
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
File: gwI7OXBbNFqG7_PxTvax5NtFk54.mft (raw, json)
Hash identifier: awlyBVc/DvOUDUUeT88VvHdbqL5O7pG8eHDwBi2hkn0=
Subject key identifier: CF:DD:01:01:FC:A6:07:80:5F:18:9B:03:8D:69:61:F8:9A:5E:F3:81
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 01987C0945DE4CC211DF07C959ECC40B6432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
Manifest number: 0EB2
Signing time: Tue 05 Aug 2025 21:00:39 +0000
Manifest this update: Tue 05 Aug 2025 21:00:39 +0000
Manifest next update: Wed 06 Aug 2025 21:00:39 +0000
Files and hashes: 1: 1-xAAXQxUbK7GDdH6uCkdwm9GcKQ.roa (hash: 4wGfnneRjqqcoqI8J1mtTnFBuWzrhvTfIpD3nl/XM2s=)
2: gwI7OXBbNFqG7_PxTvax5NtFk54.crl (hash: sloRzzIJ535NaC4EojR3YwX/BepQ2wQs+el97AFEYlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:45:de:4c:c2:11:df:07:c9:59:ec:c4:0b:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Aug 5 21:00:39 2025 GMT
Not After : Aug 6 21:00:39 2025 GMT
Subject: CN=cfdd0101fca607805f189b038d6961f89a5ef381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:51:46:22:74:83:8f:27:cd:78:b1:0d:71:
95:3b:6d:c6:1c:d3:9a:6a:6f:df:ca:38:27:f7:b1:
79:49:79:6f:2d:17:64:86:44:dc:55:d5:22:46:60:
cb:eb:96:3d:03:b6:98:67:04:8e:d5:8d:31:d6:55:
09:11:75:62:e3:7c:ce:4d:2f:6d:53:44:a0:73:a6:
16:0e:c4:71:ee:97:c9:3e:be:21:15:1f:d9:f9:c4:
12:eb:24:c9:f6:e2:26:1a:45:1c:aa:4e:c7:39:a3:
66:1b:b3:ab:1d:0c:c9:73:6d:5d:1f:69:be:a5:40:
cb:cc:70:eb:40:b9:82:7b:d0:e8:b9:92:8e:39:2e:
38:bd:dd:e9:08:e7:ed:3b:7f:d5:a8:09:c6:b2:79:
b8:a7:2e:5e:86:8e:bb:25:3a:88:78:fb:db:7c:4a:
a5:ae:56:3b:44:c8:09:98:cd:b4:29:6e:9c:6c:b1:
86:21:10:30:6a:c3:f6:8c:de:db:b3:f1:c9:8e:12:
2a:d2:df:1e:04:0a:f7:87:72:3b:f5:cc:ac:24:71:
02:e5:da:72:05:90:72:2e:6b:7d:a5:9d:fb:b6:a5:
b9:82:cf:e9:d9:b6:35:ad:07:fe:7c:e8:e6:b8:06:
fa:34:fe:d2:e8:4d:0c:72:ef:1e:1e:9f:f1:c9:f5:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:01:01:FC:A6:07:80:5F:18:9B:03:8D:69:61:F8:9A:5E:F3:81
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:4f:60:ab:52:98:ab:99:b7:b7:85:fa:1b:30:aa:79:b6:
f4:6f:98:d3:36:cf:a9:06:be:6f:33:4a:e3:93:f6:71:c2:8f:
f3:cc:1b:d9:1a:d9:9f:8f:cc:6b:9d:d2:46:20:57:f6:34:43:
a2:ab:30:09:e5:18:43:2e:28:cd:d6:e0:82:9a:c9:f6:ed:cc:
33:6b:e5:3c:29:33:9f:74:19:f2:ce:25:65:89:1f:18:c9:3e:
3f:3e:f1:f8:51:94:c1:f6:01:e3:98:37:3f:bf:e9:b6:d9:f0:
47:b5:cd:eb:3f:74:e3:fe:4e:dd:a9:c2:21:95:6d:61:d7:05:
c7:7f:7a:7e:26:17:3c:20:24:6f:01:e7:81:75:76:65:cc:b5:
c8:4c:d4:68:fe:4e:d9:20:1d:d9:c8:9f:da:5a:a7:db:63:d0:
c1:c6:4e:bb:d5:07:65:e7:00:ca:1e:1a:af:9a:57:bb:7b:1e:
88:1d:b8:d1:7f:8b:29:01:06:57:b6:32:ff:b7:1b:44:1a:89:
0f:52:03:2f:8d:2b:a1:9a:9b:cd:1f:d9:e6:0d:22:06:50:fe:
27:c4:f9:c2:73:98:8c:de:ad:ba:1a:97:38:2e:cb:ee:4f:f7:
66:14:64:0c:73:e2:6b:9f:3c:5c:3f:a1:ef:c7:27:38:40:08:
31:8d:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:11 2025 by rpki-client