Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: vlT7mbiAgoLU1DksbwIhqYU7ns9X70MpBBhl3EH8a/0=
Subject key identifier: 70:3B:77:02:27:A4:FC:08:B4:EA:A1:36:5E:94:FD:A3:8A:A9:1D:05
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0198801D9CA006A01AE44BEC912F3B4EFDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0908
Signing time: Wed 06 Aug 2025 16:01:20 +0000
Manifest this update: Wed 06 Aug 2025 16:01:20 +0000
Manifest next update: Thu 07 Aug 2025 16:01:20 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: gAkZx7ZXTeIZD6w6rz6CyJJEudu7yNoPHxhPIsUVUQE=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:9c:a0:06:a0:1a:e4:4b:ec:91:2f:3b:4e:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Aug 6 16:01:20 2025 GMT
Not After : Aug 7 16:01:20 2025 GMT
Subject: CN=703b770227a4fc08b4eaa1365e94fda38aa91d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:e0:ec:db:06:05:61:93:8c:8e:85:f0:74:
0b:a6:f7:38:94:97:8f:50:6c:93:47:62:54:f8:93:
c1:56:ac:49:74:8c:6e:03:e3:f5:79:65:f3:34:d3:
75:71:7a:a2:60:51:34:69:7b:f3:3f:96:66:2c:df:
c9:91:bd:17:62:54:18:8c:8d:02:b6:c7:1c:b4:e7:
ab:ac:f5:6f:d8:40:07:49:b4:3c:ea:ab:b1:8b:8c:
eb:8b:b2:3e:b1:ac:13:8c:1a:44:53:38:23:7e:7b:
7e:c9:3d:f0:73:57:16:3b:26:13:29:90:0d:f1:4f:
bc:38:2e:fd:2d:3d:0e:2e:e6:da:b1:54:59:65:5b:
1d:71:66:a4:66:fa:d7:91:b5:22:7f:3c:5b:7f:9b:
dc:da:86:16:d9:bb:ab:e7:1b:58:ea:f8:97:41:42:
7d:75:d5:77:f7:10:14:8c:1c:05:40:3b:33:18:bf:
0e:76:00:9b:e9:4e:23:9d:be:c5:b9:80:21:48:45:
d2:29:79:6d:25:d2:69:ae:25:0e:cb:39:c2:42:3e:
38:b4:be:ee:3f:fd:dc:be:c5:9f:44:ec:f2:b7:e8:
59:07:e3:60:45:ef:80:1c:29:c2:4b:91:8c:77:a7:
1d:59:8a:58:5d:93:bc:a7:c5:4a:3f:8f:c8:73:5b:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:77:02:27:A4:FC:08:B4:EA:A1:36:5E:94:FD:A3:8A:A9:1D:05
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:e8:d2:4b:24:c5:c2:04:27:0d:23:7e:72:13:7e:81:22:
4a:a7:20:97:9d:dd:57:a2:52:4b:c5:ba:fd:c4:28:82:ff:c8:
77:24:38:80:c7:df:5c:f0:95:2f:7b:28:22:41:56:2a:f8:1e:
80:63:97:52:88:79:74:40:d6:ae:24:4d:07:1f:07:41:b7:9a:
9d:ba:44:a0:55:2b:90:a9:95:99:8d:0c:2c:bb:2d:c1:42:cc:
bf:d2:5b:ab:07:31:52:e6:fe:27:d6:5a:92:5c:bf:3d:c9:a9:
23:e7:22:0e:a4:e6:cf:d8:b2:47:ae:e5:ef:4f:ba:d1:2b:79:
91:a3:78:8e:12:8a:db:69:58:6e:a9:30:5e:ea:99:8f:57:f0:
c7:31:a7:7b:c4:d1:f1:c8:1f:e8:d9:f3:ce:f9:53:d6:da:fa:
0f:41:06:5a:2b:f2:0a:a9:d5:f0:e5:b0:e5:64:4a:29:8b:e8:
d1:04:6a:59:5b:5f:25:4d:df:d2:f3:c6:fe:41:bb:96:28:77:
16:91:3e:b2:4d:02:3e:43:f9:18:0a:cf:2f:4b:86:0e:9b:29:
fc:94:20:1c:c7:8f:3f:c9:24:bf:d0:dd:e9:9e:88:a2:8a:f3:
a5:5a:56:ba:a2:d2:2f:63:1c:0e:94:a9:39:a1:06:f3:3e:7e:
6e:21:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:19 2025 by rpki-client