Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
File: gXRkmx7wDcg8KFOaOdKQs1MO37A.mft (raw, json)
Hash identifier: rAZlE5vCmDks0vRa2yt2fL4h3umykKsBNTCydIZcM9E=
Subject key identifier: CE:6C:DD:81:12:E0:5E:BB:9A:36:66:80:10:54:EF:11:38:28:04:41
Authority key identifier: 81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
Certificate issuer: /CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Certificate serial: 01991687D2D88380BBC575449BB28D9D3873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
Manifest number: 0178
Signing time: Thu 04 Sep 2025 21:00:23 +0000
Manifest this update: Thu 04 Sep 2025 21:00:23 +0000
Manifest next update: Fri 05 Sep 2025 21:00:23 +0000
Files and hashes: 1: GQ42kTqn472NU0Utg1aKLG7W0bI.roa (hash: oM3P06tzeH7/sG3RLnC5jVN3WHhv6hvEc5nYDWBm418=)
2: gXRkmx7wDcg8KFOaOdKQs1MO37A.crl (hash: fYNuqCn+XB+o6CgMeeb12tsldaJU+sLPqMvTmIeP8rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:87:d2:d8:83:80:bb:c5:75:44:9b:b2:8d:9d:38:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174649b1ef00dc83c28539a39d290b3530edfb0
Validity
Not Before: Sep 4 21:00:23 2025 GMT
Not After : Sep 5 21:00:23 2025 GMT
Subject: CN=ce6cdd8112e05ebb9a3666801054ef1138280441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:5a:db:01:3b:76:6a:3c:88:62:65:e8:0f:
c1:31:b4:20:99:c1:a9:f6:ec:86:98:f0:83:d7:5a:
0d:29:6f:c5:2b:14:7f:01:8e:51:8c:ca:2d:0b:36:
90:26:90:f7:88:7f:46:0c:c6:c0:f9:44:0f:d2:2d:
62:32:08:f6:4a:3a:99:99:b6:94:59:0f:d5:67:af:
d6:fc:72:51:1a:d0:83:7a:ed:64:05:13:85:f8:dd:
b3:8c:43:29:00:17:f7:d9:f8:41:41:91:09:ed:af:
12:71:f9:3a:e8:bc:c8:86:19:4b:57:83:7e:ee:fe:
9d:28:77:13:eb:3f:97:a7:26:ce:9f:6f:e7:6a:9b:
d3:e0:91:b1:54:68:e7:3c:e8:b6:79:47:ab:a7:b8:
01:40:a8:de:c9:a8:04:ee:96:a9:18:2c:18:fc:e5:
a6:59:b9:6c:36:a5:ec:4c:56:03:4e:24:a5:f5:65:
78:b3:1d:04:f8:ca:e7:e1:b9:fb:ae:39:dd:ae:68:
a4:90:7f:df:7f:82:b3:47:be:2b:e0:69:a9:e4:b7:
cf:d3:e0:44:85:63:7e:e3:93:ef:23:32:70:da:2e:
24:c3:77:2c:e8:cf:19:13:f8:2d:4d:6c:56:ea:fd:
a4:a5:82:b2:a2:b6:40:45:48:11:59:04:1c:de:b6:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:DD:81:12:E0:5E:BB:9A:36:66:80:10:54:EF:11:38:28:04:41
X509v3 Authority Key Identifier:
keyid:81:74:64:9B:1E:F0:0D:C8:3C:28:53:9A:39:D2:90:B3:53:0E:DF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXRkmx7wDcg8KFOaOdKQs1MO37A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1cec02-26e6-400e-8d9a-32924ef47a1a/1/gXRkmx7wDcg8KFOaOdKQs1MO37A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:92:10:07:fe:24:c9:68:e8:11:62:51:0c:c3:67:4d:ae:
35:19:50:d8:15:64:84:99:1b:1d:c6:f8:6d:50:c0:01:d7:c2:
e3:c0:eb:d1:74:c7:65:b4:e3:f0:0a:b0:aa:bb:6a:b1:df:6d:
6e:2d:1a:c6:6e:c4:fd:b7:69:cf:a6:8b:4b:5e:19:9b:6a:6c:
35:19:45:cf:96:fb:02:5c:c9:5d:fd:b1:0b:3b:8c:e1:15:09:
f4:36:0a:7d:de:ac:ed:93:8e:0e:c4:04:d6:aa:e9:fc:9f:c3:
a1:73:ac:3b:07:24:79:e9:a1:c5:1a:21:53:d9:70:99:38:9f:
4a:b3:c9:55:fc:0d:a1:26:dc:61:f8:52:db:b2:70:2a:1f:55:
bb:04:1c:26:3e:0e:7b:28:5b:2c:a4:57:e3:ed:cd:a6:72:a0:
2b:a6:fa:71:4f:2f:71:a4:03:2e:2c:25:86:31:73:40:94:db:
ca:ea:94:6f:f3:6e:fe:ab:4b:7e:f4:b0:48:45:7b:68:04:41:
d2:26:61:bc:18:4f:de:ac:fd:b3:0e:e4:2f:45:f7:57:e6:ed:
46:29:59:c1:6f:b6:eb:cc:88:fc:8a:87:c8:b3:bc:02:e8:41:
a7:ff:70:9b:ac:2f:b4:f1:7f:dc:aa:94:c9:f5:c1:f5:3d:76:
94:e2:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:22 2025 by rpki-client