Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File: gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier: qEesuRAhqogyFsoKE/BM2kl69j15ZKO/5CK4SS+eODg=
Subject key identifier: 4B:14:9C:AA:63:CB:96:BD:65:4B:1D:8F:7A:43:04:99:5E:C5:B9:59
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer: /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial: 0198790897E392A1105114E33F1D26EC912B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number: 029D
Signing time: Tue 05 Aug 2025 07:01:02 +0000
Manifest this update: Tue 05 Aug 2025 07:01:02 +0000
Manifest next update: Wed 06 Aug 2025 07:01:02 +0000
Files and hashes: 1: MxQNfpi-fhkY4RJBYH0rmNMo89A.roa (hash: LDqZG0CpfjjbhzqTlBUwL76WIHLWIHUvF2f/c9xQewQ=)
2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: NUWq3gTLBqpbofD3RBVZAYah2M1HeknoHJ3HrYIkl7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:97:e3:92:a1:10:51:14:e3:3f:1d:26:ec:91:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
Validity
Not Before: Aug 5 07:01:02 2025 GMT
Not After : Aug 6 07:01:02 2025 GMT
Subject: CN=4b149caa63cb96bd654b1d8f7a4304995ec5b959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:76:a1:f6:a3:ad:4d:6c:c6:97:8e:bf:0f:
0e:bd:2b:39:6a:0d:be:c0:e6:b9:d5:0b:2a:9f:cc:
dd:72:65:ea:2e:b0:1b:5f:6c:2a:5c:19:ea:45:22:
27:c2:eb:a4:85:09:e8:ae:4a:83:d8:34:91:1a:ee:
a5:0d:65:d1:7d:ab:b4:f5:10:cf:30:17:b7:77:d6:
13:f8:7d:95:65:8b:5b:fa:93:b6:7b:a9:98:8e:8e:
ca:2a:15:7e:43:85:68:3a:61:a5:c2:00:ee:b6:59:
e2:6b:32:b6:55:a1:f2:77:f7:48:f6:51:9b:92:83:
f9:e6:4f:a5:fd:71:db:7f:e8:e1:75:8a:c1:19:50:
35:23:8f:fd:80:1a:15:cd:ce:af:21:6c:78:59:c2:
0a:4a:35:2d:93:fb:4a:c5:08:00:ae:12:2d:10:5d:
54:f6:82:7c:79:81:5d:b3:99:98:ec:8d:80:2b:c4:
4b:ad:64:38:49:56:c4:aa:aa:c3:aa:d7:ee:7a:e9:
cf:37:7f:26:c7:b6:4c:14:b6:df:39:cd:2f:13:a7:
df:71:0b:df:1b:02:44:78:17:5c:f5:04:0d:42:39:
be:fc:84:da:88:f8:59:a2:b4:8b:13:9d:97:13:be:
30:2b:94:a2:b8:4c:57:08:88:7e:10:77:da:47:8a:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:9C:AA:63:CB:96:BD:65:4B:1D:8F:7A:43:04:99:5E:C5:B9:59
X509v3 Authority Key Identifier:
keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:0a:e5:35:76:c3:8c:fa:23:b4:f1:a1:33:53:6d:09:cc:66:
a5:3a:d1:61:51:7f:61:70:ff:ba:e4:02:9a:ad:ad:69:8d:36:
f6:d9:f6:a2:06:8e:a7:6a:ea:09:5f:16:fb:d5:e6:6d:47:6e:
51:58:15:dd:1c:9d:6f:e0:a8:2f:bb:34:ca:19:d6:41:d5:e9:
0e:22:cb:38:56:80:18:3c:6a:6e:95:d7:a9:ef:af:1d:ae:b5:
6f:00:56:40:d4:69:0d:7b:2c:b8:eb:58:32:a1:51:81:0d:5f:
55:d0:f8:3c:d7:e6:df:55:e3:43:65:54:d9:0b:c0:f7:ff:75:
75:72:d1:f4:b0:f9:29:43:6f:f7:cc:09:55:ee:70:dd:92:d0:
7d:33:06:67:5c:6e:51:f1:df:2d:27:94:a5:2e:4a:ca:52:59:
f9:42:20:12:c6:25:3e:1f:bb:0f:7e:bc:62:d2:09:fe:b3:1f:
03:5a:24:b9:85:6b:e7:ff:12:ca:a0:fd:af:77:a3:c8:5e:8f:
c7:08:f8:98:6f:03:7b:01:9b:5e:0d:24:57:99:fe:9a:6a:17:
6d:6c:f3:22:97:d9:08:3c:54:57:89:44:7e:40:32:79:b8:41:
08:3d:74:33:f8:81:29:6e:a4:a9:91:c2:4e:15:9b:61:03:c0:
c7:6b:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:44 2025 by rpki-client