Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
File: gDOAgpbqPA8_GpQjSEPeU1qDTho.mft (raw, json)
Hash identifier: 8wxsJonNabRwG9cAB1TaRxnyJiiMtzwNH9xWtKKleiU=
Subject key identifier: 65:B7:C1:ED:67:79:CF:DC:31:16:1C:DB:4E:42:C6:31:35:7A:25:76
Authority key identifier: 80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
Certificate issuer: /CN=8033808296ea3c0f3f1a94234843de535a834e1a
Certificate serial: 0199221E9B2521D7330A718774DEB6E0E19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: gDOAgpbqPA8_GpQjSEPeU1qDTho.crl (hash: BRbcLE34l0+f5hFwf0fDkw1I7Dom+4cl9jvpQ7H2nTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9b:25:21:d7:33:0a:71:87:74:de:b6:e0:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8033808296ea3c0f3f1a94234843de535a834e1a
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=65b7c1ed6779cfdc31161cdb4e42c631357a2576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:a6:56:d2:2f:55:31:ef:26:a6:36:04:e7:
ce:c2:ec:74:9d:3d:62:fa:80:31:37:2c:41:12:d3:
84:3d:c1:1f:88:9e:90:b4:30:ad:32:1c:69:04:09:
80:3d:73:10:1f:4a:ca:6e:40:e8:b1:87:f4:08:44:
a5:6c:c0:4b:d0:07:8c:c3:7a:77:7d:50:d7:15:b4:
3c:7b:ba:b0:3c:3f:07:ae:cd:e1:0c:0e:19:46:50:
73:bb:ef:4f:14:a5:5a:57:87:4b:e4:7f:0b:95:eb:
3f:14:05:8a:b6:3c:65:c8:26:97:23:6a:26:08:c0:
f2:d6:2d:ea:45:6f:98:31:69:40:62:a9:16:ab:4a:
2e:b7:e1:91:99:65:3a:a1:7d:85:df:20:c1:98:14:
18:a2:80:a6:14:65:ad:ca:31:3a:d0:7b:5f:87:8f:
37:de:5b:32:cb:6b:ee:e9:85:99:78:0e:60:1d:98:
e8:9c:11:9a:b7:5f:9a:06:27:80:8c:56:d5:89:fc:
52:f7:c1:ab:2f:60:42:a9:48:8b:1b:b0:94:46:89:
37:6a:c9:d0:fb:ff:48:11:87:ed:f7:5e:6b:24:10:
e7:12:df:b8:13:c6:45:a0:b0:3c:8a:d1:4c:b5:fa:
db:b3:be:33:f3:da:2d:d4:26:62:34:f7:cc:d5:61:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:C1:ED:67:79:CF:DC:31:16:1C:DB:4E:42:C6:31:35:7A:25:76
X509v3 Authority Key Identifier:
keyid:80:33:80:82:96:EA:3C:0F:3F:1A:94:23:48:43:DE:53:5A:83:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDOAgpbqPA8_GpQjSEPeU1qDTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/af7c9e-5c8e-49c7-aeab-d819c3885dec/1/gDOAgpbqPA8_GpQjSEPeU1qDTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:42:00:59:72:7a:06:07:f4:01:00:fe:87:c5:ce:bf:0f:
27:3a:37:40:3e:45:07:8f:02:c2:d0:4b:1b:9c:10:a8:99:8d:
6a:1a:3c:8f:75:8a:d3:a0:19:9d:bb:9a:a5:ec:c0:d9:bc:f7:
cf:b3:90:62:30:a6:1b:da:b0:b3:2a:27:eb:5f:aa:9b:e6:f7:
14:d9:03:76:35:41:f8:c5:c4:25:1d:34:a4:e8:74:98:7d:b1:
ba:70:c1:ee:60:58:de:07:9c:b5:94:df:19:20:1b:bc:a7:6c:
46:1f:f2:6c:2b:01:0a:9e:17:13:1d:0d:19:57:d7:a8:9e:3f:
84:dc:2b:23:70:6d:cd:77:84:a0:77:58:7a:d6:69:64:0b:78:
2b:d9:c4:4d:86:e0:68:13:b1:1a:bf:8a:2a:29:23:07:e3:26:
eb:be:ef:49:35:20:15:13:4f:f9:29:5e:b9:4a:7b:08:c9:4f:
f6:8b:c4:73:6c:f5:12:b0:68:34:08:ef:27:a4:4f:99:00:e5:
68:50:00:4e:4a:46:19:37:f3:4b:c1:8a:5e:41:ef:08:3f:dc:
02:bb:77:36:58:33:f8:c4:68:d7:7a:79:4d:79:50:6d:51:6f:
81:22:eb:db:2c:ac:4a:3c:7f:72:b0:a0:64:d6:df:aa:c2:56:
55:96:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:10 2025 by rpki-client