
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File: gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier: 05k/hlPQDPB5iO2Hh2r/LETDNBCbxpyK0NqM7YFiL/I=
Subject key identifier: AD:C2:E8:58:B7:E2:7D:67:B5:F8:E7:D6:34:6A:E6:23:CB:5A:2F:2C
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 01974BC47D79A3CAEFC32D217CA1E068E61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number: 093A
Signing time: Sat 07 Jun 2025 19:00:57 +0000
Manifest this update: Sat 07 Jun 2025 19:00:57 +0000
Manifest next update: Sun 08 Jun 2025 19:00:57 +0000
Files and hashes: 1: 0x8juoo7AM8ugf31uQycejLtims.roa (hash: sJQg/bbbZFsef+zbbHa9OzqRT4fumHdl0Xl81Is/6E0=)
2: Nzh8YLpNUF4cU0rzBjfGCERDcYE.roa (hash: i2B2OXXjCTbw2kGS650IvMFo0E46R+ycXmvCyPDbizQ=)
3: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (hash: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=)
4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: 7A3JmG3Gqix77R2XC2xTIe6rMtm0y2eNCizW92Mc06o=)
5: i4pBlijYu7sjz616Su8j6sEp0KM.roa (hash: uHKnyOrHeN8Niu67x/4Qi3vMRGo0ABBXAuttwGbGRuk=)
6: ln-K5Ow9TejgLd4PysWSoQKqiZ4.roa (hash: 6WaUskC8pwU9MAQIbeJthvJXrFOJkM+1fup3ku3957c=)
7: sizZNRJeMyfvZoIYAB6UC-zVc7U.roa (hash: Hn9xitBE6shoqbTIVL8aOgZmfrDePFpERxPmyPyqVEs=)
8: vywQrYyohPA7HiVpUnZvxi_OkIw.roa (hash: 9ddLtzX64XyzhFvBqGsy3QFMWw7/oarf8SrkFQVzpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:7d:79:a3:ca:ef:c3:2d:21:7c:a1:e0:68:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jun 7 19:00:57 2025 GMT
Not After : Jun 8 19:00:57 2025 GMT
Subject: CN=adc2e858b7e27d67b5f8e7d6346ae623cb5a2f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:17:4e:97:1c:1f:cd:a2:56:b1:e9:40:b7:
35:17:31:e6:d1:e6:c8:0a:0c:9b:6a:0b:12:c3:c0:
9e:db:02:61:74:ea:72:29:36:ed:67:59:77:4f:68:
a6:d5:74:58:31:85:2c:aa:d4:c9:f0:2b:54:23:94:
48:95:af:ef:61:ae:29:53:da:ef:d1:ea:31:75:d6:
a5:77:1b:4a:0d:d8:08:5a:0b:08:b3:b2:b4:c9:f3:
7c:fc:00:5c:0c:df:b2:ca:97:5c:56:37:a4:cc:d9:
34:e4:cc:bf:c4:5f:1d:56:5b:1e:49:ba:a9:59:62:
4a:36:2e:ca:83:50:30:c0:c0:ca:86:dc:63:1d:6d:
f0:3c:61:26:06:ec:d5:9d:49:da:b4:06:3f:fa:7b:
b0:e6:3e:06:f5:42:b2:14:59:7f:f8:9d:15:ab:12:
54:eb:33:7b:fa:e5:1a:f0:e4:7a:e7:8a:7b:2f:3b:
d8:e4:3a:6c:79:84:1c:f6:fe:d5:02:6d:42:94:bd:
aa:ac:b1:f4:b4:f3:fc:7c:bd:6f:37:98:cf:13:52:
9b:0b:99:50:c4:e9:eb:a9:c6:da:a1:77:ed:00:41:
69:0e:c7:f6:ef:23:c8:e3:a5:e6:f1:3e:eb:9e:51:
44:2d:8e:c6:50:6b:5b:18:86:8e:cd:2d:b5:ad:d2:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:E8:58:B7:E2:7D:67:B5:F8:E7:D6:34:6A:E6:23:CB:5A:2F:2C
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:48:c4:f7:d8:b3:20:05:10:a6:1a:69:0c:6e:18:39:ef:
7d:b7:02:4e:45:b3:66:0d:ac:5a:a7:2a:19:17:d2:a7:f7:ac:
cd:57:ea:65:71:dc:f3:d1:88:f8:8b:3c:d0:80:54:29:9d:63:
40:32:ce:84:62:87:0b:ea:42:cf:da:4c:ea:48:b4:c5:a5:71:
98:6f:f8:55:ab:2b:8c:b3:0c:68:aa:73:c7:38:46:e3:32:a0:
c3:27:88:53:5f:c8:a8:12:c0:a9:d4:95:4e:33:3c:bb:a1:11:
69:1c:7e:50:af:7d:7f:70:9e:a0:d3:ba:38:2d:01:9c:1f:b6:
2f:e3:af:43:08:7b:37:86:bd:e1:ba:f1:ec:d6:34:3b:38:dd:
26:11:23:0c:6d:c6:10:97:03:46:03:48:96:1a:18:51:39:03:
ba:4c:6d:fc:b1:5c:da:f1:6a:3f:ff:17:39:a5:43:a1:10:24:
63:cb:0a:33:a6:05:55:99:48:c1:f8:dc:14:80:a8:f4:de:df:
96:a3:a0:46:e3:87:a1:68:3d:1b:8e:4a:79:62:6a:ef:d2:6f:
d5:0d:45:61:66:8d:3d:cf:e4:81:1c:a8:13:7b:cf:0f:22:4b:
ca:cf:ec:df:11:2c:00:61:2f:02:21:b0:70:29:f3:3e:bc:47:
d7:94:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:19:18 2025 by rpki-client