Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: m2zc7ntiEbcXVCi8ax3pNhUv7w27+7e+FQKcA6VpBJg=
Subject key identifier: 16:04:BB:EE:5F:6C:0C:EE:C5:0E:4C:21:8F:46:4C:BB:8A:ED:96:D3
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 0198CAC97A41516A833C50010DC0E857CDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 0B21
Signing time: Thu 21 Aug 2025 04:00:58 +0000
Manifest this update: Thu 21 Aug 2025 04:00:58 +0000
Manifest next update: Fri 22 Aug 2025 04:00:58 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: WP8843QnGYus0RatDUW9Bs+HMo2mSfDtNu02/AlrcJc=)
2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:c9:7a:41:51:6a:83:3c:50:01:0d:c0:e8:57:cd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Aug 21 04:00:58 2025 GMT
Not After : Aug 22 04:00:58 2025 GMT
Subject: CN=1604bbee5f6c0ceec50e4c218f464cbb8aed96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:b8:87:57:9a:13:c7:9a:02:f5:0b:54:96:
77:f4:56:0e:81:7e:35:63:bd:a4:04:85:d7:1e:cc:
b0:79:39:0c:8f:99:a2:2c:bd:1e:cb:78:e1:fe:5c:
f2:8d:d3:22:d1:53:f9:23:a3:af:60:8d:13:0f:50:
7d:d2:3f:32:f0:ef:8e:df:c9:ae:bb:e4:11:73:f8:
6c:b5:d4:1d:bd:de:95:3c:02:48:a7:ec:1f:a0:c9:
88:88:fd:90:3a:21:28:f3:3c:fa:53:ee:08:f8:58:
57:e9:fe:00:54:2c:70:a0:13:80:c7:b6:7f:f5:c9:
52:6f:b3:f8:f0:54:44:b2:77:0b:52:f8:5f:ef:23:
4d:7b:20:fd:5e:cf:44:9c:75:5c:39:97:68:f8:ea:
b5:1d:65:c8:e9:ff:33:b2:fe:d2:fb:23:7f:9c:fc:
5f:64:3c:1c:6f:08:c1:ea:60:1c:c0:f5:d6:da:f5:
e7:fa:6e:a8:53:5e:25:11:c7:96:52:36:b9:bc:60:
68:ab:2d:cf:82:81:c5:69:0e:0d:51:5d:2e:bd:28:
73:b2:c2:88:1c:26:f0:eb:06:d4:03:48:35:78:8c:
b8:b3:5d:dc:41:e0:e9:25:6b:6d:d4:6c:b7:c9:c6:
9e:34:50:a9:bb:cd:4e:6d:c5:15:8a:47:52:25:5d:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:BB:EE:5F:6C:0C:EE:C5:0E:4C:21:8F:46:4C:BB:8A:ED:96:D3
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:98:b2:0a:a2:77:3d:6e:88:74:4c:74:bc:07:f7:79:03:cc:
a8:92:ba:25:94:70:ea:22:5b:8e:8f:06:30:4e:b9:fc:95:7c:
0d:f0:21:04:78:90:39:4e:14:e2:25:2e:ae:2b:93:fa:d7:8d:
f0:7f:d0:d4:40:72:10:8b:fb:1d:69:67:c1:22:c1:30:09:1e:
07:17:9c:98:cf:1d:98:62:80:9f:ed:85:68:69:6d:60:cd:13:
12:46:a9:77:30:da:02:60:8d:55:a8:e1:fa:fa:2f:98:a3:3b:
a8:35:cf:8e:dc:01:3e:be:17:dd:df:ec:50:0f:dd:3c:28:a9:
79:7e:bd:5a:5a:5e:c1:bb:1a:43:d3:31:13:a9:a2:1e:87:f3:
02:bd:08:e9:d1:00:29:07:9b:3c:cd:88:16:68:b8:29:3f:3a:
df:64:fa:4d:20:65:b7:9b:fb:cb:91:75:ee:44:fc:a4:b6:2a:
8c:05:5e:5d:64:76:c4:cc:3b:39:5d:99:e9:67:cb:d4:a0:98:
34:56:0a:7a:2b:24:59:8d:28:e4:f7:71:4b:17:98:cb:5f:6a:
fd:76:3d:f2:61:48:c8:5a:f4:c1:b7:b8:08:a2:53:76:6e:cc:
52:7b:04:46:f6:81:66:90:32:26:95:63:3c:35:fb:f3:0b:f6:
b8:af:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:52:48 2025 by rpki-client