:57:cc:
f2:fb:3d:64:2c:98:e5:57:75:c2:ea:78:9a:ef:8a:db:19:d2:
92:c5:8b:02:b9:df:4f:2b:30:37:53:fa:00:28:87:34:0f:ff:
9e:0f:39:49:b5:30:e6:f0:0c:27:d4:23:e9:f5:ec:0a:3d:53:
57:37:0a:6a:d6:c2:ed:3a:ea:c1:7c:ed:75:2a:f0:44:95:8d:
b9:b4:b2:11:9b:d3:33:63:e7:83:2d:4e:04:ee:f1:a1:91:e3:
bc:78:d4:59:60:12:eb:56:20:52:88:b3:f0:66:81:0b:c8:21:
1e:e4:eb:f5:38:31:19:47:5d:a7:68:00:a4:7a:56:91:6c:d9:
c5:cc:b0:35:82:8e:59:44:2a:ff:b4:c7:56:1c:ad:ff:55:2d:
e8:83:65:14:3b:77:ea:5e:fd:6a:f0:a3:c4:a4:6b:f0:03:bf:
5b:1d:bf:1e:d5:e9:39:eb:77:1d:a1:64:b5:78:3d:95:b1:a0:
5c:64:6c:fb:84:dd:9a:73:84:19:5e:02:75:59:46:9e:82:76:
8b:09:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:20:59 2025 by rpki-client