Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File: Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier: eYzXCrofVNJQfOCOJYEq/+Ts0ERZDVU/xwfXppSmKq4=
Subject key identifier: 86:C6:2A:3A:45:F7:11:E4:3B:BF:8E:E6:98:B6:E7:A6:ED:B4:0B:7E
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0198537B3FCEF47210AAF2461E408CDF467F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number: 0B8B
Signing time: Tue 29 Jul 2025 00:00:42 +0000
Manifest this update: Tue 29 Jul 2025 00:00:42 +0000
Manifest next update: Wed 30 Jul 2025 00:00:42 +0000
Files and hashes: 1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: NLG5lz5ajJ2o0toGn1CvsL4dXKhEoI86EahVtgCLCn8=)
3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:3f:ce:f4:72:10:aa:f2:46:1e:40:8c:df:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Jul 29 00:00:42 2025 GMT
Not After : Jul 30 00:00:42 2025 GMT
Subject: CN=86c62a3a45f711e43bbf8ee698b6e7a6edb40b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0e:9f:38:a2:c2:c1:b5:90:d0:51:d9:93:f8:
ea:5c:07:a5:f7:e6:84:63:bb:4d:07:f0:7e:7b:2d:
58:60:a3:5d:f6:a2:56:d4:cc:24:29:0b:50:10:88:
61:0f:cb:92:1b:4c:91:f6:ce:b4:f3:03:7e:ea:c2:
f6:17:08:81:49:ce:c6:22:37:33:46:a0:c2:f1:5e:
a5:55:71:30:99:4e:8f:d2:6c:9f:c3:48:0d:1d:4b:
10:3b:9b:62:5b:1a:ed:89:52:c8:e3:ba:6e:c6:4b:
d0:43:67:e7:6a:f5:a9:cd:01:b5:23:59:c3:88:b5:
89:e0:f1:47:2d:76:b2:7c:ee:47:1d:ab:c6:9c:2b:
b0:db:e0:95:af:c7:a2:ae:18:e0:8d:88:9d:2c:37:
99:0f:9e:cb:52:58:ae:55:ad:7f:8a:18:32:3c:d1:
86:a3:18:11:8a:93:08:18:7d:45:f9:99:5e:c6:e8:
25:54:c5:9a:9d:5e:2c:f9:bc:1a:66:d5:ad:8d:c1:
89:09:38:96:72:06:01:6b:6c:77:10:79:92:09:d1:
28:64:30:43:c2:af:b3:54:00:26:f1:2d:eb:e1:de:
cc:1d:51:3b:b6:79:97:33:82:1b:76:c3:a5:4f:27:
99:39:61:c4:32:2f:0c:bc:d2:ec:09:64:25:d1:da:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C6:2A:3A:45:F7:11:E4:3B:BF:8E:E6:98:B6:E7:A6:ED:B4:0B:7E
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:88:ae:73:f6:9a:f0:98:2b:64:81:7a:fc:ff:35:fc:51:
65:2e:8b:3c:4b:89:d3:d8:4a:a4:7b:b7:42:ef:48:bb:bb:21:
33:c9:eb:c8:41:24:bf:58:91:23:c0:58:75:73:78:fb:6f:8c:
aa:fc:30:5b:62:7e:88:7e:e1:b0:d1:9c:55:69:89:da:0f:01:
4b:dc:bd:1c:fd:ea:a9:44:5b:c0:79:30:ad:29:f0:f8:03:e9:
4e:f7:cd:49:6f:af:99:cf:66:2a:e7:b9:8b:ad:b1:64:f1:6d:
5d:dc:f0:7a:62:e9:a7:a8:b3:36:3e:a7:41:53:87:75:4f:ba:
0e:af:c1:34:d9:68:b2:10:24:0a:28:8f:65:6c:ed:13:e5:fd:
d9:1f:20:98:1e:1a:03:d3:1d:23:e4:d6:63:39:f4:db:14:76:
32:48:d9:b9:4e:76:b1:64:64:af:b2:43:ba:a6:16:ac:df:99:
17:ac:ca:9a:07:f1:e6:6a:f7:65:cd:5a:b7:6c:6c:90:8e:37:
30:bd:97:9b:60:9d:2a:b3:20:cf:23:a7:1c:be:ad:0a:08:ec:
df:17:d1:f6:12:86:9b:2e:af:de:1e:69:15:8d:5c:1a:ba:20:
39:2c:40:50:ef:cf:90:f5:f1:89:36:8c:f9:26:8f:a8:ee:77:
24:95:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:14:36 2025 by rpki-client