Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: sDi+PwGWyhkMOrntVMUpHz3P0uaTdreqJS6TQzufqGw=
Subject key identifier: A7:6F:FB:5C:27:37:D2:60:5B:C2:84:2F:67:8F:A3:C0:EC:1F:F6:41
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0199326D3D13F497D0E875AFA3B204BBAECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 07:00:43 +0000
Manifest this update: Wed 10 Sep 2025 07:00:43 +0000
Manifest next update: Thu 11 Sep 2025 07:00:43 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: 32RAuE9D96gTPLitCFWDW5tDYIRegnFeqNKy10QnJcw=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:3d:13:f4:97:d0:e8:75:af:a3:b2:04:bb:ae:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Sep 10 07:00:43 2025 GMT
Not After : Sep 11 07:00:43 2025 GMT
Subject: CN=a76ffb5c2737d2605bc2842f678fa3c0ec1ff641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:90:c9:e4:e5:39:da:92:04:0f:a5:73:98:
8e:bc:41:dd:99:91:e3:ff:52:87:b9:b4:aa:b3:7a:
de:c4:d4:da:51:85:17:b1:5d:21:7e:95:40:23:c1:
b7:cf:f1:13:1e:4c:ef:df:bc:36:06:6f:0e:61:e4:
1b:d5:fa:8d:cd:92:bb:2a:dc:4c:a5:e2:a9:0a:a8:
39:e7:32:8e:ba:7a:7a:3b:4b:b4:b6:da:a4:2c:7e:
dd:6a:8e:38:2f:fa:9c:43:46:3c:12:46:b7:a9:a9:
a9:77:a4:28:c0:7e:e2:19:65:ff:d7:84:b3:ae:1f:
dd:3e:3e:20:61:6f:d1:16:86:f7:31:10:70:59:be:
f2:c5:cf:ad:7b:02:53:34:22:60:ec:d0:1a:68:d0:
3e:c2:18:69:a8:50:84:05:c5:ab:c9:b7:c1:50:c7:
3e:7b:bc:b9:83:01:38:5e:59:57:41:d1:6d:4b:f0:
85:53:d3:bb:8c:83:81:1d:fa:e3:9a:c2:e1:39:6c:
10:73:80:1d:af:ea:ca:9f:7f:90:c7:ee:b5:ac:90:
cb:3a:5d:0c:8e:d7:27:2c:fb:77:e1:c2:42:8c:02:
8b:89:1a:bf:90:f4:63:16:6a:a8:76:56:f1:c5:a0:
65:50:7c:04:f6:f8:a8:b6:97:53:fd:f3:a2:94:26:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:FB:5C:27:37:D2:60:5B:C2:84:2F:67:8F:A3:C0:EC:1F:F6:41
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:1f:c3:d0:82:87:99:91:1c:3e:b1:24:83:34:d9:b6:6c:
a8:b8:8c:4b:c2:53:56:51:8a:b3:cc:e5:a1:48:1f:3c:30:7b:
f8:bb:4b:cb:a1:6c:bb:82:98:f3:ae:ca:f8:21:90:fb:76:b9:
a3:8a:50:98:2d:ea:ef:4b:04:3f:e4:46:7a:aa:d9:d1:9a:5e:
80:aa:a5:cd:19:14:dd:68:a5:f5:0e:c7:13:7a:4e:31:2e:e5:
6d:f3:fb:29:82:3d:ad:2d:26:5f:f6:b4:be:ef:9f:9f:9a:7e:
13:71:ac:9e:7c:81:02:98:18:5b:d8:78:b7:01:cd:d9:8c:79:
97:be:83:49:cf:6c:c4:db:56:7f:49:56:70:6c:41:da:87:ae:
c0:48:2b:be:e1:cd:7f:01:e6:bf:35:3e:c1:b1:ff:12:67:ee:
f5:88:56:bc:61:b3:71:ed:b9:c7:61:05:09:cc:bc:8d:ee:ec:
97:1a:1e:c6:07:97:4f:de:36:a3:5e:ec:4c:5d:e3:49:e3:97:
99:52:23:bf:a6:8f:a5:aa:48:2d:51:90:b0:5a:0a:2c:ad:9a:
f2:a2:d7:6d:dd:72:08:95:a3:36:71:91:f7:6f:54:fa:c2:08:
b6:74:5d:51:03:52:e5:ab:50:e7:15:a6:73:71:3f:d6:a7:32:
3c:ca:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:10:19 2025 by rpki-client