Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
File: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft (raw, json)
Hash identifier: R7NiMHzALU0IeezGeLGZtfdUMW6bZyfSztq5XamX+lo=
Subject key identifier: 41:AF:13:AB:E3:5B:DA:2D:07:01:EF:0C:1F:C4:14:D9:01:E3:D9:3B
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 0198C5DB594A97E5382407F48D7693FEE761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
Manifest number: 1143
Signing time: Wed 20 Aug 2025 05:02:23 +0000
Manifest this update: Wed 20 Aug 2025 05:02:23 +0000
Manifest next update: Thu 21 Aug 2025 05:02:23 +0000
Files and hashes: 1: 9anLZpxCdtczPvdlYCXgAxbRs8M.roa (hash: CyG4Wg4fSftiyOPdmKS2+akGyemcGA5SuHd1aeIvuWs=)
2: GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl (hash: DZ+FIR4toluCojDcZglxCRfCgGV4NIcsLlfjdPj47wg=)
3: wgLpdQzEQiut3zZPkrk2it4-KJM.roa (hash: rQ6r9VvnZsN117x/0JkyHFIrRA5vncbf9BthsT1+A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:59:4a:97:e5:38:24:07:f4:8d:76:93:fe:e7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Aug 20 05:02:23 2025 GMT
Not After : Aug 21 05:02:23 2025 GMT
Subject: CN=41af13abe35bda2d0701ef0c1fc414d901e3d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:04:c4:2e:a5:40:02:a7:ae:52:17:68:f2:
5d:f2:f5:6c:26:74:5c:11:6a:35:79:8f:38:4c:65:
db:22:f0:16:b4:7f:02:9b:52:13:62:5b:df:21:9c:
59:8c:a7:d4:19:54:5d:67:5e:28:5c:70:22:da:04:
4e:dc:64:c5:b1:21:0c:28:c3:d5:9c:0c:68:1e:4c:
0f:3a:b0:e5:f8:f9:f0:67:89:67:2f:de:77:1e:b4:
2a:e1:e2:87:f3:4f:b7:fb:0b:6f:5d:a4:85:09:c4:
ad:60:2f:fc:d1:72:66:aa:07:56:f1:5e:04:18:ea:
c5:9a:85:cc:ec:d0:c1:64:f9:b1:7f:7d:9a:7a:92:
ff:25:a5:c1:40:90:65:54:3d:a0:00:2e:31:6a:1b:
18:4f:ce:84:7d:f2:64:42:db:85:2c:28:ff:ee:21:
f3:39:26:2a:54:8d:75:9a:f5:d5:d5:14:1a:cd:b9:
b0:51:5c:4f:5a:89:bd:96:46:ae:ee:a3:b8:19:16:
04:78:4c:94:5e:53:b7:08:ac:76:64:38:25:4b:85:
54:75:bb:b4:49:95:bd:a1:80:97:f4:e4:43:bc:2f:
57:bc:27:74:e8:1d:2f:87:71:47:86:55:9d:59:3e:
f5:04:ae:a3:0b:6a:d9:27:53:fb:ed:0e:c3:f4:88:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:13:AB:E3:5B:DA:2D:07:01:EF:0C:1F:C4:14:D9:01:E3:D9:3B
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:c5:39:8a:6e:f9:6e:73:9c:8e:b5:77:bd:9a:cd:41:fd:
8e:2e:2d:a6:a2:7c:29:f3:84:5f:5d:2f:11:38:6e:e7:ff:f2:
0e:00:0b:e6:43:e9:6b:a0:49:b5:b3:fc:2b:f9:30:22:05:cc:
bf:e1:03:a4:89:0e:ed:47:03:79:d4:6c:38:25:f3:f1:89:82:
96:e4:0b:7c:c0:da:3f:fc:c7:d0:53:bd:d1:21:71:2a:ee:39:
6a:60:c7:bf:1b:5e:62:6c:8c:b1:56:63:e2:0b:3b:f1:7f:06:
7a:89:95:98:5a:d5:54:90:85:4e:93:44:b9:15:14:0c:68:8f:
31:86:0d:6d:cc:dc:ae:7e:dd:db:91:67:60:54:32:ef:5b:cc:
8c:a3:a6:46:c0:2f:6c:4f:ed:c4:dd:5a:85:78:20:0e:52:e0:
87:bd:6c:2c:92:30:86:e5:11:d4:dd:d2:35:25:b6:d6:a9:a8:
b8:3d:a5:88:0d:28:85:b0:a5:3b:e2:44:06:bc:8a:45:5d:7d:
e7:82:ef:ec:a6:01:52:82:8b:59:bd:82:57:dc:f3:ff:c3:33:
3a:3a:c5:d3:63:35:35:95:3b:99:1c:e3:21:10:51:0c:8a:bd:
4f:ac:12:bc:31:a4:08:74:65:c6:1d:77:39:a0:85:a9:38:14:
0a:8e:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:42:33 2025 by rpki-client