Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
File: gyO5cxsZaxrLyCn1sosyX9nT49Q.mft (raw, json)
Hash identifier: vhtMp4bXswfdiwrdcYWDr2WlrX511gDJMBFJSUM1INE=
Subject key identifier: 85:E4:4B:5D:21:19:B5:B2:64:0C:BE:87:14:22:A5:30:A3:3D:7B:4A
Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Certificate serial: 01988C8F8B639752454C54BF38F973406B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
Manifest number: 143B
Signing time: Sat 09 Aug 2025 02:01:14 +0000
Manifest this update: Sat 09 Aug 2025 02:01:14 +0000
Manifest next update: Sun 10 Aug 2025 02:01:14 +0000
Files and hashes: 1: 1-n1FQJdtrmSwdnekLdBoJCXaZLE.roa (hash: vl5yvgIUqNuSQTIxMaS41AEZa6z2Ung/hJMgS4H/xOQ=)
2: KUPJ1lDWM9H_O_nug1XhCm8CDY0.roa (hash: N5MTKqEvC4tpTv0nenMYPQJAtm9LjBH+zL/o+EsRhto=)
3: gyO5cxsZaxrLyCn1sosyX9nT49Q.crl (hash: tz7lqNjUy/9o5JewTuYxChd+zQl3/8AcVJcqTlGjovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:8b:63:97:52:45:4c:54:bf:38:f9:73:40:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4
Validity
Not Before: Aug 9 02:01:14 2025 GMT
Not After : Aug 10 02:01:14 2025 GMT
Subject: CN=85e44b5d2119b5b2640cbe871422a530a33d7b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:df:cf:d9:12:f9:ae:d9:8d:f5:c1:10:72:
56:11:0b:9f:32:e1:79:be:56:35:a5:c4:4f:bd:e7:
29:6f:e3:32:1e:83:4e:8a:54:6a:94:04:17:bc:5a:
57:5b:9a:61:87:f0:29:b1:fc:34:4f:71:0d:92:d5:
0c:4a:ab:91:71:bc:de:fe:9c:76:33:51:db:ad:56:
93:2e:83:e3:9a:e6:fc:b7:08:e8:e1:a8:05:c8:45:
80:a8:57:ce:6d:bc:8c:f9:78:f2:a8:ae:98:09:d5:
3c:14:e4:b8:b9:3c:b1:b6:26:83:4c:32:df:a2:52:
5e:85:0a:5f:7d:1c:97:cb:19:cf:cc:4c:30:c8:3d:
ff:cf:f8:6e:2e:29:f2:84:22:bd:82:3f:31:83:fd:
56:1f:8f:ea:87:a0:55:aa:41:19:e3:d7:53:35:0b:
ea:12:59:ad:2a:56:03:08:ea:4a:67:c4:d6:4c:4a:
0f:c0:57:cd:0b:8a:5a:42:fe:f5:2d:69:7f:b3:f9:
a9:e6:3d:ea:d6:cb:04:27:3d:fa:93:bb:95:45:a9:
11:b8:9d:e0:55:0a:5c:87:38:75:4e:be:79:8f:a5:
4d:5f:bb:a2:a5:f5:50:2f:8c:22:c1:9e:76:6e:b5:
45:d7:e2:3c:d5:4f:ee:8d:eb:11:cf:7c:5d:f1:95:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:4B:5D:21:19:B5:B2:64:0C:BE:87:14:22:A5:30:A3:3D:7B:4A
X509v3 Authority Key Identifier:
keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:22:63:45:33:b9:52:82:71:7d:5d:d5:21:8e:28:02:61:d9:
16:fd:09:e8:a5:e8:46:6c:a3:1c:99:78:ae:5e:94:93:e9:42:
d3:12:5d:00:d1:e2:bf:48:35:bf:ad:c2:0a:36:86:c1:5d:f6:
98:b3:dd:c6:ba:ab:f4:de:ff:82:d4:da:7b:6b:c4:02:7d:80:
43:d9:6d:27:e1:8a:04:b9:e1:81:d1:c6:da:21:b2:c7:2c:d7:
d5:13:76:29:d8:cb:2d:fa:4c:2f:bd:ef:4e:1d:c3:ec:36:f8:
8c:10:24:b5:f7:4f:23:ca:28:c3:9e:4e:58:f7:e7:55:2f:f3:
99:a1:d1:d0:59:66:95:68:4e:fb:98:51:08:0d:1b:ab:cc:89:
fd:9f:50:f2:a0:63:ff:d1:cf:bf:6e:c0:31:af:5b:1c:1d:fb:
4a:18:81:ce:02:f4:fd:bb:63:43:d3:e7:8f:42:97:88:8c:bd:
64:2b:0c:8f:c2:23:87:84:b1:f6:99:f1:38:f7:36:eb:f8:a4:
2d:e4:14:ce:d9:f2:c6:02:70:42:34:3b:4e:4e:f0:16:77:0f:
66:6c:ef:d6:c4:79:51:d9:9c:7c:7b:8c:88:3d:c5:a0:bc:cc:
c9:05:d5:9e:fb:87:c1:c8:a6:41:82:19:ee:b0:7b:61:0e:08:
90:5f:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:54 2025 by rpki-client