Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: uUH4AG4m5CvnMcCp2Eoag0PwhlxMFMOsp7LTE8tXxTE=
Subject key identifier: B2:39:6F:AA:03:E3:50:4C:D9:22:63:A6:B0:B4:A0:BF:8A:F7:3D:FF
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0199221F080A1277D913018B2CE5EECC04F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 1604
Signing time: Sun 07 Sep 2025 03:01:22 +0000
Manifest this update: Sun 07 Sep 2025 03:01:22 +0000
Manifest next update: Mon 08 Sep 2025 03:01:22 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 4hj/3+0MdAQ+JLubM3WKsBgiTwyofPFJNvvP6vc6eIU=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:08:0a:12:77:d9:13:01:8b:2c:e5:ee:cc:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Sep 7 03:01:22 2025 GMT
Not After : Sep 8 03:01:22 2025 GMT
Subject: CN=b2396faa03e3504cd92263a6b0b4a0bf8af73dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:09:e0:65:82:39:f3:08:e3:a5:b2:05:48:
1c:b3:f2:69:59:98:b9:93:0b:d4:08:c1:cb:bc:d8:
f6:1e:e4:e6:03:b1:9b:0a:e6:50:9c:8a:22:86:80:
4f:a3:79:4e:3f:db:03:3a:a5:2f:65:c1:cf:ed:c9:
00:8d:f9:1a:3a:ea:d1:2d:7c:dc:65:f1:78:86:8b:
5f:66:17:0e:19:11:a6:1a:01:c2:1e:3f:a4:aa:50:
70:fa:00:f2:2e:e6:b3:ab:fd:b4:52:65:e8:eb:da:
58:ce:e7:aa:09:13:6d:eb:00:e1:dd:e6:7c:14:4b:
89:51:47:53:2d:a5:1a:e2:14:a4:e8:bc:8e:01:59:
60:e6:3d:2c:6f:01:e9:c8:99:2b:08:89:91:40:f3:
6e:bd:5d:1a:26:86:bf:c8:77:0f:05:4f:52:3f:09:
fe:db:ab:b5:62:a8:33:b3:d6:6f:43:f7:b7:5d:28:
3d:bf:bb:a0:4b:e3:d6:80:c6:99:e4:67:e0:e2:0c:
df:64:3a:c9:44:e0:3c:20:72:2c:ba:41:54:14:09:
de:e8:f1:a1:d3:9a:71:22:bf:ba:a6:6b:6a:8e:0b:
04:53:9e:68:18:f6:12:d7:ac:9e:fa:35:85:71:4b:
06:b5:97:80:5f:c1:f9:6e:83:2f:01:e6:f3:b6:70:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:39:6F:AA:03:E3:50:4C:D9:22:63:A6:B0:B4:A0:BF:8A:F7:3D:FF
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b1:ee:f5:35:ce:9f:11:fa:bf:50:c3:8c:51:78:d2:f0:36:
38:99:1e:72:66:64:3c:33:25:23:cf:19:a1:a2:18:8a:74:68:
3e:83:f5:c5:fa:31:e6:dd:87:ea:45:fa:21:ee:e3:b6:71:df:
ab:41:cf:aa:77:0c:59:89:32:8a:ae:00:13:d6:1a:b6:ae:8e:
22:fd:6a:bc:55:a7:9f:10:c1:3c:0f:15:20:31:8f:26:d3:e8:
d9:15:fc:78:6b:4b:54:38:31:a4:26:11:80:52:83:0e:03:4b:
0a:6b:98:b1:0d:2f:8e:c7:29:12:a8:d0:9b:8e:a7:16:30:da:
52:47:59:42:a0:df:ce:82:94:0b:b6:43:ad:74:cf:a9:36:d4:
87:2b:1b:78:07:bc:79:dd:8b:92:f4:78:72:33:0e:88:39:47:
4b:fd:8e:e3:23:a4:05:e8:16:db:7f:d0:44:5c:7c:fd:b7:5a:
c8:b8:72:24:b8:32:12:a2:15:25:d0:87:96:20:d9:e3:cd:06:
53:f8:97:10:7d:48:15:a5:3a:3f:95:27:59:60:a1:53:7d:94:
ca:15:88:73:39:69:73:97:05:fd:8e:50:0b:9e:d5:46:55:4e:
ae:48:02:5f:97:b9:16:73:6c:cb:fe:69:ec:5c:01:46:b5:93:
3f:60:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:19 2025 by rpki-client